Real CLF-C01 dumps Accurate Questions and Answers with Free and Fast Updates
Real CLF-C01 Quesions Pass Certification Exams Easily
NEW QUESTION # 215
A Cloud Practitioner needs a consistent and dedicated connection between AWS resources and an on premises system Which AWS service can fulfill this requirement?
- A. AWS Direct Connect
- B. AWS VPN
- C. AWS Data Pipeline
- D. Amazon Connect
Answer: D
NEW QUESTION # 216
Which design principles of the AWS Well-Architected Framework help increase reliability? (Select TWO.)
- A. Enable traceability.
- B. Automate security best practices
- C. Keep people away from data
- D. Scale horizontally to increase workload availability.
- E. Automatically recover from failure
Answer: D,E
NEW QUESTION # 217
A developer is writing a new AWS Serverless Application Model (AWS SAM) template with a new AWS Lambda function. The Lambda function runs complex code. The developer wants to test the Lambda function with more CPU power What should the developer do to meet this requirement?
- A. Increase the memory.
- B. Increase the timeout
- C. Increase the number of Lambda layers
- D. Increase the runtime engine version
Answer: A
NEW QUESTION # 218
Which of the following can a customer use to enable single sign-on (SSO) to the AWS Console?
- A. Amazon Rekognition
- B. AWS Directory Service
- C. Amazon Connect
- D. Amazon Pinpoint
Answer: C
Explanation:
Single sign-on only works when used on a computer that is joined to the AWS Directory Service directory. It cannot be used on computers that are not joined to the directory.
NEW QUESTION # 219
Which Amazon S3 feature or storage class uses the AWS backbone network and edge locations to reduce latencies from the end user to Amazon S3?
- A. S3 Standard-Infrequent Access (S3 Standard-IA)
- B. S3 Transfer Acceleration
- C. S3 Cross-Region Replication
- D. S3 Event Notifications
Answer: B
Explanation:
S3TA improves transfer performance by routing traffic through Amazon CloudFront's globally distributed Edge Locations and over AWS backbone networks, and by using network protocol optimizations.
NEW QUESTION # 220
A company that has multiple business units wants to centrally manage and govern its AWS Cloud environments. The company wants to automate the creation of AWS accounts, apply service control policies (SCPs), and simplify billing processes.
Which AWS service or tool should the company use to meet these requirements?
- A. AWS Organizations
- B. AWS Trusted Advisor
- C. AWS Budgets
- D. Cost Explorer
Answer: A
Explanation:
AWS Organizations is an AWS service that enables you to centrally manage and govern your AWS Cloud environments across multiple business units. AWS Organizations allows you to create an organization that consists of AWS accounts that you create or invite to join. You can group your accounts into organizational units (OUs) and apply service control policies (SCPs) to them. SCPs are a type of policy that specify the maximum permissions for the accounts in your organization, and can help you enforce compliance and security requirements. AWS Organizations also simplifies billing processes by enabling you to consolidate and pay for all member accounts with a single payment method. You can also use AWS Organizations to automate the creation of AWS accounts by using APIs or AWS CloudFormation templates. References: What is AWS Organizations?, Policy-Based Management - AWS Organizations
NEW QUESTION # 221
How can a company reduce its Total Cost of Ownership (TCO) using AWS?
- A. By minimizing large capital expenditures
- B. By having no responsibility for third-party license costs
- C. By having AWS manage applications
- D. By having no operational expenditures
Answer: A
Explanation:
Explanation
AWS helps you reduce Total Cost of Ownership (TCO) by reducing the need to invest in large capital expenditures and providing a pay-as-you-go model that empowers you to invest in the capacity you need and use it only when the business requires it.
Reference: https://aws.amazon.com/tco-calculator/
NEW QUESTION # 222
Which service allows a company with multiple AWS accounts to combine its usage to obtain volume discounts?
- A. AWS Server Migration Service
- B. AWS Organizations
- C. AWS Trusted Advisor
- D. AWS Budgets
Answer: B
Explanation:
use the consolidated billing feature in AWS Organizations to consolidate billing and payment for multiple AWS accounts or multiple Amazon Internet Services Pvt. Ltd (AISPL) accounts. Every organization in AWS Organizations has a master account that pays the charges of all the member accounts.
Consolidated billing has the following benefits:
* One bill - You get one bill for multiple accounts.
* Easy tracking - You can track the charges across multiple accounts and download the combined cost and usage data.
* Combined usage - You can combine the usage across all accounts in the organization to share the volume pricing discounts and Reserved Instance discounts. This can result in a lower charge for your project, department, or company than with individual standalone accounts. For more information, see Volume Discounts.
