Amazon AWS Certified Foundational CLF-C01 Questions & Answers

• Question 1:

  A company needs an automated security assessment report that will identify unintended network access to Amazon EC2 instances. The report also must identify operating system vulnerabilities on those instances. Which AWS service or feature should the company use to meet this requirement?

  A. AWS Trusted Advisor

  B. Security groups

  C. Amazon Macie

  D. Amazon Inspector

  Correct Answer: D

• Question 2:

  Which of the following is one of the pillars of the AWS Well-Architected Framework?

  A. Efficiency and redundancy

  B. High availability

  C. Operational excellence

  D. Business optimization

  Correct Answer: C

• Question 3:

  Which of the following is an advantage that users experience when they move on-premises workloads to the AWS Cloud?

  A. Elimination of expenses for running and maintaining data centers

  B. Price discounts that are identical to discounts from hardware providers

  C. Distribution of all operational controls to AWS

  D. Elimination of operational expenses

  Correct Answer: A

• Question 4:

  Which AWS service provides threat detection by monitoring for malicious activities and unauthorized actions to protect AWS accounts, workloads, and data that is stored in Amazon S3?

  A. AWS Shield

  B. AWS Firewall Manager

  C. Amazon GuardDuty

  D. Amazon Inspector

  Correct Answer: C

• Question 5:

  Which AWS tool or feature acts as a VPC firewall at the subnet level?

  A. Security group

  B. Network ACL

  C. traffic Mirroring

  D. Internet gateway

  Correct Answer: B

  The security groups is a firewalling solution at instance level. The right answer is B.

• Question 6:

  Which AWS service provides a feature that can be used to proactively monitor and plan for the service quotas of AWS resources?

  A. AWS CloudTrail

  B. AWS Personal Health Dashboard

  C. AWS Trusted Advisor

  D. Amazon CloudWatch

  Correct Answer: D

• Question 7:

  Using AWS Config to record, audit, and evaluate changes to AWS resources to enable traceability is an example of which AWS Well-Architected Framework pillar?

  A. Security

  B. Operational excellence

  C. Performance efficiency

  D. Cost optimization

  Correct Answer: A

  Reference: https://d1.awsstatic.com/whitepapers/architecture/AWS_Well-Architected_Framework.pdf (12)

• Question 8:

  Which AWS service helps protect against DDoS attacks?

  A. AWS Shield

  B. Amazon Inspector

  C. Amazon GuardDuty

  D. Amazon Detective

  Correct Answer: A

  A- DDoS (right) B- security assessment service C- threat detection service D- investigate the root cause of security issues

• Question 9:

  Which of the following acts as an instance-level firewall to control inbound and outbound access?

  A. Network access control list

  B. Security groups

  C. AWS Trusted Advisor

  D. Virtual private gateways

  Correct Answer: B

• Question 10:

  A company has a workload that will run continuously for 1 year. The workload cannot tolerate service interruptions. Which Amazon EC2 purchasing option will be MOST cost-effective?

  A. All Upfront Reserved Instances

  B. Partial Upfront Reserved Instances

  C. Dedicated Instances

  D. On-Demand Instances

  Correct Answer: A

  With the All Upfront option, you pay for the entire Reserved Instance term with one upfront payment. This option provides you with the largest discount compared to On-Demand Instance pricing. https://aws.amazon.com/ec2/pricing/reserved-instances/pricing/