The latest Amazon Web Services CLF-C01 AWS Certified Cloud Practitioner certification actual real practice exam question and answer (Q&A) dumps are available free, which are helpful for you to pass the Amazon Web Services CLF-C01 AWS Certified Cloud Practitioner exam and earn Amazon Web Services CLF-C01 AWS Certified Cloud Practitioner certification.
Exam Question 191
Which functions can users perform using AWS KMS?
A. Create and manage AWS access keys for the AWS account root user
B. Create and manage AWS access keys for an AWS account IAM user
C. Create and manage keys for encryption and decryption of data
D. Create and manage keys for multi-factor authentication
Correct Answer:
C. Create and manage keys for encryption and decryption of data
Exam Question 192
Which AWS services provide a user with connectivity between the AWS Cloud and on-premises resources? (Choose two.)
A. AWS VPN
B. Amazon Connect
C. Amazon Cognito
D. AWS Direct Connect
E. AWS Managed Services
Correct Answer:
A. AWS VPN
D. AWS Direct Connect
Exam Question 193
Which Amazon VPC feature enables users to capture information about the IP traffic that reaches Amazon EC2 instances?
A. Security groups
B. Elastic network interfaces
C. Network ACLs
D. VPC Flow Logs
Correct Answer:
D. VPC Flow Logs
Answer Description:
VPC Flow Logs is a feature that enables you to capture information about the IP traffic going to and from network interfaces in your VPC. Flow log data can be published to Amazon CloudWatch Logs or Amazon S3. After you’ve created a flow log, you can retrieve and view its data in the chosen destination.
Exam Question 194
Which AWS service can be used to automatically scale an application up and down without making capacity planning decisions?
A. Amazon AutoScaling
B. Amazon Redshift
C. AWS CloudTrail
D. AWS Lambda
Correct Answer:
D. AWS Lambda
Exam Question 195
A company wants to migrate a MySQL database to AWS but does not have the budget for Database Administrators to handle routine tasks including provisioning, patching, and performing backups.
Which AWS service will support this use case?
A. Amazon RDS
B. Amazon DynamoDB
C. Amazon DocumentDB
D. Amazon ElastiCache
Correct Answer:
A. Amazon RDS
Answer Description:
Amazon RDS makes it easy to set up, operate, and scale a relational database in the cloud. It provides cost-efficient and resizable capacity while automating time-consuming administration tasks, such as hardware provisioning, database setup, patching, and backups. It frees you to focus on your applications, so you can give them the fast performance, high availability, security, and compatibility that they need.
Exam Question 196
A company wants to expand from one AWS Region into a second AWS Region.
What does the company need to do to start supporting the new Region?
A. Contact an AWS Account Manager to sign a new contract
B. Move an Availability Zone to the new Region
C. Begin deploying resources in the second Region
D. Download the AWS Management Console for the new Region
Correct Answer:
C. Begin deploying resources in the second Region
Exam Question 197
A user must meet compliance and software licensing requirements that state a workload must be hosted on a physical server.
Which Amazon EC2 instance pricing option will meet these requirements?
A. Dedicated Hosts
B. Dedicated Instances
C. Spot Instances
D. Reserved Instances
Correct Answer:
A. Dedicated Hosts
Exam Question 198
What can assist in evaluating an application for migration to the cloud? (Choose two.)
A. AWS Trusted Advisor
B. AWS Professional Services
C. AWS Systems Manager
D. AWS Partner Network (APN)
E. AWS Secrets Manager
Correct Answer:
B. AWS Professional Services
D. AWS Partner Network (APN)
Exam Question 199
Which AWS service helps users meet contractual and regulatory compliance requirements for data security by using dedicated hardware appliances within the AWS Cloud?
A. AWS Secrets Manager
B. AWS CloudHSM
C. AWS Key Management Service (AWS KMS)
D. AWS Directory Service
Correct Answer:
B. AWS CloudHSM
Answer Description:
The AWS CloudHSM service helps you meet corporate, contractual, and regulatory compliance requirements for data security by using dedicated Hardware Security Module (HSM) instances within the AWS cloud. AWS and AWS Marketplace partners offer a variety of solutions for protecting sensitive data within the AWS platform, but for some applications and data subject to contractual or regulatory mandates for managing cryptographic keys, additional protection may be necessary. CloudHSM complements existing data protection solutions and allows you to protect your encryption keys within HSMs that are designed and validated to government standards for secure key management. CloudHSM allows you to securely generate, store, and manage cryptographic keys used for data encryption in a way that keys are accessible only by you.
Exam Question 200
Which AWS service is suitable for an event-driven workload?
A. Amazon EC2
B. AWS Elastic Beanstalk
C. AWS Lambda
D. Amazon Lumberyard
Correct Answer:
C. AWS Lambda
Answer Description:
An easy-to-use service for deploying and scaling web applications and web services developed in a number of programming languages. You can configure event notifications for your Elastic Beanstalk environment so that notable events can be automatically published to an SNS topic, then pushed to topic subscribers.As an example, you may use this event-driven architecture to coordinate your continuous integration pipeline (such as Jenkins CI). That way, whenever an environment is created, Elastic Beanstalk publishes this event to an SNS topic, which triggers a subscribing Lambda function, which then kicks off a CI job against your newly created Elastic Beanstalk environment.