Which controls are shared under the AWS shared responsibility model? (Select TWO.)

Physical and environmental controls

Service and communications protection or security

Which tasks are responsibilities of AWS, according to the AWS shared responsibility model? (Select TWO.)

Encrypt client-side data and authenticate data integrity.

Provide physical security for Availability Zones.

Encrypt client-side data and authenticate data integrity.

Perform identity and access management.

Provide physical security for Availability Zones.

Patch the operating system of Amazon S3

Which AWS service provides storage that can be mounted across multiple Amazon EC2 instances?

Amazon Elastic File System (Amazon EFS)

AWS Database Migration Service (AWS DMS)

A company wants to migrate its on-premises Microsoft SQL Server database server to the AWS Cloud.The company has decided to use Amazon EC2 instances to run this database.Which of the following is the company responsible for managing, according to the AWS shared responsibility model?

Security patching of the guest operating system

Network connectivity of the host server

Uptime service level agreement (SLA) for the EC2 instances

Which task can a user complete by using AWS Identity and Access Management (IAM)?

Grant permissions to applications that run on Amazon EC2 instances.

Validate JSON syntax from an application configuration file.

Analyze logs from an Amazon API Gateway call.

Filter traffic to or from an Amazon EC2 instance.

Grant permissions to applications that run on Amazon EC2 instances.

A company manages global applications that require static IP addresses.Which AWS service would enable the company to improve the availability and performance of its applications?

Amazon S3 Transfer Acceleration

Which approach will enhance a userís security on AWS?

Encrypt data by using AWS Key Management Service (AWS KMS).

Use Multi-AZ deployments with Amazon RDS.

Create a hybrid architecture by using AWS Direct Connect.

Monitor application-specific information with AWS X-Ray.

Encrypt data by using AWS Key Management Service (AWS KMS).

A company is considering a migration from on premises to the AWS Cloud. The companyís IT team needs to offload support of the workload. What should the IT team do to accomplish this goal?

Use AWS Managed Services to provision, run, and support the company infrastructure.

Build hardware refreshes into the operational calendar to ensure availability.

Use Amazon Elastic Container Service (Amazon ECS) on Amazon EC2 instances.

Overprovision compute capacity for seasonal events and traffic spikes to prevent downtime.

Which of the following is a way to use Amazon EC2 Auto Scaling groups to scale capacity in the AWS Cloud?

Scale the number of EC2 instances in or out automatically, based on demand.

Scale the size of EC2 instances up or down automatically, based on demand.

Transfer unused CPU resources between EC2 instances.

Which of the following describes some of the core functionality of Amazon S3?

Amazon S3 is an object storage service that provides high-level performance, security, scalability, and data availability.

Amazon S3 is a high-performance block storage service that is designed for use with Amazon EC2

Amazon S3 is an object storage service that provides high-level performance, security, scalability, and data availability.

Amazon S3 is a fully managed, highly reliable, and scalable file storage system that is accessible over the industry-standard SMB protocol.

Amazon S3 is a scalable, fully managed elastic NFS for use with AWS Cloud services and on premises resources.

Which AWS service enables the decoupling and scaling of applications?

Amazon Simple Queue Service (Amazon SQS)

Amazon Simple Email Service (Amazon SES)

A company stores configuration files in an Amazon S3 bucket. These configuration files must be accessed by applications that are running on Amazon EC2 instances. According to AWS security best practices, how should the company grant permissions to allow the applications to access the S3 bucket?

Use an IAM role with the necessary permissions.

Use the AWS account root user access keys.

Use the AWS access key ID and the EC2 secret access key.

Use an IAM role with the necessary permissions.

Activate multi-factor authentication (MFA) and versioning on the S3 bucket.

Which task can a company complete by using AWS Organizations?

Activate DDoS protection across all accounts.

Track application deployment statuses globally.

Remove unused and underutilized AWS resources across all accounts.

Activate DDoS protection across all accounts.

Share pre-purchased Amazon EC2 resources across accounts.

Who can create and manage access keys for an AWS account root user?

An IAM user that has administrator permissions

IAM users within a designated group

An IAM user that has the required role

A retail company is building a new mobile app. The company is evaluating whether to build the app at an on-premises data center or in the AWS Cloud. Which of the following are benefits of building this app in the AWS Cloud? (Select TWO.)

