The latest Amazon Web Services CLF-C01 AWS Certified Cloud Practitioner certification actual real practice exam question and answer (Q&A) dumps are available free, which are helpful for you to pass the Amazon Web Services CLF-C01 AWS Certified Cloud Practitioner exam and earn Amazon Web Services CLF-C01 AWS Certified Cloud Practitioner certification.
Exam Question 121
A startup is working on a new application that needs to go to market quickly. The application requirements may need to be adjusted in the near future.
Which of the following is a characteristic of the AWS Cloud that would meet this specific need?
A. Elasticity
B. Reliability
C. Performance
D. Agility
Correct Answer:
D. Agility
Answer Description:
Agile is a time boxed, iterative approach to software delivery that builds software incrementally from the start of the project, instead of trying to deliver it all at once near the end.
Exam Question 122
Which of the following services have Distributed Denial of Service (DDoS) mitigation features? (Choose two.)
A. AWS WAF
B. Amazon DynamoDB
C. Amazon EC2
D. Amazon CloudFront
E. Amazon Inspector
Correct Answer:
A. AWS WAF
D. Amazon CloudFront
Exam Question 123
Which AWS tool will identify security groups that grant unrestricted Internet access to a limited list of ports?
A. AWS Organizations
B. AWS Trusted Advisor
C. AWS Usage Report
D. Amazon EC2 dashboard
Correct Answer:
B. AWS Trusted Advisor
Exam Question 124
Which AWS service can be used to generate alerts based on an estimated monthly bill?
A. AWS Config
B. Amazon CloudWatch
C. AWS X-Ray
D. AWS CloudTrail
Correct Answer:
B. Amazon CloudWatch
Answer Description:
You can monitor your estimated AWS charges by using Amazon CloudWatch. When you enable the monitoring of estimated charges for your AWS account, the estimated charges are calculated and sent several times daily to CloudWatch as metric dat
A. Billing metric data is stored in the US East (N. Virginia) Region and represents worldwide charges. This data includes the estimated charges for every service in AWS that you use, in addition to the estimated overall total of your AWS charges.
Exam Question 125
Which Amazon EC2 pricing model offers the MOST significant discount when compared to On-Demand Instances?
A. Partial Upfront Reserved Instances for a 1-year term
B. All Upfront Reserved Instances for a 1-year term
C. All Upfront Reserved Instances for a 3-year term
D. No Upfront Reserved Instances for a 3-year term
Correct Answer:
C. All Upfront Reserved Instances for a 3-year term
Exam Question 126
Which services manage and automate application deployments on AWS? (Choose two.)
A. AWS Elastic Beanstalk
B. AWS CodeCommit
C. AWS Data Pipeline
D. AWS CloudFormation
E. AWS Config
Correct Answer:
A. AWS Elastic Beanstalk
D. AWS CloudFormation
Exam Question 127
A user wants guidance on possible savings when migrating from on-premises to AWS.
Which tool is suitable for this scenario?
A. AWS Budgets
B. Cost Explorer
C. AWS Total Cost of Ownership (TCO) Calculator
D. AWS Well-Architected Tool
Correct Answer:
C. AWS Total Cost of Ownership (TCO) Calculator
Answer Description:
The TCO Calculator provides directional guidance on possible realized savings when deploying AWS. This tool is built on an underlying calculation model, that generates a fair assessment of value that a customer may achieve given the data provided by the user.
Exam Question 128
Which principles are used to architect applications for reliability on the AWS Cloud? (Choose two.)
A. Design for automated failure recovery
B. Use multiple Availability Zones
C. Manage changes via documented processes
D. Test for moderate demand to ensure reliability
E. Backup recovery to an on-premises environment
Correct Answer:
A. Design for automated failure recovery
B. Use multiple Availability Zones
Exam Question 129
Which AWS security service protects applications from distributed denial of service attacks with always-on detection and automatic inline mitigations?
A. Amazon Inspector
B. AWS Web Application Firewall (AWS WAF)
C. Elastic Load Balancing (ELB)
D. AWS Shield
Correct Answer:
D. AWS Shield
Answer Description:
AWS Shield is a managed Distributed Denial of Service (DDoS) protection service that safeguards applications running on AWS. AWS Shield provides always-on detection and automatic inline mitigations that minimize application downtime and latency, so there is no need to engage AWS Support to benefit from DDoS protection. There are two tiers of AWS Shield – Standard and Advanced.
Exam Question 130
What is an AWS Identity and Access Management (IAM) role?
A. A user associated with an AWS resource
B. A group associated with an AWS resource
C. An entity that defines a set of permissions for use with an AWS resource
D. An authentication credential associated with a multi-factor authentication (MFA) token
Correct Answer:
C. An entity that defines a set of permissions for use with an AWS resource
Answer Description:
AWS Identity and Access Management (IAM) enables you to manage access to AWS services and resources securely. Using IAM, you can create and manage AWS users and groups, and use permissions to allow and deny their access to AWS resources.