Amazon CLF-C01 Dumps - AWS Certified Cloud Practitioner PDF Sample Questions

Exam Code:
CLF-C01
Exam Name:
AWS Certified Cloud Practitioner
310 Questions
Last Update Date : 24 March, 2023
PDF + Test Engine
$89 $115.7
Test Engine Only Demo
$79 $102.7
PDF Only Demo
$59 $76.7

Amazon CLF-C01 This Week Result

0

They can't be wrong

0

Score in Real Exam at Testing Centre

0

Questions came word by word from this dumps

Best Amazon CLF-C01 Dumps - pass your exam In First Attempt

Our CLF-C01 dumps are better than all other cheap CLF-C01 study material.

Only best way to pass your Amazon CLF-C01 is that if you will get reliable exam study materials. We ensure you that realexamdumps is one of the most authentic website for Amazon AWS Certified Developer Associate exam question answers. Pass your CLF-C01 AWS Certified Cloud Practitioner with full confidence. You can get free AWS Certified Cloud Practitioner demo from realexamdumps. We ensure 100% your success in CLF-C01 Exam with the help of Amazon Dumps. you will feel proud to become a part of realexamdumps family.

Our success rate from past 5 year very impressive. Our customers are able to build their carrier in IT field.

Owl
Search

45000+ Exams

Buy

Desire Exam

Download

Exam

and pass your exam...

Related Exam

Realexamdumps Providing most updated AWS Certified Developer Associate Question Answers. Here are a few exams:


Sample Questions

Realexamdumps Providing most updated AWS Certified Developer Associate Question Answers. Here are a few sample questions:

Amazon CLF-C01 Sample Question 1

When using Amazon RDS what is the customer responsible for?


Options:

A. Patching and maintenance of the underlying operating system
B. Managing automatic backups of the database
C. Controlling network access through security groups
D. Replacing failed instances in the event of a hardware failure

Answer: D

Amazon CLF-C01 Sample Question 2

Which of the following is a fully managed MySQL-compatible database?


Options:

A. Amazon S3
B. Amazon DynamoDB
C. Amazon Redshift
D. Amazon Aurora

Answer: E

Amazon CLF-C01 Sample Question 3

When an Amazon EC2 instance is terminated, which AWS service can identify the user that made the API call?


Options:

A. Amazon CloudWatch
B. AWS CloudTrail
C. AWS X-Ray
D. AWS Identity and Access Management (IAM)

Answer: C

Amazon CLF-C01 Sample Question 4

A company has set up its IT infrastructure in the AWS Cloud. The company wants to receive detailed reports that break down AWS costs by the hour. The reports must be placed in an Amazon S3 bucket. Which AWS tool will meet these requirements?


Options:

A. AWS Cost and Usage Reports
B. AWS Pricing Calculator
C. Cost Explorer
D. AWS Budgets

Answer: B

Amazon CLF-C01 Sample Question 5

An IT department provisions more servers than are needed to run a workload.

Which cloud architecture design principle supports changing this approach?


Options:

A. Protect data in transit and at rest
B. Stop guessing capacity
C. Improve through game days
D. Annotate documentation

Answer: C

Amazon CLF-C01 Sample Question 6

What is a responsibility of AWS in the shared responsibility model?


Options:

A. Updating the network ACLs to block traffic to vulnerable ports.
B. Patching operating systems running on Amazon EC2 instances.
C. Updating the firmware on the underlying EC2 hosts.
D. Updating the security group rules to block traffic to the vulnerable ports.

Answer: C Explanation: Reference: [Reference: https://cloudacademy.com/blog/aws-shared-responsibility-model-security/, ]

Amazon CLF-C01 Sample Question 7

Which services can be used to deploy applications on AWS? (Select Two.)


Options:

A. AWS Elastic Beanstalk
B. AWS Config
C. AWS OpsWorks
D. AWS Application Discovery Service
E. Amazon Kinesis

Answer: A, E

Amazon CLF-C01 Sample Question 8

Which tool should a developer use to integrate AWS service features directly into an application?


Options:

A. AWS Software Development Kit
B. AWS CodeDeploy
C. AWS Lambda
D. AWS Batch

Answer: B

Amazon CLF-C01 Sample Question 9

What is an AWS Region?


Options:

A. A broad set of global, cloud-based products that include compute, storage, and databases
B. A physical location around the world where data centers are clustered
C. One or more discrete data centers with redundant power, networking, and connectivity
D. A service that developers use to build applications that deliver latencies of single-digit milliseconds to users

Answer: B Explanation: Explanation: AWS has the concept of a Region, which is a physical location around the world where we cluster data centers. We call each group of logical data centers an Availability Zone. Each AWS Region consists of multiple, isolated, and physically separate AZs within a geographic area.

Amazon CLF-C01 Sample Question 10

A company needs real-time guidance to follow AWS best practices to save money, improve system performance, and close security gaps. Which AWS service should the company use?


Options:

A. Amazon GuardDuty
B. AWS Trusted Advisor
C. AWS Management Console
D. AWS Systems Manager

Answer: B Explanation: Explanation: AWS Trusted Advisor provides recommendations that help you follow AWS best practices. Trusted Advisor evaluates your account by using checks.