A large, upfront capital expense and low variable expenses

Flexibility to scale up in minutes as the application becomes popular

A large, upfront capital expense and low variable expenses

Increased speed for trying out new projects

Complete control over the physical security of the infrastructure

Flexibility to scale up in minutes as the application becomes popular

Ability to pick the specific data centers that will host the application servers

A web application is hosted on AWS using an Elastic Load Balancer, multiple Amazon EC2 instances, and Amazon RDS. Which security measures fall under the responsibility of AWS? (Select TWO.)

Protecting against IP spoofing and packet sniffing

Installing the latest security patches on the RDS instance

Running a virus scan on EC2 instances

Protecting against IP spoofing and packet sniffing

Installing the latest security patches on the RDS instance

Encrypting communication between the EC2 instances and the Elastic Load Balancer

Configuring a security group and a network access control list (NACL) for EC2 instances

Which of the following are characteristics of a serverless application that runs in the AWS Cloud? (Select TWO.)

The application has built-in fault tolerance.

The application can scale based on demand.

Users must manually configure Amazon EC2 instances.

Users have a choice of operating systems.

The application has built-in fault tolerance.

Users can run Amazon EC2 Spot Instances.

The application can scale based on demand.

Which of the following are characteristics of AWS WAF? (Select TWO.)

Acts as a firewall that controls inbound and outbound traffic between subnets

Gives users the ability to block traffic that has specific HTTP headers

Acts as a firewall that controls inbound and outbound traffic between Amazon EC2 instances

Acts as a firewall that controls inbound and outbound traffic between subnets

Gives users the ability to block traffic that has specific HTTP headers

Protects websites that are not hosted on AWS

Scans Amazon EC2 instances for common vulnerabilities

Which combination of steps will enable multi-factor authentication (MFA) on an AWS account?(Select TWO.)

Activate AWS Shield on an MFA-compatible device.

Acquire an MFA-compatible device.

Contact AWS Support to initiate MFA activation.

Activate AWS Shield on an MFA-compatible device.

Acquire an MFA-compatible device.

Activate the MFA device by using Amazon GuardDuty.

Activate the MFA device in the IAM console or by using the AWS CLI.

Which of the following is an AWS Well-Architected Framework design principle for operational excellence in the AWS Cloud?

Stop spending money on hardware infrastructure for data center operations.

Make frequent, small, reversible changes.

Implement a strong foundation of identity and access management.

Stop spending money on hardware infrastructure for data center operations.

What is a benefit of using AWS serverless computing?

Management of infrastructure is offloaded to AWS.

Application deployment and management are not required.

Application security will be fully managed by AWS.

Monitoring and logging are not needed.

Management of infrastructure is offloaded to AWS.

A company runs applications that process credit card information. Auditors have asked if the AWS environment has changed since the previous audit. If the AWS environment has changed, the auditors want to know how it has changed.Which AWS services can provide this information? (Select TWO.)

AWS Identity and Access Management (IAM)

Which AWS service decouples application components so that the components run independently?

Amazon Simple Queue Service (Amazon SQS)

Amazon Simple Notification Service (Amazon SNS)

Amazon Simple Workflow Service (Amazon SWF)

Amazon Simple Queue Service (Amazon SQS)

Amazon CLF-C01 Practice Test 17 - Free Online Exam Questions 641-680

Spam

Selling illegal goods, money scams etc.

Hate Speech

Serious attack on a group.

Harassment and bullying

Harassing an individual (including doxing)

Harmful activities

Threatening or glorifying violence or serious harm, including self-harm

Adult content (Consensual)

Nudity/Sexual content

Sexual exploitation and abuse (child safety)

Sexually explicit or suggestive imagery or writing involving minors

Sexual exploitation and abuse (adults and animals)

Sexually explicit or suggestive imagery or writing involving non-consenting adults or non-humans

Plagiarism

Reusing content without attribution (link and blockquotes)

Poorly written

Not in English or has very bad formatting, grammar, and spelling

Inappropriate credential

Author's credential is offensive, spam, or impersonation

Other

Ex. Illegal content, incomplete question...

Amazon CLF-C01 Practice Test 17

Question

Amazon CLF-C01 Practice Tests

Practice Tests