* No extra fee - Consolidated billing is offered at no additional cost.
NEW QUESTION # 223
What tasks should a customer perform when that customer suspects an AWS account has been compromised?
(Choose two.)
- A. Delete AWS CloudTrail Resources.
- B. Rotate passwords and access keys.
- C. Contact AWS Support.
- D. Remove MFA tokens.
- E. Move resources to a different AWS Region.
Answer: B,C
NEW QUESTION # 224
Donna needs to provision a Linux server to run a web application on. What AWS service should she use to create the Linux server?
Choose the Correct answer:
- A. VPC
- B. Lambda
- C. EC2
- D. IAM
Answer: C
Explanation:
Elastic Cloud Compute (EC2) is AWS server-based compute service platform. You can use it to provision and use Linux- and Windows-based servers.
NEW QUESTION # 225
Which of the following are benefits of using AWS Trusted Advisor? (Choose two.)
- A. Creating and rotating encryption keys
- B. Improving security by proactively monitoring the AWS environment
- C. Detecting underutilized resources to save costs
- D. Implementing enforced tagging across AWS resources
- E. Providing high-performance container orchestration
Answer: B,D
Explanation:
Explanation/Reference: https://aws.amazon.com/about-aws/whats-new/2016/06/aws-support-enables-tagging- capabilities-for-trusted-advisor/
NEW QUESTION # 226
Which AWS service needs to be enabled to track all user account changes within the AWS Management Console?
- A. Amazon Simple Notification Service (Amazon SNS)
- B. VPC Flow Logs
- C. AWS CloudHSM
- D. AWS CloudTrail
Answer: D
Explanation:
Explanation
AWS CloudTrail is a service that enables governance, compliance, operational auditing, and risk auditing of your AWS account. With CloudTrail, you can log, continuously monitor, and retain account activity related to actions across your AWS infrastructure. CloudTrail provides event history of your AWS account activity, including actions taken through the AWS Management Console, AWS SDKs, command line tools, and other AWS services. This event history simplifies security analysis, resource change tracking, and troubleshooting.
In addition, you can use CloudTrail to detect unusual activity in your AWS accounts. These capabilities help simplify operational analysis and troubleshooting.
Reference: https://aws.amazon.com/cloudtrail/
NEW QUESTION # 227
Under the AWS shared responsibility model, what are the customer's responsibilities? (Choose two.)
- A. Data integrity authentication
- B. Physical network devices including firewalls
- C. Security of data in transit
- D. Storage device decommissioning
- E. Physical and environmental security
Answer: A,C
NEW QUESTION # 228
A company suspects that its AWS resources are being used for harmful network activities, including port scanning and malware distribution.
- A. AWS technical account manager (TAM)
- B. AWS Abuse team
- C. AWS Support team
- D. AWS Concierge Support
Answer: B
NEW QUESTION # 229
A company wants to use Amazon Elastic Compute Cloud (Amazon EC2) to deploy a global commercial application. The deployment solution should be built with the highest redundancy and fault tolerance. Based on this situation the Amazon EC2 instances should be deployed:
- A. in a single Availability Zone in one AWS Region
- B. with multiple Elastic Network Interfaces belonging to different subnets
- C. across multiple Availability Zones m one AWS Region
- D. across multiple Availability Zones in two AWS Regions
Answer: D
NEW QUESTION # 230
Which of the following benefits does the AWS Compliance program provide to AWS customers? (Choose two.)
- A. AWS is responsible for the maintenance of common compliance framework documentation.
- B. It ensures the use of compliance frameworks that are being used by other cloud providers.
- C. It verifies that hosted workloads are automatically compliant with the controls of supported compliance frameworks.
- D. It assures customers that AWS is maintaining physical security and data protection.
- E. It will adopt new compliance frameworks as they become relevant to customer workloads.
Answer: A,C
Explanation:
Reference: https://d0.awsstatic.com/whitepapers/compliance/AWS_Risk_and_Compliance_Whitepaper.pdf
NEW QUESTION # 231
Which design principle is included in the operational excellence pillar of the AWS Well-Architected Framework?
- A. Create annotated documentation.
- B. Anticipate failure.
- C. Optimize costs.
- D. Ensure performance efficiency.
Answer: A
Explanation:
Create annotated documentation is the design principle that is included in the operational excellence pillar of the AWS Well-Architected Framework. According to the AWS Well-Architected Framework whitepaper, creating annotated documentation means "documenting your workload so that the team understands the architecture, how to operate the workload, and how the workload delivers value to customers."3 Anticipate failure, ensure performance efficiency, and optimize costs are design principles that belong to other pillars of the AWS Well-Architected Framework, such as reliability, performance efficiency, and cost optimization.