Amazon CLF-C01 Sample Question 11

Which of the following is a way to use Amazon EC2 Auto Scaling groups to scale capacity in the AWS Cloud?


Options:

A. Scale the number of EC2 instances in or out automatically, based on demand.
B. Use serverless EC2 instances.
C. Scale the size of EC2 instances up or down automatically, based on demand.
D. Transfer unused CPU resources between EC2 instances.

Answer: B

Amazon CLF-C01 Sample Question 12

A company has existing software licenses that it wants to bring to AWS, but the licensing model requires licensing physical cores. How can the company meet this requirement in the AWS Cloud?


Options:

A. Launch an Amazon EC2 instance with default tenancy.
B. Launch an Amazon EC2 instance on a Dedicated Host.
C. Create an On-Demand Capacity Reservation.
D. Purchase Dedicated Reserved Instances.

Answer: C

Amazon CLF-C01 Sample Question 13

A developer is working on enhancing applications at AWS. The developer needs a service that can securely host GitHub-based code, repositories, and version controls. Which AWS service should the developer use?


Options:

A. AWS CodeStar
B. Amazon CodeGuru
C. AWS CodeCommit
D. AWS CodePipeline

Answer: D

Amazon CLF-C01 Sample Question 14

A retail company is migrating its IT infrastructure applications from on premises to the AWS Cloud.

Which costs will the company eliminate with this migration? (Select TWO.)


Options:

A. Cost of data center operations
B. Cost of application licensing
C. Cost of marketing campaigns
D. Cost of physical server hardware
E. Cost of network management

Answer: A, E

Amazon CLF-C01 Sample Question 15

A company manages global applications that require static IP addresses.

Which AWS service would enable the company to improve the availability and performance of its applications?


Options:

A. Amazon CloudFront
B. AWS Global Accelerator
C. Amazon S3 Transfer Acceleration
D. Amazon API Gateway

Answer: B Explanation: Explanation: AWS Global Accelerator provides you with a set of static IP addresses that can map to multiple application endpoints across AWS Regions, to improve redundancy.

Amazon CLF-C01 Sample Question 16

A company stores configuration files in an Amazon S3 bucket. These configuration files must be accessed by applications that are running on Amazon EC2 instances.

According to AWS security best practices, how should the company grant permissions to allow the applications to access the S3 bucket?


Options:

A. Use the AWS account root user access keys.
B. Use the AWS access key ID and the EC2 secret access key.
C. Use an IAM role with the necessary permissions.
D. Activate multi-factor authentication (MFA) and versioning on the S3 bucket.

Answer: D

Amazon CLF-C01 Sample Question 17

A company wants to migrate its on-premises Microsoft SQL Server database server to the AWS Cloud. The company has decided to use Amazon EC2 instances to run this database.

Which of the following is the company responsible for managing, according to the AWS shared responsibility model?


Options:

A. EC2 hypervisor
B. Security patching of the guest operating system
C. Network connectivity of the host server
D. Uptime service level agreement (SLA) for the EC2 instances

Answer: C

Amazon CLF-C01 Sample Question 18

A developer has a legacy application that is hosted on-premises Other applications hosted on AWS depend on the on-premises application for proper functioning In case of any application errors, the developer wants to be able to use Amazon CloudWatch to monitor and troubleshoot all applications from one place.

How can the developer accomplish this?


Options:

A. Install an AWS SDK on the on-premises server to automatically send logs to CloudWatch.
B. Download the CloudWatch agent to the on-premises server Configure the agent to use I AM user credentials with permissions for CloudWatch
C. Upload log files from the on-premises server to Amazon S3 and have CloudWatch read the files.
D. Upload log files from the on-premises server to an Amazon EC2 instance and have the instance forward the logs to CloudWatch

Answer: C

Amazon CLF-C01 Sample Question 19

Which AWS service can help a company detect an outage of its website servers and redirect users to alternate servers?


Options:

A. Amazon CloudFront
B. Amazon GuardDuty
C. Amazon Route 53
D. AWS Trusted Advisor

Answer: C Explanation: Explanation: Amazon Route 53 with DNS Failover, Amazon Route 53 can help detect an outage of your website and redirect your end users to alternate locations where your application is operating properly.

Amazon CLF-C01 Sample Question 20

A company needs to run an application on Amazon EC2 instances. The instances cannot be interrupted at any time. The company needs an instance purchasing option that requires no long-term commitment or upfront payment. Which instance purchasing option will meet these requirements MOST cost-effectively?


Options:

A. On-Demand Instances
B. Spot Instances
C. Dedicated Hosts
D. Reserved Instances

Answer: B

Amazon CLF-C01 Sample Question 21

A company discovered unauthorized access to resources in its on-premises data center. Upon investigation, the company found that the requests originated from a resource hosted on AWS. Which AWS team should the company contact to report this issue?


Options:

A. AWS Customer Service team
B. AWS Sales team
C. AWS Abuse team
D. AWS Technical Support team

Answer: E

Amazon CLF-C01 Sample Question 22

A company runs a web application on Amazon EC2 instances. The application must run constantly and is expected to run indefinitely without interruption.

