CLF-C01 Exam - AWS Certified Cloud Practitioner

NEW QUESTION 1

At what support level do users receive access to a support concierge?

• A. Basic Support
• B. Developer Support
• C. Business Support
• D. Enterprise Support

Answer: D

Explanation:
Users receive access to a support concierge at the Enterprise Support level. A support concierge is a team of AWS billing and account experts that specialize in working with enterprise accounts. They can help users with billing and account inquiries, cost optimization, FinOps support, cost analysis, and prioritized answers to billing questions. The support concierge is included as part of the Enterprise Support plan, which also provides access to a Technical Account Manager (TAM), Infrastructure Event Management, AWS Trusted Advisor, and 24/7 technical support. References: AWS Support Plan Comparison, AWS Enterprise Support Plan, AWS Support Concierge

NEW QUESTION 2

A company needs to design a solution for the efficient use of compute resources for an enterprise workload. The company needs to make informed decisions as its technology needs evolve.
Which pillar of the AWS Well-Architected Framework do these requirements represent?

• A. Operational excellence
• B. Performance efficiency
• C. Cost optimization
• D. Reliability

Answer: B

Explanation:
Performance efficiency is the pillar of the AWS Well-Architected Framework that represents the requirements of designing a solution for the efficient use of compute resources for an enterprise workload and making informed decisions as the technology needs evolve. It focuses on using the right resources and services for the workload, monitoring performance, and continuously improving the efficiency of the solution. Operational excellence is the pillar of the AWS Well-Architected Framework that represents the ability to run and monitor systems to deliver business value and to continually improve supporting processes and procedures. Cost optimization is the pillar of the AWS Well-Architected Framework that represents the ability to run systems to deliver business value at the lowest price point. Reliability is the pillar of the AWS Well-Architected Framework that represents the ability of a system to recover from infrastructure or service disruptions, dynamically acquire computing resources to meet demand, and mitigate disruptions such as misconfigurations or transient network issues.

NEW QUESTION 3

A company wants to integrate its online shopping website with social media login credentials.
Which AWS service can the company use to make this integration?

• A. AWS Directory Service
• B. AWS Identity and Access Management (IAM)
• C. Amazon Cognito
• D. AWS IAM Identity Center (AWS Single Sign-On)

Answer: C

Explanation:
Amazon Cognito is a service that enables you to add user sign-up and sign- in features to your web and mobile applications. Amazon Cognito also supports social and enterprise identity federation, which means you can allow your users to sign in with their existing credentials from identity providers such as Google, Facebook, Apple, and Amazon. Amazon Cognito integrates with OpenID Connect (OIDC) and Security Assertion Markup Language (SAML) 2.0 protocols to facilitate the authentication and authorization process. Amazon Cognito also provides advanced security features, such as adaptive authentication, user verification, and multi-factor authentication (MFA). References: Amazon Cognito, What is Amazon Cognito?

NEW QUESTION 4

A company wants guidance to optimize the cost and performance of its current AWS environment.
Which AWS service or tool should the company use to identify areas for optimization?

• A. Amazon QuickSight
• B. AWS Trusted Advisor
• C. AWS Organizations
• D. AWS Budgets

Answer: B

Explanation:
AWS Trusted Advisor is the AWS service or tool that the company should use to identify areas for optimization. According to the AWS Trusted Advisor User Guide, “AWS Trusted Advisor is an online tool that provides you real time guidance to help you provision your resources following AWS best practices. AWS Trusted Advisor checks help optimize your AWS infrastructure, increase security and performance, reduce your overall costs, and monitor service limits.” Amazon QuickSight, AWS Organizations, and AWS Budgets are not designed to provide optimization recommendations for the current AWS environment.

NEW QUESTION 5

A company wants to create a globally accessible ecommerce platform for its customers. The company wants to use a highly available and scalable DNS web service to connect users to the platform.
Which AWS service will meet these requirements?

• A. Amazon EC2
• B. Amazon VPC
• C. Amazon Route 53
• D. Amazon RDS

Answer: C

Explanation:
Amazon Route 53 is a highly available and scalable Domain Name System (DNS) web service that can route internet traffic to the company’s ecommerce platform1. Route 53 can also register domain names, check the health of resources, and provide global DNS features2. Route 53 can connect users to the platform by translating human-readable names like www.example.com into the numeric IP addresses that computers use to communicate with each other2. References: 1: Amazon Route 53 | DNS Service | AWS; 2: What is Amazon Route 53? - Amazon Route 53

NEW QUESTION 6

Which of the following is a benefit of using an AWS managed service?

