[Aug 01, 2021] CLF-C01 PDF Dumps is essential on your CLF-C01 Exam Questions Certain Success!
CLF-C01 PDF Questions - Perfect Prospect To Go With CLF-C01 Practice Exam
NEW QUESTION 97
Which of the following services could be used to deploy an application to servers running on-premises?
(Select TWO.)
- A. AWS OpsWorks
- B. AWS Elastic Beanstalk
- C. AWS Batch
- D. AWS CodeDeploy
- E. AWS X-Ray
Answer: A,D
NEW QUESTION 98
What time-savings advantage is offered with the use of Amazon Rekognition?
- A. Amazon Rekognition provides automatic watermarking of images
- B. Amazon Recognition provides the ability to resize millions of images automatically
- C. Amazon Rekognition uses Amazon Mechanical Turk to allow humans to bid on object detection jobs
- D. Amazon Rekognition provides automatic detection of objects appeanng m pictures
Answer: D
NEW QUESTION 99
Which AWS services can be used as infrastructure automation tools? (Select TWO.)
- A. Amazon CloudFront
- B. AWS OpsWorks
- C. AWS Batch
- D. Amazon QuickSight
- E. AWS CloudFormation
Answer: B,E
NEW QUESTION 100
A user warts to securely automate me management and rotation of credentials that are shared between applications, while spending the least amount of time on managing tasks.
Which AWS service or feature can be used to accomplish this?
- A. Server-side encryption
- B. AWSCloudHSM
- C. AWS Key Management Service (AWS KMS)
- D. AWS Secret Manager
Answer: D
NEW QUESTION 101
Which of the following is an important architectural design principle when designing cloud applications?
- A. Provision extra capacity.
- B. Use open source software.
- C. Use multiple Availability Zones.
- D. Use tightly coupled components.
Answer: C
Explanation:
Data Center resilience is practiced through Availability Zones across data centers that reduce the impact of failures.
Fault isolation improvement can be made to traditional horizontal scaling by sharding (a method of grouping instances into groups called shards, instead of sending the traffic from all users to every node like in the traditional IT structure.) Reference: https://www.botmetric.com/blog/aws-cloud-architecture-design-principles/
NEW QUESTION 102
What MUST you do before you do any penetration testing on your account?
Choose the Correct answer:
- A. Penetration testing is now allowed.
- B. Nothing, you are free to do penetration testing whenever you like.
- C. Contact AWS and let them know first.
- D. None of the above
Answer: C
Explanation:
You must contact AWS before doing any penetration testing on your account. If you do not notify AWS first, they may shut down your account.
NEW QUESTION 103
A company wants to migrate its applications to a VPC on AWS These applications will need to access on-premises resources What combination of actions will enable the company to accomplish this goals?(Select TWO )
- A. Use Amazon Athena to query data fromthe on-premises database servers
- B. Use the AWS Service Catalog to identify a list of on-premises resources that can be migrated
- C. Leverage Amazon CloudFront to restrict access to static web content provided through the company's on-premises web servers
- D. Connect the company's on-premises data center to AWS using AWS Direct Connect
- E. Build a VPN connection between an on-premises device and a virtual private gateway in the new VPC
Answer: B,E
NEW QUESTION 104
Which of the following is an AWS Well-Architected Framework design principle related to reliability?
- A. Deployment to a single Availability Zone
- B. Design for cost optimization
- C. Ability to recover from failure
- D. Perform operations as code
Answer: C
NEW QUESTION 105
Which AWS IAM feature is used to associate a set ofpermissions with multiple users?
- A. Groups
- B. Password policies
- C. Access keys
- D. Multi-factor authentication
Answer: A
Explanation:
Explanation
An IAM group is a collection of IAM users. You can use groups to specify permissions for a collection of users, which can make those permissions easier to manage for those users. For example, you could have a group called Admins and give that group the types of permissions that administrators typically need.
Reference: https://docs.aws.amazon.com/IAM/latest/UserGuide/id.html
NEW QUESTION 106
Which of the following is a shared control between the customer and AWS?
- A. Awareness and training
- B. Configuration of an Amazon EC2 instance
- C. Environmental controls of physical AWS data centers
- D. Providing a key for Amazon S3 client-side encryption
Answer: D
NEW QUESTION 107
An IT manager needs to monitor company AWS resources and collect utilization metrics from Amazon EC2 instances and Amazon DynamoDB. Which AWS service can the IT manager use to meet these requirements?
- A. AWS CloudTrall
- B. AWS Config
- C. AWS Trusted Advisor
- D. Amazon CloudWatch
Answer: D
NEW QUESTION 108
which aws service allows users to provision infrastructure as code?
- A. AWS CodeBuild
- B. AWS Organizations
- C. AWS CodeCommit
- D. AWS CloudFormation
Answer: D
NEW QUESTION 109
A new service using AWS must be highly available. Yet, due to regulatory requirements, all of its Amazon EC2 instances must be located in a single geographic area.
According to best practices, to meet these requirements, the EC2 instances must be placed in at least two:
- A. Availability Zones
- B. subnets
- C. placement groups
- D. AWS Regions
Answer: A
Explanation:
Explanation/Reference: https://aws.amazon.com/ec2/faqs/
NEW QUESTION 110
A company needs a storage solution that
* Is low-cost.
* Is for infrequently accessed data.
* Quickly accesses data when required.
* Does not require data lo be resilient
Which Amazon S3 storage option should the company use?
- A. S3 Standard-Infrequent Access (S3 Standard-IA)
- B. S3 Glacier
- C. S3 One Zone-Infrequent Access (S3 One Zone-IA)
- D. S3 Standard
Answer: A
NEW QUESTION 111
Which AWS service needs to be enabled to track all user account changes within the AWS Management Console?
- A. VPC Flow Logs
- B. Amazon Simple Notification Service (Amazon SNS)
- C. AWS CloudTrail
- D. AWS CloudHSM
Answer: C
Explanation:
Explanation
Explanation
AWS CloudTrail is a service that enables governance, compliance, operational auditing, and risk auditing of your AWS account. With CloudTrail, you can log, continuously monitor, and retain account activity related to actions across your AWS infrastructure. CloudTrail provides event history of your AWS account activity, including actions taken through the AWS Management Console, AWS SDKs, command line tools, and other AWS services. Thisevent history simplifies security analysis, resource change tracking, and troubleshooting.
In addition, you can use CloudTrail to detect unusual activity in your AWS accounts. These capabilities help simplify operational analysis and troubleshooting.
Reference: https://aws.amazon.com/cloudtrail/
NEW QUESTION 112
Which service should a customer use to consolidate and centrally manage multiple AWS accounts?
- A. AWS Config
- B. AWS Organizations
- C. AWS IAM
- D. AWS Schema Conversion Tool
Answer: B
Explanation:
Explanation/Reference: https://aws.amazon.com/organizations/
NEW QUESTION 113
......
CLF-C01 Exam with Accurate Amazon AWS Certified Solutions Architect - Cloud Practitioner PDF Questions: https://www.lead1pass.com/Amazon/CLF-C01-practice-exam-dumps.html
True Amazon Exam Extraordinary Practice For the CLF-C01 Exam: https://drive.google.com/open?id=1h337lFTe8yZAP-Gdpngxr5O3NoQNnX_f