Which EC2 instance purchasing options will meet these requirements MOST cost-effectively? (Select TWO.)


Options:

A. On-Demand Instances
B. Spot Instances.
C. Reserved Instances
D. Savings Plans
E. Dedicated Hosts

Answer: B, C Explanation: Explanation: Amazon EC2 provides the following purchasing options to enable you to optimize your costs based on your needs:*On-Demand Instances – Pay, by the second, for the instances that you launch.*Savings Plans – Reduce your Amazon EC2 costs by making a commitment to a consistent amount of usage, in USD per hour, for a term of 1 or 3 years.*Reserved Instances – Reduce your Amazon EC2 costs by making a commitment to a consistent instance configuration, including instance type and Region, for a term of 1 or 3 years.*Spot Instances – Request unused EC2 instances, which can reduce your Amazon EC2 costs significantly.*Dedicated Hosts – Pay for a physical host that is fully dedicated to running your instances, and bring your existing per-socket, per-core, or per-VM software licenses to reduce costs.*Dedicated Instances – Pay, by the hour, for instances that run on single-tenant hardware.*Capacity Reservations – Reserve capacity for your EC2 instances in a specific Availability Zone for any duration.If you require a capacity reservation, purchase Reserved Instances or Capacity Reservations for a specific Availability Zone. Spot Instances are a cost-effective choice if you can be flexible about when your applications run and if they can be interrupted. Dedicated Hosts or Dedicated Instances can help you address compliance requirements and reduce costs by using your existing server-bound software licenses.

Amazon CLF-C01 Sample Question 23

Which of the following describes some of the core functionality of Amazon S3?


Options:

A. Amazon S3 is a high-performance block storage service that is designed for use with Amazon EC2
B. Amazon S3 is an object storage service that provides high-level performance, security, scalability, and data availability.
C. Amazon S3 is a fully managed, highly reliable, and scalable file storage system that is accessible over the industry-standard SMB protocol.
D. Amazon S3 is a scalable, fully managed elastic NFS for use with AWS Cloud services and on-premises resources.

Answer: B Explanation: Explanation: Amazon S3 is object storage built to store and retrieve any amount of data from anywhere. It’s a simple storage service that offers industry leading durability, availability, performance, security, and virtually unlimited scalability at very low costs.

Amazon CLF-C01 Sample Question 24

Which action will provide documentation to help a company evaluate whether its use of the AWS Cloud is compliant with local regulatory standards?


Options:

A. Running Amazon GuardDuty
B. Using AWS Artifact
C. Creating an AWS Support ticket
D. AWS Cloud Trail logs

Answer: C

Amazon CLF-C01 Sample Question 25

Which characteristic of the AWS Cloud helps users eliminate underutilized CPU capacity?


Options:

A. Agility
B. Elasticity
C. Reliability
D. Durability

Answer: C

Amazon CLF-C01 Sample Question 26

What is a benefit of using AWS serverless computing?


Options:

A. Application deployment and management are not required.
B. Application security will be fully managed by AWS.
C. Monitoring and logging are not needed.
D. Management of infrastructure is offloaded to AWS.

Answer: D Explanation: Explanation: Serverless computing allows you to build and run applications and services without thinking about servers. With serverless computing, your application still runs on servers, but all the server management is done by AWS.

Amazon CLF-C01 Sample Question 27

A company wants a cost-effective option when running its applications in an Amazon EC2 instance for short time periods. The applications can be interrupted. Which EC2 instance type will meet these requirements?


Options:

A. Spot Instances
B. On-Demand Instances
C. Reserved Instances
D. Dedicated Instances

Answer: A Explanation: Explanation: Spot Instances - Spot Instances are the most cost-effective choice if you are flexible about when your applications run and if your applications can be interrupted.

Amazon CLF-C01 Sample Question 28

Which AWS service automatically handles application health monitoring?


Options:

A. Amazon API Gateway
B. AWS Elastic Beanstalk
C. AWS Lambda
D. AWS Config

Answer: C

Amazon CLF-C01 Sample Question 29

Which AWS service or feature provides an online, managed software catalog that helps users purchase and deploy third-party software?


Options:

A. AWS Support
B. AWS Marketplace
C. Amazon EC2 private Amazon Machine Images (AMIs)
D. AWS reseller programs

Answer: D

Amazon CLF-C01 Sample Question 30

A company has existing software licenses thai it wants to bring to AWS, but the licensing model requires licensing physical cores. How can the company meet this requirement in the AWS Cloud?


Options:

A. Launch an Amazon EC2 instance with default tenancy.
B. Launch an Amazon EC2 instance on a Dedicated Host.
C. Create an On-Demand Capacity Reservation.
D. Purchase Dedicated Reserved Instances.

Answer: C

Amazon CLF-C01 Sample Question 31

Which AWS service provides managed DDoS protection?


Options:

A. AWS Firewall Manager
B. AWS Shield
C. Amazon GuardDuty
D. Amazon Inspector

Answer: C

Amazon CLF-C01 Sample Question 32

Which AWS service or tool can automatically identity security groups that grant unrestricted internet access to a list of ports?