• A. Reduced operational overhead for a company's IT staff
• B. Increased fixed costs that can be predicted by a finance team
• C. Removal of the need to have a backup strategy
• D. Removal of the need to follow compliance standards

Answer: A

Explanation:
This is a benefit of using an AWS managed service, such as Amazon S3, Amazon DynamoDB, or AWS Lambda. AWS managed services are fully managed by AWS, which means that AWS handles the provisioning, scaling, patching, backup, and recovery of the underlying infrastructure and software. This reduces the operational overhead for the company’s IT staff, who can focus on their core business logic and innovation. You can learn more about the AWS managed services from this webpage or this digital course.

NEW QUESTION 7

Which AWS service meets this requirement?

• A. AWS CloudFormation
• B. AWS Elastic Beanstalk
• C. AWS Cloud9
• D. AWS CloudShell

Answer: A

Explanation:
AWS CloudFormation is a service that gives developers and businesses an easy way to create a collection of related AWS and third-party resources, and provision and manage them in an orderly and predictable fashion. You can use AWS CloudFormation’s sample templates or create your own templates to describe the AWS and third-party resources, and any associated dependencies or runtime parameters, required to run your application.

NEW QUESTION 8

A company wants to define a central data protection policy that works across AWS services for compute, storage, and database resources.
Which AWS service will meet this requirement?

• A. AWS Batch
• B. AWS Elastic Disaster Recovery
• C. AWS Backup
• D. Amazon FSx

Answer: C

Explanation:
The AWS service that will meet this requirement is C. AWS Backup.
AWS Backup is a service that allows you to define a central data protection policy that works across AWS services for compute, storage, and database resources. You can use AWS Backup to create backup plans that specify the frequency, retention, and lifecycle of your backups, and apply them to your AWS resources using tags or resource IDs. AWS Backup supports various AWS services, such as Amazon EC2, Amazon EBS, Amazon RDS, Amazon DynamoDB, Amazon EFS, Amazon FSx, and AWS Storage Gateway12. AWS Batch is a service that allows you to run batch computing workloads on AWS. AWS Batch does not provide a central data protection policy, but rather enables you to optimize the allocation and utilization of your compute resources3.
AWS Elastic Disaster Recovery is a service that allows you to prepare for and recover from disasters using AWS. AWS Elastic Disaster Recovery does not provide a central data protection policy, but rather helps you minimize downtime and data loss by replicating your applications and data to AWS4.
Amazon FSx is a service that provides fully managed file storage for Windows and Linux applications. Amazon FSx does not provide a central data protection policy, but rather offers features such as encryption, snapshots, backups, and replication to protect your file systems5.
References:
1: AWS Backup – Centralized backup across AWS services 3: AWS Batch – Run Batch Computing Jobs on AWS 2: Data Protection Reference Architectures with AWS Backup 4: AWS Elastic Disaster Recovery – Prepare for and recover from disasters using AWS 5: Amazon FSx – Fully managed file storage for Windows and Linux applications

NEW QUESTION 9

A company is considering migration to the AWS Cloud. The company wants a fully managed service or feature that can transfer streaming data from multiple sources to an Amazon S3 bucket.
Which AWS service or feature should the company use to meet these requirements?

• A. AWS DataSync
• B. Amazon Kinesis Data Firehose
• C. S3 Select
• D. AWS Transfer Family

Answer: B

Explanation:
Amazon Kinesis Data Firehose is a fully managed service that delivers real- time streaming data to destinations such as Amazon S3, Amazon Redshift, Amazon Elasticsearch Service, and Splunk. You can use Amazon Kinesis Data Firehose to capture, transform, and load streaming data from multiple sources, such as web applications, mobile devices, IoT sensors, and social media.

NEW QUESTION 10

A company needs to block SQL injection attacks.
Which AWS service or feature can meet this requirement?

• A. AWS WAF
• B. AWS Shield
• C. Network ACLs
• D. Security groups

Answer: A

Explanation:
AWS WAF is a web application firewall that helps protect web applications from common web exploits, such as SQL injection attacks. It allows customers to create custom rules that block malicious requests. AWS Shield is a managed service that protects against distributed denial of service (DDoS) attacks, not SQL injection attacks. Network ACLs and security groups are network-level security features that filter traffic based on IP addresses and ports, not web requests or SQL queries. References: [AWS WAF], [AWS Shield], [Network ACLs], [Security groups]

NEW QUESTION 11

A user needs a relational database but does not have the resources to manage the hardware, resiliency, and replication.
Which AWS service option meets the user's requirements'?

