Pass Your Amazon Foundational CLF-C01 Exam on Oct 29, 2023 with 366 Questions
CLF-C01 Free Exam Study Guide! (Updated 366 Questions)
NEW QUESTION # 216
What are the multiple, isolated locations within an AWS Region that are connected by low-latency networks called?
- A. Edge locations
- B. Amazon VPCs
- C. AWS Direct Connects
- D. Availability Zones
Answer: D
Explanation:
Each Region is completely independent. Each Availability Zone is isolated, but the Availability Zones in a Region are connected through low-latency links. A Local Zone is an AWS infrastructure deployment that places select services closer to your end users. A Local Zone is an extension of a Region that is in a different location from your Region. It provides a high-bandwidth backbone to the AWS infrastructure and is ideal for latency-sensitive applications, for example machine learning.
NEW QUESTION # 217
Which service would provide network connectivity in a hybrid architecture that includes the AWS Cloud?
- A. Amazon API Gateway
- B. Amazon VPC
- C. AWS Direct Connect
- D. AWS Directory Service
Answer: B
Explanation:
Explanation
Amazon Virtual Private Cloud (Amazon VPC) is a logically isolated, private section of the AWS Cloud to launch resources in a virtual data center in the cloud. Amazon VPC allows you to leverage multiple Availability Zones (AZ) within a region so that you can build greater fault tolerance within your workloads.
You have complete control.
NEW QUESTION # 218
Which design principles of the AWS Well-Architected Framework help increase reliability? (Select TWO.)
- A. Enable traceability.
- B. Automate security best practices
- C. Scale horizontally to increase workload availability.
- D. Automatically recover from failure
- E. Keep people away from data
Answer: C,D
NEW QUESTION # 219
Which of the following common IT tasks can AWS cover to free up company IT resources? (Select TWO.)
- A. Patching database software
- B. Backing up database
- C. Creating database schema
- D. Running penetration tests
- E. Testing application release
Answer: A,E
NEW QUESTION # 220
When performing a cost analysis that supports physical isolation of a customer workload, which compute hosting model should be accounted for in the Total Cost of Ownership (TCO)?
- A. Dedicated Hosts
- B. No Upfront Reserved Instances
- C. On-Demand Instances
- D. Reserved Instances
Answer: A
Explanation:
Explanation
Use Dedicated Hosts to launch Amazon EC2 instances on physical servers that are dedicated for your use.
Dedicated Hosts give you additional visibility and control over how instances are placed on a physical server, and you can reliably use the same physical server over time. As a result, Dedicated Hosts enable you to use your existing server-bound software licenses like Windows Server and address corporate compliance and regulatory requirements.
NEW QUESTION # 221
A company wants to allow full access to an Amazon S3 bucket for a particular user Which element in the S3 bucket policy holds the user details that describe who needs access to the S3 bucket?
- A. Principal
- B. Statement
- C. Resource
- D. Action
Answer: A
NEW QUESTION # 222
Which security practices are the customer's responsibility under the AWS shared responsibility model? (Select TWO.)
- A. Patching of Amazon RDS instances
- B. Encryption of Amazon Elastic Block Store (Amazon EBS) volumes
- C. Physical access to a data center
- D. Decommissioning of storage devices
- E. Rotation of IAM access keys
Answer: C,D
NEW QUESTION # 223
What exclusive benefit is provided to users with Enterprise Support?
- A. Access to a Technical Account Manager
- B. Access to a Solutions Architect
- C. Access to a Cloud Support Engineer
- D. Access to a Technical Project Manager
Answer: C
Explanation:
Explanation/Reference: https://aws.amazon.com/premiumsupport/plans/enterprise/
NEW QUESTION # 224
Which AWS service can be used to manually launch instances based on resource requirements?
- A. Amazon EC2
- B. Amazon ECS
- C. Amazon EBS
- D. Amazon S3
Answer: A
NEW QUESTION # 225
A company has only basic knowledge of AWS technologies.
Which AWS service provides the SIMPLEST way for the company to establish a website on AWS?
- A. AWS Lambda
- B. Amazon Elastic File System (Amazon EFS)
- C. AWS Elastic Beanstalk
- D. Amazon Lightsail
Answer: C
NEW QUESTION # 226
How can a company isolate the costs of production and non-production workloads on AWS?
- A. Use different accounts for production and non-production expenses.
- B. Use Amazon EC2 for non-production workloads and other services for production workloads.
- C. Use Amazon CloudWatch to monitor the use of services.
- D. Create Identity and Access Management (IAM) roles for production and non-production workloads.
Answer: A
Explanation:
Explanation/Reference: https://aws.amazon.com/answers/account-management/aws-multi-account-billing-strategy/
NEW QUESTION # 227
Which AWS service can serve a static website?
- A. AWS X-Ray
You can host a static website on Amazon Simple Storage Service (Amazon S3). On a static website, individual webpages include static content. They might also contain client-side scripts. By contrast, a dynamic website relies on server-side processing, including server-side scripts such as PHP, JSP, or ASP.NET. Amazon S3 does not support server-side scripting. - B. Amazon Route 53
- C. Amazon S3
- D. Amazon QuickSight
Answer: C
NEW QUESTION # 228
Which of the following is an important architectural design principle when designing cloud applications?
- A. Provision extra capacity.
- B. Use multiple Availability Zones.
- C. Use open source software.
- D. Use tightly coupled components.