Options:

A. AWS Firewall Manager
B. AWS Trusted Advisor
C. AWS Shield
D. Amazon EC2 dashboard

Answer: C

Amazon CLF-C01 Sample Question 33

Which guidelines are best practices for using AWS Identity and Access Management (IAM)? (Select TWO.)


Options:

A. Share access keys
B. Create individual IAM users
C. Use inline policies instead of customer managed policies
D. Grant maximum privileges to IAM users
E. Use groups to assign permissions to IAM users

Answer: C, F

Amazon CLF-C01 Sample Question 34

A company is running a reporting web server application on Amazon EC2 instances The application runs once every week and once again at the end of the month The EC2 instances can be shut down when they are not in use.

What is the MOST cost-effective billing model for this use case?


Options:

A. Standard Reserved Instances
B. Convertible Reserved Instances
C. On-Demand Capacity Reservations
D. On-Demand Instances

Answer: E

Amazon CLF-C01 Sample Question 35

Which AWS service or tool helps identify underutilized Amazon EC2 instances and idle Amazon RDS DB instances at no additional charge?


Options:

A. Cost Explorer
B. AWS Budgets
C. AWS Organizations
D. AWS Trusted Advisor

Answer: E

Amazon CLF-C01 Sample Question 36

A company spends several months upgrading its on-premises infrastructure every few years The company wants to reduce infrastructure procurement time by migrating to the AWS Cloud.

What is the main benefit of migrating to the AWS Cloud for this use case?


Options:

A. AWS will help move the existing hardware to the AWS data centers
B. The company will have increased agility with on-demand access to IT resources
C. Enterprise support will be available to help with recurring application installation and setup
D. The company will experience less downtime with Multi-AZ deployments

Answer: D

Amazon CLF-C01 Sample Question 37

A developer needs to maintain a development environment infrastructure and a production environment infrastructure in a repeatable fashion. Which AWS service should the developer use to meet these requirements?


Options:

A. AWS Ground Station
B. AWS Shield
C. AWS loT Device Defender
D. AWS CloudFormation

Answer: E

Amazon CLF-C01 Sample Question 38

A company is building a mobile app to provide shopping recommendations lo its customers. The company wants to use a graph database as part of the shopping recommendation engine.

Which AWS database service should the company choose?


Options:

A. Amazon DynamoDB
B. Amazon Aurora
C. Amazon Neptune
D. Amazon DocumentDB (with MongoDB compatibility)

Answer: D

Amazon CLF-C01 Sample Question 39

A company has a compliance requirement to encrypt data in transit and at rest. The company is serving the content through Amazon EC2 instances behind an Elastic Load Balancer! and is storing data in Amazon Elastic Block Store (Amazon EBS) volumes.

Which combination of AWS services should the company use to stay compliant with this requirement? (Select TWO.)


Options:

A. Amazon GuardDuty
B. AWS Shield
C. AWS Certificate Manager (ACM)
D. AWS Secrets Manager
E. AWS Key Management Service (AWS KMS)

Answer: C, F

Amazon CLF-C01 Sample Question 40

Which AWS service or feature allows a company to visualize, understand, and manage AWS costs and usage over time?


Options:

A. AWS Trusted Advisor
B. AWS CloudWatch
C. Cost Explorer
D. AWS Budgets

Answer: D

Amazon CLF-C01 Sample Question 41

A company suspects that its AWS resources are being used for harmful network activities, including port scanning and malware distribution.


Options:

A. AWS Abuse team
B. AWS technical account manager (TAM)
C. AWS Concierge Support
D. AWS Support team

Answer: B

Amazon CLF-C01 Sample Question 42

A company launched an Amazon EC2 instance with the latest Amazon Linux 2 Amazon Machine Image (AMI). Which actions can a system administrator take to connect to the EC2 instance? (Select TWO.)


Options:

A. Use Amazon EC2 Instance Connect.
B. Use a Remote Desktop Protocol (RDP) connection.
C. Use AWS Batch.
D. Use AWS Systems Manager Session Manager.
E. Use Amazon Connect.

Answer: A, E

Amazon CLF-C01 Sample Question 43

Which of the following are advantages of the AWS Cloud? (Select Two.)


Options:

A. AWS manages all the security within the cloud
B. Expenses never change from month to month
C. Users can stop spending money on the maintenance of data centers
D. Users do not need to deploy applications globally
E. Users can stop guessing about resource capacity

Answer: C, E Explanation: Explanation: Trade capital expense for variable expense – Instead of having to invest heavily in data centers and servers before you know how you’re going to use them, you can pay only when you consume computing resources, and pay only for how much you consume.Benefit from massive economies of scale – By using cloud computing, you can achieve a lower variable cost than you can get on your own. Because usage from hundreds of thousands of customers is aggregated in the cloud, providers such as AWS can achieve higher economies of scale, which translates into lower pay as-you-go prices.Stop guessing capacity – Eliminate guessing on your infrastructure capacity needs. When you make a capacity decision prior to deploying an application, you often end up either sitting on expensive idle resources or dealing with limited capacity. With cloud computing, these problems go away. You can access as much or as little capacity as you need, and scale up and down as required with only a few minutes’ notice.Increase speed and agility – In a cloud computing environment, new IT resources are only a click away, which means that you reduce the time to make those resources available to your developers from weeks to just minutes. This results in a dramatic increase in agility for the organization, since the cost and time it takes to experiment and develop is significantly lower.Stop spending money running and maintaining data centers – Focus on projects that differentiate your business, not the infrastructure. Cloud computing lets you focus on your own customers, rather than on the heavy lifting of racking, stacking, and powering servers.Go global in minutes – Easily deploy your application in multiple regions around the world with just a few clicks. This means you can provide lower latency and a better experience for your customers at minimal cost.

