According to the AWS shared responsibility model, what responsibility does a customer have when using Amazon RDS to host a database?

Design encryption-at-rest strategies

Manage connections to the database

Design encryption-at-rest strategies

How can a user protect an Amazon EC2 instance from a suspicious IP address?

Block the IP on the inbound rule of a network ACL.

Block the IP on the outbound rule of a security group.

Block the IP on the inbound rule of a security group and network ACL.

Block the IP on the outbound rule of a security group and network ACL.

Which of the following are features of network ACLs as they are used in the AWS Cloud? (Select TWO.)

They process rules in order, starting with the lowest numbered rule, when deciding whether to allow traffic.

They evaluate all rules before allowing traffic.

They process rules in order, starting with the lowest numbered rule, when deciding whether to allow traffic.

They operate at the instance level.

A company manages an on-premises MySQL database on a Windows server. The company wants to migrate the database to AWS and needs a solution that will reduce the administrative overhead of the database. Which AWS service will meet this requirement?

Amazon Elastic File System (Amazon EFS)

What is one of the core principles to follow when designing a highly available application in the AWS Cloud?

Assume that all components within an application can fail.

Design using a serverless architecture.

Assume that all components within an application can fail.

Design AWS Auto Scaling Into every application.

Design all components using open-source code.

A company wants to store its noncritical, infrequently accessed data in Amazon S3. The data must be retrievable within seconds. Which S3 storage class meets these requirements MOST cost-effectively?

S3 One Zone-Infrequent Access (S3 One Zone-IA)

S3 Standard-Infrequent Access (S3 Standard-IA)

S3 One Zone-Infrequent Access (S3 One Zone-IA)

Which tasks require the use of AWS account root user credentials? (Select TWO.)

Create an IAM administrator access policy.

Configure multi-factor authentication (MFA) delete for an Amazon S3 bucket

Create an IAM administrator access policy.

Open a support ticket with AWS to request an increase to service quotas.

Change payment currency for an AWS account.

An auditor is preparing for an annual security audit. The auditor requests certification details for a company's AWS hosted resources across multiple Availability Zones in the us-east-1 Region. How should the company respond to the auditor's request?

Open an AWS Support ticket to request that the AWS technical account manager (TAM) respond and help the auditor

Open an AWS Support ticket to request that the auditor receive approval to conduct an onsite assessment of the AWS data centers in which the company operates.

Explain to the auditor that AWS does not need to be audited because the company's application is hosted in multiple Availability Zones.

Use AWS Artifact to download the applicable report for AWS security controls. Provide the report to the auditor.

Which AWS service allows a user to provision a managed MySQL DB instance?

AWS Database Migration Service (AWS DMS)

A company has the AWS Basic Support plan. The company needs assistance in its efforts to deploy, test, and improve its AWS environment Which form of assistance can the company use at no cost?

AWS online documentation, whitepapers. blogs. and support forums

AWS Support API for programmatic case management

AWS technical account manager (TAM) consultation

AWS online documentation, whitepapers. blogs. and support forums

In-person AWS training classes with an accredited instructor

Which AWS service keeps track of SSUTLS certificates, creates new certificates, and processes renewals?

AWS Identity and Access Management (IAM)

A company plans to migrate an on-premises Microsoft SQL Server database to the AWS Cloud The database supports a legacy application. The company wants to maintain administrative control of the database configuration and host operating system Which AWS service or feature meets these requirements?

Amazon RDS for SOL ServerB . SQL Server on Amazon EC2

What is a benefit of using an Elastic Load Balancer (ELB) with applications running in the AWS Cloud?

An ELB can balance traffic across multiple compute resources.

An ELB will automatically scale resources to meet capacity needs.

An ELB can balance traffic across multiple compute resources.

An ELB can span multiple AWS Regions.

An ELB can balance traffic between multiple internet gateways.

Which AWS compute service automatically scales resources up or down to meet application workload demands?

Amazon Simple Queue Service (Amazon SOS)

Which tasks are the customer's responsibility, according to the AWS shared responsibility model?(Select TWO.)

Perform client-side data encryption.

Establish the global infrastructure.

Perform client-side data encryption.

A company has an Amazon EC2 instance that must access AWS Secrets Manager to retrieve credentials. Which identity or service is required by the EC2 Instance to perform the task?

Multi-factor authentication (MFA)

Which type of AWS storage is ephemeral and is deleted when an Amazon EC2 instance is stopped or terminated''

Amazon Elastic Block Store (Amazon EBS)

Amazon Elastic File System (Amazon EFS)

A developer has a stateful web server on-premises that is being migrated to AWS. The developer must have greater elasticity in the new design How should the developer re-factor the application to make it more elastic? (Select TWO.)

