The latest Amazon Web Services CLF-C01 AWS Certified Cloud Practitioner certification actual real practice exam question and answer (Q&A) dumps are available free, which are helpful for you to pass the Amazon Web Services CLF-C01 AWS Certified Cloud Practitioner exam and earn Amazon Web Services CLF-C01 AWS Certified Cloud Practitioner certification.
Exam Question 61
Which AWS service would you use to obtain compliance reports and certificates?
A. AWS Artifact
B. AWS Lambda
C. Amazon Inspector
D. AWS Certificate Manager
Correct Answer:
A. AWS Artifact
Answer Description:
AWS Artifact is your go-to, central resource for compliance-related information that matters to you. It provides on-demand access to AWS’ security and compliance reports and select online agreements. Reports available in AWS Artifact include our Service Organization Control (SOC) reports, Payment Card Industry (PCI) reports, and certifications from accreditation bodies across geographies and compliance verticals that validate the implementation and operating effectiveness of AWS security controls. Agreements available in AWS Artifact include the Business Associate Addendum (BAA) and the Nondisclosure Agreement (NDA).
Exam Question 62
The financial benefits of using AWS are:
(Choose two.)
A. reduced Total Cost of Ownership (TCO).
B. increased capital expenditure (capex).
C. reduced operational expenditure (opex).
D. deferred payment plans for startups.
E. business credit lines for stratups.
Correct Answer:
A. reduced Total Cost of Ownership (TCO).
C. reduced operational expenditure (opex).
Exam Question 63
Which AWS Cost Management tool allows you to view the most granular data about your AWS bill?
A. AWS Cost Explorer
B. AWS Budgets
C. AWS Cost and Usage report
D. AWS Billing dashboard
Correct Answer:
C. AWS Cost and Usage report
Answer Description:
The Cost & Usage Report is your one-stop-shop for accessing the most granular data about your AWS costs and usage. You can also load your cost and usage information into Amazon Athena, Amazon Redshift, AWS QuickSight, or a tool of your choice.
Exam Question 64
Which of the following can an AWS customer use to launch a new Amazon Relational Database Service (Amazon RDS) cluster?
A. AWS Concierge
B. AWS CloudFormation
C. Amazon Simple Storage Service (Amazon S3)
D. Amazon EC2 Auto Scaling
E. AWS Management Console
Correct Answer:
E. AWS Management Console
Exam Question 65
Which of the following security measures protect access to an AWS account? (Choose two.)
A. Enable AWS CloudTrail.
B. Grant least privilege access to IAM users.
C. Create one IAM user and share with many developers and users.
D. Enable Amazon CloudFront.
E. Activate multi-factor authentication (MFA) for privileged users.
Correct Answer:
B. Grant least privilege access to IAM users.
E. Activate multi-factor authentication (MFA) for privileged users.
Answer Description:
If you decided to create service accounts (that is, accounts used for programmatic access by applications running outside of the AWS environment) and generate access keys for them, you should create a dedicated service account for each use case. This will allow you to restrict the associated policy to only the permissions needed for the particular use case, limiting the blast radius if the credentials are compromised. For example, if a monitoring tool and a release management tool both require access to your AWS environment, create two separate service accounts with two separate policies that define the minimum set of permissions for each tool.
Exam Question 66
Which service provides a hybrid storage service that enables on-premises applications to seamlessly use cloud storage?
A. Amazon Glacier
B. AWS Snowball
C. AWS Storage Gateway
D. Amazon Elastic Block Storage (Amazon EBS)
Correct Answer:
C. AWS Storage Gateway
Answer Description:
AWS Storage Gateway is a hybrid cloud storage service that gives you on-premises access to virtually unlimited cloud storage. Customers use Storage Gateway to simplify storage management and reduce costs for key hybrid cloud storage use cases. These include moving tape backups to the cloud, reducing on-premises storage with cloud-backed file shares, providing low latency access to data in AWS for onpremises applications, as well as various migration, archiving, processing, and disaster recovery use cases.
Exam Question 67
Which of the following services falls under the responsibility of the customer to maintain operating system configuration, security patching, and networking?
A. Amazon RDS
B. Amazon EC2
C. Amazon ElastiCache
D. AWS Fargate
Correct Answer:
B. Amazon EC2
Answer Description:
The customer is responsible for managing, support, patching and control of the guest operating system and AWS services provided like EC2.
Exam Question 68
Which of the following is an important architectural design principle when designing cloud applications?
A. Use multiple Availability Zones.
B. Use tightly coupled components.
C. Use open source software.
D. Provision extra capacity.
Correct Answer:
A. Use multiple Availability Zones.
Answer Description:
Data Center resilience is practiced through Availability Zones across data centers that reduce the impact of failures. Fault isolation improvement can be made to traditional horizontal scaling by sharding (a method of grouping instances into groups called shards, instead of sending the traffic from all users to every node like in the traditional IT structure.)
Exam Question 69
Which AWS support plan includes a dedicated Technical Account Manager?
A. Developer
B. Enterprise
C. Business
D. Basic
Correct Answer:
B. Enterprise
Answer Description:
The enterprise support plans supports technical account manager. Developer and business support plans are devoid of this facility.
Exam Question 70
Amazon Relational Database Service (Amazon RDS) offers which of the following benefits over traditional database management?
A. AWS manages the data stored in Amazon RDS tables.
B. AWS manages the maintenance of the operating system.
C. AWS automatically scales up instance types on demand.
D. AWS manages the database type.
Correct Answer:
B. AWS manages the maintenance of the operating system.