Amazon CLF-C01 Sample Question 44

Which terms describe the on-demand AWS pricing model? (Select TWO.)


Options:

A. Fixed term
B. Pay-as-you-go
C. Collocation
D. Planned
E. Variable expense

Answer: B, F

Amazon CLF-C01 Sample Question 45

Which AWS service should a company use to continuously monitor the compliance of AWS resource configurations?


Options:

A. AWS Organizations
B. AWS Config
C. AWS Artifact
D. AWS Service Catalog

Answer: C

Amazon CLF-C01 Sample Question 46

Which AWS service keeps track of SSUTLS certificates, creates new certificates, and processes renewals?


Options:

A. AWS Identity and Access Management (IAM)
B. AWS Certificate Manager (ACM)
C. AWS Config
D. AWS Trusted Advisor

Answer: C

Amazon CLF-C01 Sample Question 47

Which AWS services can host PostgreSQL databases? (Select TWO.)


Options:

A. Amazon S3
B. Amazon Aurora
C. Amazon EC2
D. Amazon Elasticsearch Service (Amazon ES)
E. Amazon Elastic File System (Amazon EFS)

Answer: B, D

Amazon CLF-C01 Sample Question 48

A company wants to add a layer of security beyond user names and passwords to make the login to the AWS Management Console more secure.

Which AWS service or feature can the company use to meet this requirement?


Options:

A. Secret access keys
B. AWS Security Token Service (AWS STS)
C. Multi-factor authentication (MFA)
D. IAM password policies

Answer: D

Amazon CLF-C01 Sample Question 49

A developer is making changes to a custom application that uses AWS Elastic Beanstalk.

Which solutions will update the Elastic Beanstalk environment with the new application version after the developer completes the changes? (Select TWO/)


Options:

A. Package the application code into a zip file. Use the AWS Management Console to upload the .zip file and deploy the packaged application.
B. Package the application code into a tar file Use the AWS Management Console to create a new application version from the tar file. Update the environment by using the AWS CLI.
C. Package the application code into a tar file Use the AWS Management Console to upload the tar file and deploy the packaged application
D. Package the application code into a zip file Use the AWS CLI to create a new application version from the zip file and to update the environment
E. Package the application code into a zip file. Use the AWS Management Console to create a new application version from the .zip file. Rebuild the environment by using the AWS CLI.

Answer: A, E

Amazon CLF-C01 Sample Question 50

A company has a web application that runs on Amazon EC2 instances with a custom Amazon Machine Image (AMI) The company uses AWS CloudFormation to provision the application. The application runs in the us-east-1 Region, and the company needs to deploy the application to the us-west-1 Region

An attempt to create the AWS CloudFormation stack in us-west-1 fails An error message states that the AMI ID does not exist A developer must resolve this error with a solution that uses the least amount of operational overhead.

Which solution meets these requirements?


Options:

A. Change the AWS CloudFormation templates for us-east-1 and us-west-1 to use an AWS AMI Relaunch the stack for both Regions
B. Copy the custom AMI from us-east-1 to us-west-1 Update the AWS CloudFormation template for us-west-1 to refer to AMI ID for the copied AMI. Relaunch the stack.
C. Build the custom AMI in us-west-1 Create a new AWS CloudFormation template to launch the stack in us-west-1 with the new AMI ID
D. Manually deploy the application outside AWS CloudFormation in us-west-1

Answer: C

Amazon CLF-C01 Sample Question 51

A developer has created a web API that uses Amazon Elastic Container Service (Amazon ECS) and an Application Load Balancer (ALB) An Amazon CloudFront distribution uses the API as an origin for web clients The application has received millions of requests with a JSON Web Token (JWT) that is not valid in the authorization header The developer has scaled out the application to handle the unauthenticated requests

What should the developer do to reduce the number of unauthenticated requests to the API?


Options:

A. Add a request routing rule to the ALB to return a 401 status code if the authorization header is missing
B. Add a container to the ECS task definition to validate JWTs Set the new container as a dependency of the application container
C. Create a CloudFront function for the distribution Use the crypto module in the function to validate the JWT
D. Add a custom authorizer for AWS Lambda to the CloudFront distribution to validate the JWT

Answer: E

Amazon CLF-C01 Sample Question 52

Which AWS service or tool provides a visualization of historical AWS spending patterns and projections of future AWS costs?