Store session state data m an Amazon DynamoDB table.

Use an ELB with an Auto Scaling group

Use pessimistic concurrency on Amazon DynamoDB

Use Amazon CloudFront with an Auto Scaling group.

Use Amazon CloudFront with an AWS Web Application Firewall

Store session state data m an Amazon DynamoDB table.

Use an ELB with an Auto Scaling group

A company has a two-tier application running on an Amazon EC2 server that handles all of its AWS based e-commerce activity. During peak times, the backend servers that process orders are overloaded with requests This results in some orders falling to process A developer needs to create a solution that will re factor the application Which steps will allow for more flexibility during peak times, while still remaining cost-effective?(Select TWO.)

Implement an Amazon SQS queue to decouple the front-end and backend servers.

Modify the backend servers to pull from an Amazon SQS queue.

Increase the backend T2 EC2 instance sizes to xi to handle the largest possible load throughout the yeawww.VCEplus.ir o

Implement an Amazon SQS queue to decouple the front-end and backend servers.

Use an Amazon SNS queue to the couple the front-end and backend servers

Migrate the backend servers to on-premises and pull from an Amazon SNS queue

Modify the backend servers to pull from an Amazon SQS queue.

A developer has discovered that an application responsible for processing messages in an Amazon SQS queue is routinely falling behind The application is capable of processing multiple messages in one invocation, but is only receiving one message at a time What should the developer do to increase the number of messages the application receives?

Call the SetQueue Attributes API for the queue and set MaxNumberOfMessages to a value greater than the default of 1

Call the ChangeMessageVisibility API for the queue and set MaxNumberOfMessages to a value greater than the default of

Call the AddPormission API to set MaxNumborOfMessages for the ReceiveMessage action to a value greater than the default of 1

Call the ReceiveMessage API to set MaxNumberOfM ess ages to a value greater than the default of 1.

Call the SetQueue Attributes API for the queue and set MaxNumberOfMessages to a value greater than the default of 1

A company has a website that displays a daily newsletter. When a user visits the website, an AWS Lambda function processes the browser's request and queries the company's on-premises database to obtain the current newsletter. The newsletters are stored in English. The Lambda function uses the Amazon Translate TranslateText API operation to translate the newsletters and the translation is displayed to the user Due to an increase in popularity, the website's response time has slowed. The database is overloaded The company cannot change the database and needs a solution that improves the response time of the Lambda function Which solution meets these requirements?

Cache the translated newsletters in the Lambda /tmp directory

Change to asynchronous Lambda function invocation

Cache the translated newsletters in the Lambda /tmp directory

Enable TranslateText API caching.

Change the Lambda function to use parallel processing

A Lambda function processes data before sending it to a downstream service. Each piece of data is approximately 1MB in size. After a security audit, the function is now required to encrypt the data before sending it downstream Which API call is required to perform the encryption?

Use the KMS GenerateDataKeyAPi to get an encryption key

Pass the data to the KMS ReEncrypt API for encryption

Use the KMS GenerateDataKeyAPi to get an encryption key

Use the KMS GeneraceDaraHeywithoutPlainTexr API to get an encryption key

Pass the data to KMS as part of the Encrypt API for encryption.

A company is migrating its on-premises database to Amazon RDS for MySQL. The company has readheavy workloads, and wants to make sure it re-factors its code to achieve optimum read performance for its queries. How can this objective be met?

Add a connection string to use an RDS read replica for read queries.

Add database retries to effectively use RDS with vertical scaling

Use RDS with multi-AZ deployment

Add a connection string to use an RDS read replica for read queries.

Add a connection string to use a read replica on an EC2 instance

A company stores documents in Amazon S3 with default settings A new regulation requires the company to encrypt the documents at rest, rotate the encryption keys annually, and keep a record of when the encryption keys were rotated.The company does not want to manage the encryption keys outside of AWS Which solution will meet these requirements?

Use server-side encryption with customer-provided encryption keys (SSE-C)

Use server-side encryption with Amazon S3 managed encryption keys (SSE-S3).

Use server-side encryption with AWS KMS managed encryption keys (SSE-KMS)

Use server-side encryption with customer-provided encryption keys (SSE-C)

Use client-side encryption before sending the data to Amazon S3

Amazon CLF-C01 Practice Test 14 - Free Online Exam Questions 521-560

According to the AWS shared responsibility model, the customer is responsible for maintaining:

Become a Premium Member for full access

Unlock Premium Member

Amazon CLF-C01 Practice Test 14

Question

Amazon CLF-C01 Practice Tests

Practice Tests