ExamGecko
Home Home / Amazon / CLF-C01

Amazon CLF-C01 Practice Test - Questions Answers, Page 88

Question list
Search
Search

List of questions

Search

Related questions











A company wants to improve its security and audit posture by limiting Amazon EC2 inbound access.

What should the company use to access instances remotely instead of opening inbound SSH ports and managing SSH keys?

A.
EC2 key pairs
A.
EC2 key pairs
Answers
B.
AWS Systems Manager Session ManagerC AWS Identity and Access Management (1AM)
B.
AWS Systems Manager Session ManagerC AWS Identity and Access Management (1AM)
Answers
C.
Network ACLs
C.
Network ACLs
Answers
Suggested answer: B

Explanation:

Explanation:

AWS Systems Manager Session Manager is a new interactive shell and CLI that helps to provide secure, access-controlled, and audited Windows and Linux EC2 instance management. Session Manager removes the need to open inbound https://docs.aws.amazon.com/systems-manager/latest/userguide/session-manager.htmwww.VCEplus.il o ports, manage SSH keys, or use bastion hosts.

An application that is hosted on Amazon EC2 has a steady and consistent workload. The application will operate for at least 1 year. What is the MOST cost-effective instance purchasing option to meet these requirements?

A.
Spot Instances
A.
Spot Instances
Answers
B.
Reserved Instances
B.
Reserved Instances
Answers
C.
On-Demand Instances
C.
On-Demand Instances
Answers
D.
Dedicated Hosts
D.
Dedicated Hosts
Answers
Suggested answer: B

Explanation:

Explanation: https://blogs.vmware.com/cloudhealth/aws-reserved-instances-vs-ondemand/#:~:text=The%20difference%20between%20Reserved%20Instances%20and%20On%20Demand&text=The%20only%20difference%20between%20the,of%20an %20On%20Demand%20instance.

A company is building a business intelligence solution using Amazon Redshift. The company wants to use an AWS service to create interactive dashboards and not pay any upfront costs for it. Which service should the company use?

A.
Amazon CloudWatch
A.
Amazon CloudWatch
Answers
B.
AWS Personal Health Dashboard
B.
AWS Personal Health Dashboard
Answers
C.
AWS Service Catalog
C.
AWS Service Catalog
Answers
D.
Amazon QuickSight
D.
Amazon QuickSight
Answers
Suggested answer: D

Which AWS service is a cloud security posture management (CSPM) service that aggregates alerts from various AWS services and partner products in a standardized format?

A.
AWS Security Hub
A.
AWS Security Hub
Answers
B.
AWS Trusted Advisor
B.
AWS Trusted Advisor
Answers
C.
Amazon EventBridge
C.
Amazon EventBridge
Answers
D.
Amazon GuardDuty
D.
Amazon GuardDuty
Answers
Suggested answer: A

Explanation:

Explanation:

Use AWS Security Hub to automate security best practice checks, aggregate security alerts into a single place and format, and understand your overall security posture across all of your AWS accounts.

A company needs an AWS design solution for a distributed system. The system's components need to be set up so that one system component cannot negatively impact another component. Which AWS architectural best practice will meet this requirement?

A.
Use request throttling
A.
Use request throttling
Answers
B.
Use a stateful service
B.
Use a stateful service
Answers
C.
Implement automatic data backups
C.
Implement automatic data backups
Answers
D.
Implement loose coupling
D.
Implement loose coupling
Answers
Suggested answer: C

A company is building AWS architecture to deliver real-time data feeds from an on-premises data center into an application that runs on AWS. The company needs a consistent network connection with minimal latency. What should the company use to connect the application and the data center to meet these requirements?

A.
AWS Direct Connect
A.
AWS Direct Connect
Answers
B.
Public internet
B.
Public internet
Answers
C.
AWS VPN
C.
AWS VPN
Answers
D.
Amazon Connect
D.
Amazon Connect
Answers
Suggested answer: D

Which characteristic of the AWS Cloud helps users eliminate underutilized CPU capacity?

A.
Agility
A.
Agility
Answers
B.
Elasticity
B.
Elasticity
Answers
C.
Reliability
C.
Reliability
Answers
D.
Durability
D.
Durability
Answers
Suggested answer: B

A company wants the ability to accommodate peak application usage without purchasing equipment for on-premises data centers. Which AWS Cloud benefit is the company seeking?

A.
High availability
A.
High availability
Answers
B.
Security
B.
Security
Answers
C.
Reliability
C.
Reliability
Answers
D.
Elasticity
D.
Elasticity
Answers
Suggested answer: D

Which AWS services use cloud-native storage that provides replication across multiple Availability Zones by default? (Choose two.)

A.
Amazon ElastiCache
A.
Amazon ElastiCache
Answers
B.
Amazon RDS for Oracle
B.
Amazon RDS for Oracle
Answers
C.
Amazon Neptune
C.
Amazon Neptune
Answers
D.
Amazon DocumentDB (with MongoDB compatibility)
D.
Amazon DocumentDB (with MongoDB compatibility)
Answers
E.
Amazon Redshift
E.
Amazon Redshift
Answers
Suggested answer: B, E

A company has a serverless application that includes an Amazon API Gateway API, an AWS Lambda function, and an Amazon DynamoDB database. Which AWS service can the company use to trace user requests as they move through the application's components?

A.
AWS CloudTrail
A.
AWS CloudTrail
Answers
B.
Amazon CloudWatch
B.
Amazon CloudWatch
Answers
C.
Amazon Inspector
C.
Amazon Inspector
Answers
D.
AWS X-Ray
D.
AWS X-Ray
Answers
Suggested answer: D

Explanation:

Explanation:

X-ray - https://aws.amazon.com/xray/

CloudTrail - audit

Cloudwatch - monitor

Inspector - vulnerability management

X-Ray - tracing

Total 944 questions
Go to page: of 95