Options:

A. AWS Cost and Usage Report
B. AWS Budgets
C. Cost Explorer
D. Amazon CloudWatch

Answer: D

Amazon CLF-C01 Sample Question 53

Which AWS database allows for analytics that use SQL queries?


Options:

A. Amazon S3
B. Amazon Redshift
C. Amazon DynamoDB
D. Amazon Neplune

Answer: C

Amazon CLF-C01 Sample Question 54

A global company has a mobile app with static data stored in an Amazon S3 bucket in the us-east-1 Region. The company serves the content through an Amazon CloudFront distribution The company is launching the mobile app In South Africa The data must reside in the af south 1 Region The company does not want to deploy a specific, mobile client for South Africa

What should the company do to meet these requirements?


Options:

A. Use the CloudFront geographic restriction feature to block access to users in South Africa
B. Create a Lambda@Edge function Associate the Lambda@Edge function as an origin request trigger with the CloudFront distribution to change the S3 origin Region
C. Create a Lambda@Edge function. Associate the Lambda@Edge function as a viewer response trigger with the CloudFrontdistribution to change the S3 origin Region
D. Include af-south-1 in the alternate domain name (CNAME) of the CloudFront distribution

Answer: C

Amazon CLF-C01 Sample Question 55

Which AWS service enables the decoupling and scaling of applications?


Options:

A. Amazon Simple Queue Service (Amazon SQS)
B. AWS Outposts
C. Amazon S3
D. Amazon Simple Email Service (Amazon SES)

Answer: A Explanation: Explanation: Amazon Simple Queue Service (SQS) is a fully managed message queuing service that enables you to decouple and scale microservices, distributed systems, and serverless applications.

Amazon CLF-C01 Sample Question 56

A company has an application where reading objects from Amazon S3 is based on the type of user. The user types are registered user and guest user. The company has 25.000 users and is growing. Information is pulled from an S3 bucket depending on the user type.

Which approaches are recommended to provide access to both user types? (Select TWO.)


Options:

A. Provide a different access key and secret access key in the application code for registered users and guest users to provide read access to the objects.
B. Use S3 bucket policies to restrict read access to specific IAM users
C. Use Amazon Cognito to provide access using authenticated and unauthenticated roles
D. Create a new 1AM user for each user and grant read access
E. Use the AWS 1AM service and let the application assume the different roles using the AWS Security Token Service (AWS STS) AssumeRole action depending on the type of user and provide read access to Amazon S3 using the assumed role.

Answer: C, F

Amazon CLF-C01 Sample Question 57

A large organization has a single AWS account.

What are the advantages of reconfiguring the single account into multiple AWS accounts? (Select TWO.)


Options:

A. It allows for administrative isolation between different workloads.
B. Discounts can be applied on a quarterly basis by submitting cases in the AWS Management Console.
C. Transitioning objects from Amazon S3 to Amazon S3 Glacier in separate AWS accounts will be less expensive.
D. Having multiple accounts reduces the risks associated with malicious activity targeted at a single account.
E. Amazon QuickSight offers access to a cost tool that provides application-specific recommendations for environments running in multiple accounts.

Answer: A, E

Amazon CLF-C01 Sample Question 58

Which AWS service gives a company the ability to use a private, dedicated connection between a VPC and an on-premises data center?


Options:

A. AWS Direct Connect
B. Amazon API Gateway
C. AWS Systems Manager
D. AWS CloudFormation

Answer: B

Amazon CLF-C01 Sample Question 59

A company wants to establish a private network connection between AWS and its corporate network. Which AWS service or feature will meet this requirement?


Options:

A. Amazon Connect
B. Amazon Route 53
C. AWS Direct Connect
D. VPC peering

Answer: D

Amazon CLF-C01 Sample Question 60

Which tasks require the use of AWS account root user credentials? (Select TWO.)


Options:

A. Configure multi-factor authentication (MFA) delete for an Amazon S3 bucket.
B. Create an IAM administrator access policy.
C. Open a support ticket with AWS to request an increase to service quotas.
D. Change an AWS Support plan.
E. Change payment currency for an AWS account.

Answer: B, E

Amazon CLF-C01 Sample Question 61

Which AWS service would identify if unrestricted access to a resource has been allowed by a security group?


Options:

A. AWS Trusted Advisor
B. Amazon CloudWatch
C. VPC Flow Logs
D. AWS CloudTrail

Answer: E

Amazon CLF-C01 Sample Question 62

A company is using Amazon EC2 Auto Scaling to scale its Amazon EC2 instances. Which benefit of the AWS Cloud does this example illustrate?


Options:

A. High availability
B. Elasticity
C. Reliability
D. Global reach

Answer: B

Amazon CLF-C01 Sample Question 63

A company needs to generate reports that will describe its usage of Amazon EC2 Reserved Instances across AWS accounts for the past month. Which AWS service or tool can the company use to meet this requirement?


Options:

A. AWS Organizations
B. Amazon S3
C. Cost Explorer
D. Amazon EC2 dashboard

Answer: D

Amazon CLF-C01 Sample Question 64

A Lambda function processes data before sending it to a downstream service. Each piece of data is approximately 1MB in size. After a security audit, the function is now required to encrypt the data before sending it downstream

Which API call is required to perform the encryption?


