A company is running a globally-accessible application on AWS. The company wants to optimize the application's network traffic.Which AWS service will meet this requirement?
Answer(s): D
AWS Global Accelerator improves the performance and availability of globally distributed applications by directing user traffic to the optimal AWS endpoint using the AWS global network. This optimizes network traffic and reduces latency for users worldwide.
Which tasks are responsibilities of the customer, according to the AWS shared responsibility model? (Choose two.)
Answer(s): B,D
https://aws.amazon.com/compliance/shared-responsibility-model/
A company needs to automatically protect its Amazon EC2 instances from distributed denial of service (DDoS)attacks.Which AWS service or tool will provide this protection?
Answer(s): B
AWS Shield is a managed DDoS protection service that automatically safeguards applications running onAWS, including EC2 instances, from common and large-scale DDoS attacks.Network ACL provides basic traffic filtering but does not protect against DDoS.Security group acts as a virtual firewall for EC2, but it does not offer DDoS mitigation.Amazon GuardDuty is a threat detection service that analyzes logs for suspicious activity, but it does not actively block DDoS attacks.
A company needs to lift and shift many applications to AWS without long cutover windows.Which AWS service provides this functionality?
AWS Application Migration Service (MGN) simplifies, expedites, and reduces the cost of migrating applications to AWS. It allows for "lift and shift" migrations with minimal downtime by continuously replicating the source servers and enabling a fast, predictable cutover to the cloud.
A company wants to host workloads on Amazon EC2 instances. The workloads require a balance of compute,memory, and networking resources.Which EC2 instance type should the company use to host the workloads?
Answer(s): A
General purpose instances are designed to provide a balanced mix of compute, memory, and networking resources, making them suitable for a wide variety of workloads. These instances are ideal for applications that need a balance of these resources, such as web servers, small to mid-sized databases, and development and test environments.
Which AWS Cloud Adoption Framework (AWS CAF) perspective focuses on managing identities and permissions at scale?
https://docs.aws.amazon.com/whitepapers/latest/overview-aws-cloud-adoption-framework/security-perspective.html
A company wants to use shell scripts to create and manage AWS resources.Which AWS service or tool will meet these requirements?
The AWS Command Line Interface (CLI) lets you script and automate the creation and management of AWSresources from shell scripts by invoking AWS service APIs through commands.
Which AWS service gives users the ability to download compliance reports from third-party auditors?
Answer(s): C
AWS Artifact is a service that provides access to AWS compliance reports and agreements. Users can download third-party auditor reports, such as SOC, ISO, and PCI reports, directly from AWS Artifact to meet compliance requirements.
Share your comments for Amazon CLF-C01 exam with other users:
are these brain dumps sufficient enough to go write exam after practicing them? or does one need more material this wont be enough?
please upload quetions
correct answer for question 92 is c -aws shield
question 4 answer is c. this site shows the correct answer as b. "adopt a consumption model" is clearly a cost optimization design principle. looks like im done using this site to study!!!
qs 4 answer seems wrong- please check
it is an exam that measures your understanding of cloud computing resources provided by aws. these resources are aligned under 6 categories: storage, compute, database, infrastructure, pricing and network. with all of the services and typees of services under each category
so far so good
next time i will write a full review
the questions in this exam dumps is valid. i passed my test last monday. i only whish they had their pricing in inr instead of usd. but it is still worth it.
thanks, very relevant
question 31 has obviously wrong answers. tls and ssl are used to encrypt data at transit, not at rest.
for question 4, the righr answer is :recover automatically from failures
its very helpful
good questons