NEW QUESTION # 232
A company has an AWS environment that consists of a VPC. multiple subnets, and many Amazon EC2 instances in the subnets An engineer wants to restrict inbound traffic to one particular EC2 instance without affecting the other EC2 instances.
Which AWS service or feature should the engineer use to meet this requirement?
- A. Security groups
- B. Amazon GuardDuty
- C. Network ACLs
- D. AWS Shield
Answer: C
NEW QUESTION # 233
Which AWS services or features can control VPC traffic? (Select TWO.)
- A. AWS Direct Connect
- B. Amazon Connect
- C. Security groups
- D. Amazon GuardDuty
- E. Network ACLs
Answer: C,E
Explanation:
The AWS services or features that can control VPC traffic are security groups and network ACLs. Security groups are stateful firewalls that control the inbound and outbound traffic at the instance level. You can assign one or more security groups to each instance in a VPC, and specify the rules that allow or deny traffic based on the protocol, port, and source or destination. Network ACLs are stateless firewalls that control the inbound and outbound traffic at the subnet level. You can associate one network ACL with each subnet in a VPC, and specify the rules that allow or deny traffic based on the protocol, port, and source or destination. AWS Direct Connect, Amazon GuardDuty, and Amazon Connect are not services or features that can control VPC traffic.
AWS Direct Connect is a service that establishes a dedicated network connection between your premises and AWS. Amazon GuardDuty is a service that monitors your AWS account and workloads for malicious or unauthorized activity. Amazon Connect is a service that provides a cloud-based contact center solution.
NEW QUESTION # 234
A company has only basic knowledge of AWS technologies.
Which AWS service provides the SIMPLEST way for the company to establish a website on AWS?
- A. Amazon Lightsail
- B. AWS Lambda
- C. Amazon Elastic File System (Amazon EFS)
- D. AWS Elastic Beanstalk
Answer: D
NEW QUESTION # 235
A company wants to store internal reports in an Amazon S3 bucket. A compliance requirement states that unauthorized users must not be able to access any new data that is stored in the S3 bucket.
What should the company do to meet this requirement?
- A. Create a gateway VPC endpoint to the S3 bucket. Share only that endpoint with authorized users.
- B. Apply an S3 bucket policy that provides access to the AWS account root user credentials. Instruct the root user to provide access to authorized users.
- C. Split the reports into multiple files before storing them in the S3 bucket.
- D. Enable server-side encryption (SSE) with customer master keys (CMKs) that are available only to authorized users.
Answer: B
NEW QUESTION # 236
Which of the following is a pillar of the AWS Well-Architected Framework?
- A. Redundancy
- B. Multi-Region
- C. Operational excellence
- D. Availability
Answer: C
Explanation:
The AWS Well-Architected Framework helps cloud architects build secure, high-performing, resilient, and efficient infrastructure for their applications and workloads. Based on five pillars - operational excellence, security, reliability, performance efficiency, and cost optimization - the Framework provides a consistent approach for customers and partners to evaluate architectures, and implement designs that can scale over time.
Operational excellence is one of the pillars of the Framework, and it focuses on running and monitoring systems to deliver business value, and continually improving processes and procedures.
NEW QUESTION # 237
Which of the following is an AWS database service?
- A. Amazon Elastic Block Store (Amazon EBS)
- B. AWS Snowball
- C. Amazon Redshift
- D. Amazon S3 Glacier
Answer: C
Explanation:
Explanation/Reference:
Reference: https://www.sisense.com/glossary/redshift-database/
NEW QUESTION # 238
Which managed AWS serviceprovides real-time guidance on AWS security best practices?
- A. AWS X-Ray
- B. AWS Systems Manager
- C. AWS Trusted Advisor
- D. Amazon CloudWatch
Answer: C
Explanation:
Explanation
AWS offers premium services such as AWS Trusted Advisor, which provides real-time guidance to help youreduce cost, increase performance, and improve security.
Reference: https://www.ibm.com/downloads/cas/2N40X4PQ
NEW QUESTION # 239
The AWS Cloud's multiple Regions are an example of:
- A. agility.
- B. pay-as-you-go pricing.
- C. elasticity.
- D. global infrastructure.
Answer: D
Explanation:
Explanation
https://aws.amazon.com/blogs/apn/architecting-multi-region-saas-solutions-on-aws/
NEW QUESTION # 240
......
CLF-C01 Dumps are Available for Instant Access: https://www.lead1pass.com/Amazon/CLF-C01-practice-exam-dumps.html
Practice with these CLF-C01 dumps Certification Sample Questions: https://drive.google.com/open?id=1h337lFTe8yZAP-Gdpngxr5O3NoQNnX_f