Options:

A. Pass the data to the KMS ReEncrypt API for encryption
B. Use the KMS GenerateDataKeyAPi to get an encryption key
C. Use the KMS GeneraceDaraHeywithoutPlainTexr API to get an encryption key
D. Pass the data to KMS as part of the Encrypt API for encryption.

Answer: C

Amazon CLF-C01 Sample Question 65

A user has limited knowledge o( AWS services, but wants to quickly deploy a scalable Node.js application in the AWS Cloud. Which service should be used to deploy the application?


Options:

A. AWS CloudFormation
B. AWS Elastic Beanstalk
C. Amazon EC2
D. AWS OpsWorks

Answer: C

Amazon CLF-C01 Sample Question 66

A developer has written code for an application and wants to share it with other developers on the team to receive feedback. The shared application code needs to be stored long-term with multiple versions and batch change tracking

Which AWS service should the developer use?


Options:

A. AWS CodeBuild
B. Amazon S3
C. AWS CodeCommit
D. AWS Cloud9

Answer: D

Amazon CLF-C01 Sample Question 67

A company is moving multiple applications to a single AWS account. The company wants to monitor the AWS Cloud costs incurred by each application.

What can the company do to meet this requirement?


Options:

A. Set up invoiced billing.
B. Use AWS Artifact.
C. Set budgets in Cost Explorer.
D. Create cost allocation tags.

Answer: D

Amazon CLF-C01 Sample Question 68

A company moves a workload to AWS to run on Amazon EC2 instances. The company needs to run the workload in the most cost-effective way. What can the company do to meet this requirement?


Options:

A. Use AWS Key Management Service {AWS KMS).
B. Use multiple AWS accounts and consolidated billing.
C. Use AWS CloudFormation to deploy the infrastructure.
D. Rightslze all the EC2 instances that are used in the deployment.

Answer: E

Amazon CLF-C01 Sample Question 69

Which AWS service or feature provides a platform for building cloud-based customer service contact centers?


Options:

A. Amazon Pinpoint
B. Amazon Connect
C. Amazon Athena
D. AWS Enterprise Support

Answer: C

Amazon CLF-C01 Sample Question 70

Which design principles for cloud architecture are recommended when re-architecting a large monolithic application? (Select TWO.)


Options:

A. Use manual monitoring.
B. Use fixed servers.
C. Implement loose coupling.
D. Rely on individual components.
E. Design for scalability.

Answer: C, E Explanation: Explanation: https://www.architech.ca/re-architect-applicatio ns/

Amazon CLF-C01 Sample Question 71

Which of the following security resources are supplied by AWS? (Select TWO.)


Options:

A. Trusted Advisor checks
B. Service intrusion metrics
C. Penetration testing
D. Educational webinars
E. Peer-to-peer file-sharing detection

Answer: A, D

Amazon CLF-C01 Sample Question 72

Which databases are available on Amazon RDS? (Select Two.)


Options:

A. Sybase
B. Microsoft SQL Server
C. IBM DB2
D. MongoDB
E. PostgreSQL

Answer: B, F

Amazon CLF-C01 Sample Question 73

A company has decided to migrate its production workloads to the AWS Cloud.

Which actions can help reduce operational costs as part of the migration? (Select TWO.)


Options:

A. Reduce overprovisioned instances.
B. Rehost all third-party licenses on AWS
C. Implement a highly available architecture
D. Use managed services.
E. Improve application security.

Answer: B, E

Amazon CLF-C01 Sample Question 74

A company that does business online needs to quickly deliver new functionality in an iterative manner, minimizing the time to market

Which AWS Cloud feature can provide this?


Options:

A. Elasticity
B. High availability
C. Agility
D. Reliability

Answer: D

Amazon CLF-C01 Sample Question 75

A company hosts a web application on Amazon EC2 instances. The application requires credentials so that it can access other AWS services.

Which feature should the company use the provide this access?


Options:

A. IAM users
B. IAM groups
C. IAM roles
D. Multi-factor authentication (MFA)

Answer: E

Amazon CLF-C01 Sample Question 76

Which AWS service is delivered regionally?


Options:

A. AWS Shield
B. Amazon S3
C. Amazon Route 53
D. AWS Identity and Access Management (IAM)

Answer: C

Amazon CLF-C01 Sample Question 77

A company is using multiple Availability Zones to deploy AWS Cloud architecture.

Which design principle of the AWS Well-Architected Framework does this example represent?


Options:

A. Implement elasticity
B. Decouple architecture components
C. Design for high availability
D. Thing parallel

Answer: D

Amazon CLF-C01 Sample Question 78

A network engineer needs to build a hybrid cloud architecture connecting on-premises networks to the AWS Cloud using AWS Direct Connect. The company has a few VPCs in a single AWS Region and expects to increase the number of VPCs to hundreds over time. Which AWS service or feature should the engineer use to simplify and scale this connectivity as the VPCs increase in number?


Options:

A. VPC endpoints
B. AWS Transit Gateway
C. Amazon Route 53
D. AWS Secrets Manager

Answer: B

Amazon CLF-C01 Sample Question 79

A user is planning to launch two additional Amazon EC2 instances to increase availability. Which action should the user take?


