Which of the following is an AWS best practice for managing an AWS account root user?

Enable multi-factor authentication (MFA) for the root user

Keep the root user password with the security team

Enable multi-factor authentication (MFA) for the root user

Create an access key for the root user

Keep the root user password consistent for compliance purposes

A company has a compliance requirement to encrypt data in transit and at rest. The company is serving the content through Amazon EC2 instances behind an Elastic Load Balancer! and is storing data in Amazon Elastic Block Store (Amazon EBS) volumes.Which combination of AWS services should the company use to stay compliant with this requirement? (Select TWO.)

AWS Key Management Service (AWS KMS)

Which of the following is a software development framework that a company can use to define cloud resources as code and provision the resources through AWS CloudFormation?

AWS Cloud Development Kit (AWS CDK)

A company uses Amazon EC2 instances and wants to maintain high availability in geographically distributed locations Which choice should the company make for the location of its EC2 instances?

Use multiple Availability Zones in multiple AWS Regions

Use a single Availability Zone in multiple edge locations

Use multiple Availability Zones in multiple AWS Regions

Use multiple Availability Zones in a single AWS Region

Use multiple Availability Zones in multiple edge locations

Under the AWS shared responsibility model which task is the customer's responsibility when managing AWS Lambda functions?

Creating versions of Lambda functions

Maintaining server and operating systems

Scaling Lambda resources according to demand

Updating the Lambda runtime environment

Which IPv4 internet address for Amazon EC2 instances is billed at an hourly rate?

An Elastic IP address that is not associated with an EC2 instance that is running

A dynamic IP address that is requested in excess of the Regional limit for each account

An Elastic IP address that is associated with an EC2 instance that is running

An Elastic IP address that is not associated with an EC2 instance that is running

A bring your own IP address (BYOIP) that is assigned to an EC2 instance that is running

Which activity is considered out of scope for AWS Support?

Solving problems detected by Amazon EC2 health checks

Answering "how to" questions on AWS services and features

What are the benefits of consolidated billing for AWS Cloud services? (Select TWO.)

A minimal additional fee for use

Custom cost and usage budget creation

A company has decided to migrate its production workloads to the AWS Cloud.Which actions can help reduce operational costs as part of the migration? (Select TWO.)

Rehost all third-party licenses on AWS

Reduce overprovisioned instances

Rehost all third-party licenses on AWS

Implement a highly available architecture

A company spends several months upgrading its on-premises infrastructure every few years The company wants to reduce infrastructure procurement time by migrating to the AWS Cloud. What is the main benefit of migrating to the AWS Cloud for this use case?

Enterprise support will be available to help with recurring application installation and setup

AWS will help move the existing hardware to the AWS data centers

The company will have increased agility with on-demand access to IT resources

Enterprise support will be available to help with recurring application installation and setup

The company will experience less downtime with Multi-AZ deployments

A company recently migrated data from on premises to Amazon Aurora. How does the AWS shared responsibility model apply to this use case?

AWS is responsible for installing the database application, updating the operating system, and performing maintenance

AWS is responsible for the physical infrastructure on which the company's data resides. The company is responsible for everything else.

AWS is responsible for installing the database application, updating the operating system, and performing maintenance

The company is responsible for updating the operating system and performing software maintenance

The company is responsible for the security of the hardware on which the database resides

Which AWS service offers the LEAST expensive means of storing static images?

Amazon Elastic Block Store (Amazon EBS)

Which guideline is a well-architected design principle for building cloud applications?

Design for automated recovery from failure

Keep static data closer to compute resources

Provision resources for peak capacity

Design for automated recovery from failure

What are characteristics of AWS IAM users and groups? (Select TWO.)

A user can be a member of multiple groups

Groups can contain users only and cannot be nested

Groups can be nested and can contain other groups

A user can be a member of multiple groups

Groups can contain users only and cannot be nested

A user can only be a member of a single group at one time

All new users are automatically added to a default group

A company recently created its first AWS account.Which AWS services will require the use of a VPC? (Select TWO.)

Amazon Elastic File System (Amazon EFS)

Which guidelines are best practices for using AWS Identity and Access Management (IAM)? (Select TWO.)

Use inline policies instead of customer managed policies

Use groups to assign permissions to IAM users

Use inline policies instead of customer managed policies

Grant maximum privileges to IAM users

Use groups to assign permissions to IAM users

A company wants to archive its media data as soon as the data is generated. The company needs to store the data for several years Two or three times each year the company must access some of the data within 10 minutes of a request. Which Amazon S3 solution will meet these requirements MOST cost-effectively?

S3 Glacier with expedited retrievals

Which of the following security resources are supplied by AWS? (Select TWO.)

Peer-to-peer file-sharing detection

Which of the following are benefits of using AWS Trusted Advisor? (Choose two.)

Detecting underutilized resources to save costs

Improving security by proactively monitoring the AWS environment

Providing high-performance container orchestration

Creating and rotating encryption keys

Detecting underutilized resources to save costs

Improving security by proactively monitoring the AWS environment

Implementing enforced tagging across AWS resources

A company's information security manager is supervising a move to AWS and wants to ensure that AWS best practices are followed. The manager has concerns about the potential misuse of AWS account root user credentials. Which of the following is an AWS best practice for using the AWS account root user credentials?

Use the account root user credentials only when they alone must be used to perform a required function

Allow only the manager to use the account root user credentials for normal activities

Use the account root user credentials only for Amazon EC2 instances from the AWS Free Tier

Use the account root user credentials only when they alone must be used to perform a required function

Use the account root user credentials only for the creation of private VPC subnets

A company wants to build an application for a new line of business.According to the AWS Welt-Architected Framework, what design principles should be implemented?(Select TWO.)

Consolidate multiple AWS accounts into a single account.

Design elasticity into the AWS Cloud design

Consolidate multiple AWS accounts into a single account.

Buy and host hardware in the AWS Cloud

Move on-premises network hardware to VPCs

Decouple the AWS Cloud architecture to break up monolithic deployments

Design elasticity into the AWS Cloud design

Which actions should a company take to avoid failure in an AWS architecture design? (Select TWO)

Separate Amazon EC2 instances into different Availability Zones.

Enable Amazon S3 Cross-Region Replication

Separate Amazon EC2 instances into different Availability Zones.

Enable Alexa for Business for business applications

Use Amazon Workspaces to reduce the need for operating system patching

Use AWS Glue to prepare and load failover data

Enable Amazon S3 Cross-Region Replication

Amazon CLF-C01 Practice Test 8 - Free Online Exam Questions 281-320

Spam

Selling illegal goods, money scams etc.

Hate Speech

Serious attack on a group.

Harassment and bullying

Harassing an individual (including doxing)

Harmful activities

Threatening or glorifying violence or serious harm, including self-harm

Adult content (Consensual)

Nudity/Sexual content

Sexual exploitation and abuse (child safety)

Sexually explicit or suggestive imagery or writing involving minors

Sexual exploitation and abuse (adults and animals)

Sexually explicit or suggestive imagery or writing involving non-consenting adults or non-humans

Plagiarism

Reusing content without attribution (link and blockquotes)

Poorly written

Not in English or has very bad formatting, grammar, and spelling

Inappropriate credential

Author's credential is offensive, spam, or impersonation

Other

Ex. Illegal content, incomplete question...

Amazon CLF-C01 Practice Test 8

Question

Amazon CLF-C01 Practice Tests

Practice Tests