Answer: B
Explanation:
Explanation
Data Center resilience is practiced through Availability Zones across data centers that reduce the impact of failures.
Fault isolation improvement can be made to traditional horizontal scaling by sharding (a method of grouping instances into groups called shards, instead of sending the traffic from all users to every node like in the traditional IT structure.)
NEW QUESTION # 229
Which AWS service helps users meet contractual and regulatory compliance requirements for data security by using dedicated hardware appliances within the AWS Cloud?
- A. AWS Key Management Service (AWS KMS)
- B. AWS CloudHSM
- C. AWS Secrets Manager
- D. AWS Directory Service
Answer: B
Explanation:
The AWS CloudHSM service helps you meet corporate, contractual, and regulatory compliance requirements for data security by using dedicated Hardware Security Module (HSM) instances within the AWS cloud. AWS and AWS Marketplace partners offer a variety of solutions for protecting sensitive data within the AWS platform, but for some applications and data subject to contractual or regulatory mandates for managing cryptographic keys, additional protection may be necessary. CloudHSM complements existing data protection solutions and allows you to protect your encryption keys within HSMs that are designed and validated to government standards for secure key management. CloudHSM allows you to securely generate, store, and manage cryptographic keys used for data encryption in a way that keys are accessible only by you.
Reference: https://aws.amazon.com/cloudhsm/faqs/
NEW QUESTION # 230
A user is running an application on AWS and notices that one or more AWS-owned IP addresses is involved in a distributed denial-of-service (DDoS) attack.
Who should the user contact FIRST about this situation?
- A. AWS Solutions Architect
- B. AWS Technical Account Manager
- C. AWS Premium Support
- D. AWS Abuse team
Answer: D
NEW QUESTION # 231
Which method helps to optimize costs for users moving to the AWS Cloud?
- A. Manually provisioning cloud resources
- B. Paying only for what is used
- C. Purchasing hardware before it is needed
- D. Purchasing for the maximum possible load
Answer: B
NEW QUESTION # 232
Which aspect of AWS infrastructure enables global deployment of compute and storage?
- A. Resource groups
- B. Regions
- C. Tags
- D. Availability Zones
Answer: D
Explanation:
Explanation/Reference: https://cloudacademy.com/blog/aws-global-infrastructure/
NEW QUESTION # 233
Which Amazon EC2 instance pricing model can provide discounts of up to 90%?
- A. Dedicated Hosts
- B. On-Demand
- C. Spot Instances
- D. Reserved Instances
Answer: C
NEW QUESTION # 234
What is the availability and durability rating of S3 Standard Storage Class?
Choose the Correct answer:
- A. 99.999999999% Availability and 99.90% Durability
- B. 99.999999999% Durability and 99.00% Availability
- C. 99.999999999% Durability and 99.99% Availability
- D. 99.999999999% Availability and 99.99% Durability
Answer: C
Explanation:
S3 Standard Storage class has a rating of 99.999999999% durability (referred to as 11 nines) and 99.99% availability.
NEW QUESTION # 235
Under the shared responsibility model, which of the following tasks are the responsibility of the customer? (Choose two.)
- A. Replacing failed hard disk drives.
- B. Managing the VPC network access control lists.
- C. Deploying hardware in different Availability Zones.
- D. Encrypting data in transit and at rest.
- E. Maintaining the underlying Amazon EC2 hardware.
Answer: B,D
Explanation:
The hardware related jobs is the prime responsibility of AWS. VPC network access control lists is something a customer has to do himself to secure the applications. Encrypting data in transit and at rest is a shared responsibility in which AWS plays a part. All hardware related jobs have nothing to do with the customer.
Reference:
https://dzone.com/articles/aws-shared-responsibility-model-cloud-security
NEW QUESTION # 236
What is the purpose of AWSStorage Gateway?
- A. It transports petabytes of data to and from AWS.
- B. it ensures on-premises data storage is 99.999999999% durable.
- C. it connects on-premises data storage to the AWS Cloud
- D. It connects to multiple Amazon EC2 instances.
Answer: C
NEW QUESTION # 237
Which situation should be reported to the aws abuse team?
- A. An Availability Zone has a service disruption.
- B. A user has trouble accessing an Amazon S3 bucket from an AWS IP address
- C. An intrusion attempt is made from an AWS IP address
- D. A user needs to change payment methods due to a compromise.
Answer: C
NEW QUESTION # 238
A user has limited knowledge o( AWS services, but wants to quickly deploy a scalable Node.js application in the AWS Cloud. Which service should be used to deploy the application?
- A. AWS CloudFormation
- B. AWS OpsWorks
- C. AWS Elastic Beanstalk
- D. Amazon EC2
Answer: C
NEW QUESTION # 239
A company is considering using AWS for a self-hosted database that requires a nightly shut down for maintenance and cost-saving purposes.
Which service should the company use?
- A. Amazon DynamoDB
- B. Amazon Redshift
- C. Amazon EC2 with Amazon Elastic Block Store (Amazon EBS)
- D. Amazon Elastic Compute Cloud (Amazon EC2) with Amazon EC2 instance store
Answer: B
NEW QUESTION # 240
......
CLF-C01 Dumps for Amazon Foundational Certified Exam Questions and Answer: https://www.testpdf.com/CLF-C01-exam-braindumps.html
Realistic Verified CLF-C01 exam dumps Q&As - CLF-C01 Free Update: https://drive.google.com/open?id=1y0TPhbj0sXbltVGJeqb-r_6ZqaV-muhs