• A. Run MySQL on Amazon Elastic Container Service (Amazon ECS)
• B. Run MySQL on Amazon EC2
• C. Choose Amazon RDS for MySQL
• D. Choose Amazon ElastiCache for Redis

Answer: C

Explanation:
Amazon RDS for MySQL is a fully managed, open-source cloud database service that allows you to easily operate and scale your relational database of choice, including MySQL. With Amazon RDS for MySQL, you don’t have to worry about the hardware, resiliency, and replication of your database, as Amazon RDS handles these tasks for you. Amazon RDS for MySQL also provides features such as automated backups, multi-AZ deployments, read replicas, encryption, monitoring, and more. Amazon RDS for MySQL is compatible with the MySQL Community Edition versions 5.7 and 8.0, which means that you can use the same code, applications, and tools that you already use with MySQL4567. References: 4: Hosted MySQL - Amazon RDS for MySQL - AWS, 5: Amazon RDS for MySQL - Amazon Relational Database Service, 6: Amazon RDS for MySQL —, 7: Managed SQL Database - Amazon Relational Database Service (RDS) - AWS

NEW QUESTION 12

Which design principles support the reliability pillar of the AWS Well-Architected Framework? (Select TWO.)

• A. Perform operations as code.
• B. Enable traceability.
• C. Automatically scale to meet demand.
• D. Deploy resources globally to improve response time.
• E. Automatically recover from failure.

Answer: CE

Explanation:
The design principles that support the reliability pillar of the AWS Well- Architected Framework are: automatically scale to meet demand, and automatically recover from failure. These principles help users design systems that can handle changes in load, avoid disruptions, and resume normal operations quickly. Automatically scaling to meet demand means adjusting the capacity of the system based on the current and anticipated workload, using services such as AWS Auto Scaling, Amazon EC2, and AWS
Lambda. Automatically recovering from failure means detecting and resolving issues, using services such as Amazon CloudWatch, AWS CloudFormation, and AWS CloudTrail

NEW QUESTION 13

A company needs to run code in response to an event notification that occurs when objects are uploaded to an Amazon S3 bucket.
Which AWS service will integrate directly with the event notification?

• A. AWS Lambda
• B. Amazon EC2
• C. Amazon Elastic Container Registry (Amazon ECR)
• D. AWS Elastic Beanstalk

Answer: A

Explanation:
AWS Lambda is a service that lets you run code without provisioning or managing servers. You can use Lambda to process event notifications from Amazon S3 when objects are uploaded or deleted. Lambda integrates directly with the event notification and invokes your code automatically. Therefore, the correct answer is A.

NEW QUESTION 14

A company wants to receive alerts to monitor its overall operating costs for its AWS public
cloud infrastructure.
Which AWS offering will meet these requirements?

• A. Amazon EventBridge
• B. Compute Savings Plans
• C. AWS Budgets
• D. Migration Evaluator

Answer: C

Explanation:
AWS Budgets is a service that enables you to plan your service usage, service costs, and instance reservations. You can use AWS Budgets to create custom budgets that alert you when your costs or usage exceed (or are forecasted to exceed) your budgeted amount. You can also use AWS Budgets to monitor how close your usage and costs are to meeting your reservation purchases1

NEW QUESTION 15

A company wants to track its AWS account's service costs. The company also wants to receive notifications when costs are forecasted to reach a specific level.
Which AWS service or tool provides this functionality?

• A. AWS Budgets
• B. AWS Cost Explorer
• C. Savings Plans
• D. AWS Billing Conductor

Answer: A

Explanation:
AWS Budgets gives you the ability to set custom budgets that alert you when your costs or usage exceed (or are forecasted to exceed) your budgeted amount. You can also use AWS Budgets to set reservation utilization or coverage targets and receive alerts when your utilization drops below the threshold you define2.

NEW QUESTION 16

Which AWS service or feature offers security for a VPC by acting as a firewall to control traffic in and out of subnets?

• A. AWS Security Hub
• B. Security groups
• C. Network ACL
• D. AWSWAF

Answer: C

Explanation:
A network access control list (network ACL) is a feature that acts as a firewall for controlling traffic in and out of one or more subnets in a virtual private cloud (VPC). AWS Security Hub is a service that provides a comprehensive view of the security posture of AWS accounts and resources. Security groups are features that act as firewalls for controlling traffic at the instance level. AWS WAF is a web application firewall that helps protect web applications from common web exploits.

NEW QUESTION 17
......