Options:

A. Launch the instances across multiple Availability Zones in a single AWS Region
B. Launch the instances as EC2 Reserved Instances in the same AWS Region and the same Availability Zone
C. Launch the instances in multiple AWS Regions but in the same Availability Zone
D. Launch the instances as EC2 Spot Instances in the same AWS Region but in different Availability Zones

Answer: B

Amazon CLF-C01 Sample Question 80

Which of the following allows an application running on an Amazon EC2 instance to securely write data to an Amazon S3 bucket without using long term credentials?


Options:

A. Amazon Cognito
B. AWS Shield
C. AWS IAM role
D. AWS IAM user access key

Answer: D

Amazon CLF-C01 Sample Question 81

How can a company reduce its Total Cost of Ownership (TCO) using AWS?


Options:

A. By minimizing large capital expenditures
B. By having no responsibility for third-party license costs
C. By having no operational expenditures
D. By having AWS manage applications

Answer: B

Amazon CLF-C01 Sample Question 82

A cloud practitioner has a data analysis workload that is infrequently executed and can be interrupted without harm. To optimize for cost which Amazon EC2 purchasing option should De used?


Options:

A. On-Demand Instances
B. Reserved instances
C. Spot Instances
D. Dedicated Hosts

Answer: D

Amazon CLF-C01 Sample Question 83

Which AWS services or features help decrease network latency for a globally dispersed user base? (Select TWO.)


Options:

A. Amazon VPC
B. Elastic Load Balancer
C. Amazon CloudFront
D. AWS Direct Connect
E. AWS Global Accelerator

Answer: C, F

Amazon CLF-C01 Sample Question 84

A solutions architect needs to maintain a fleet of Amazon EC2 instances so that any Impaired instances are replaced with new ones. Which AWS service should the solutions architect use?


Options:

A. Amazon Elastic Container Service (Amazon ECS)
B. Amazon GuardDuty
C. AWS Shield
D. AWS Auto Scaling

Answer: B

Amazon CLF-C01 Sample Question 85

AWS trusted advisor can monitor and provide advice on what characteristics of an AWS account?


Options:

A. Compliance with security best practices
B. Application performance
C. Network utilization
D. Cost optimization
E. Compliance status

Answer: A, E

Amazon CLF-C01 Sample Question 86

Which service is an AWS-managed Hadoop framework that makes it easy, fast, and cost-effective to process large amounts of data across dynamically scalable Amazon EC2 instances?


Options:

A. Amazon EMR
B. Amazon EC2
C. AWS Elastic Beanstalk
D. Amazon Redshift

Answer: B

Amazon CLF-C01 Sample Question 87

What are the market advantages of running workloads in the AWS cloud?


Options:

A. Less staff time is required to deploy new workloads
B. Increased time to market for new application features
C. Higher acquisition costs to support peak workloads
D. Increased productivity for application development teams
E. A decrease in the average server CPU utilization

Answer: A, E

Amazon CLF-C01 Sample Question 88

Which of the following can be used to identify a specific user who stopped an amazon EC2 instance?


Options:

A. AWS CloudTrail
B. Amazon Inspector
C. Amazon CloudWatch
D. VPC Flow Logs

Answer: B

Amazon CLF-C01 Sample Question 89

which of the following are benefits of running a database on amazon rds compared to an on premises database?


Options:

A. RDS backup are managed by AWS
B. RDS supports any relational database
C. RDs has no database engineer licensing costs.
D. RDS database compute capacity can be easily scaled.
E. RDS inbound traffic content (for example, security groups) is managed by AWS.

Answer: A, D

Amazon CLF-C01 Sample Question 90

When a user wants to utilize their existing per-socket per-core, or per-virtual machine software licenses for a Microsoft Windows server running on AWS, which Amazon EC2 instance type is required?


Options:

A. Spot Instances
B. Dedicated instances
C. Dedicated Hosts
D. Reserved Instances

Answer: D

Amazon CLF-C01 Sample Question 91

Which AWS service or feature can be used to prevent SQL injection attacks?


Options:

A. Security groups
B. Network ACLs
C. AWS WAF
D. IAM policy

Answer: D

Amazon CLF-C01 Sample Question 92

Using AWS Config to record audit and evaluate changes to AWS resources to enable traceability is an example of which AWS Wed-Architected Framework pillar?


Options:

A. Security
B. Operational excellence
C. Performance efficiency
D. Cost optimization

Answer: B

Amazon CLF-C01 Sample Question 93

Which AWS service does AWS Snowball Edge natively support?


Options:

A. AWS Server Migration Service (AWS SMS)
B. Amazon Aurora
C. AWS Trusted Advisor
D. Amazon EC2

Answer: B

Amazon CLF-C01 Sample Question 94

A user has an AWS account with a Business-level AWS Support plan and needs assistance with handling a production service disruption. Which action should the user take?


Options:

A. Contact the dedicated AWS technical account manager (TAM)
B. Contact the dedicated AWS Concierge Support team
C. Open a business-critical system down support case
D. Open a production system down support case

Answer: D


and so much more...