CLF-C01 - Quiz 2

A company that has multiple business units wants to centrally manage and govern its AWS Cloud environments. The company wants to automate the creation of AWS accounts, apply service control policies (SCPs), and simplify billing processes. Which AWS service or tool should the company use to meet these requirements?

• AWS Organizations

• Cost Explorer

• AWS Budgets

• AWS Trusted Advisor

Answer explanation

https://aws.amazon.com/organizations/

Which IT controls do AWS and the customer share, according to the AWS shared responsibility model? (Choose two.)

• Physical and environmental controls

• Patch management

• Cloud awareness and training

• Zone security

• Application data encryption

Answer explanation

https://docs.aws.amazon.com/whitepapers/latest/aws-risk-and-compliance/shared-responsibility-model.html

A company is launching an application in the AWS Cloud. The application will use Amazon S3 storage. A large team of researchers will have shared access to the data. The company must be able to recover data that is accidentally overwritten or deleted. Which S3 feature should the company turn on to meet this requirement?

• Server access logging

• S3 Versioning

• S3 Lifecycle rules

• Encryption in transit and at rest

Answer explanation

https://docs.aws.amazon.com/AmazonS3/latest/userguide/Versioning.html

A manufacturing company has a critical application that runs at a remote site that has a slow internet connection. The company wants to migrate the workload to AWS. The application is sensitive to latency and interruptions in connectivity. The company wants a solution that can host this application with minimum latency. Which AWS service or feature should the company use to meet these requirements?

• Availability Zones

• AWS Local Zones

• AWS Wavelength

• AWS Outposts

Answer explanation

https://aws.amazon.com/about-aws/global-infrastructure/localzones/features/?

A company wants to migrate its applications from its on-premises data center to a VPC in the AWS Cloud. These applications will need to access on-premises resources. Which actions will meet these requirements? (Choose two.)

• Use AWS Service Catalog to identify a list of on-premises resources that can be migrated.

• Create a VPN connection between an on-premises device and a virtual private gateway in the VPC.

• Use an Amazon CloudFront distribution and configure it to accelerate content delivery close to the on-premises resources.

• Set up an AWS Direct Connect connection between the on-premises data center and AWS.

• Use Amazon CloudFront to restrict access to static web content provided through the on-premises web servers.

Answer explanation

https://docs.aws.amazon.com/vpn/latest/s2svpn/VPC_VPN.html

https://docs.aws.amazon.com/directconnect/latest/UserGuide/Welcome.html

A company wants to use the AWS Cloud to provide secure access to desktop applications that are running in a fully managed environment. Which AWS service should the company use to meet this requirement?

• Amazon S3

• Amazon AppStream 2.0

• AWS AppSync

• AWS Outposts

Answer explanation

https://aws.amazon.com/appstream2/features/?nc=sn&loc=3

https://aws.amazon.com/appstream2/features/?nc=sn&loc=3#:~:text=AES%2D256%20encryption.-,HTTPS%20access,-With%20Amazon%20AppStream

A company wants to implement threat detection on its AWS infrastructure. However, the company does not want to deploy additional software. Which AWS service should the company use to meet these requirements?

• Amazon VPC

• Amazon EC2

• Amazon GuardDuty

• AWS Direct Connect

Answer explanation

https://docs.aws.amazon.com/guardduty/latest/ug/what-is-guardduty.html

Which AWS service uses edge locations?

• Amazon Aurora

• AWS Global Accelerator

• Amazon Connect

• AWS Outposts

Answer explanation

https://aws.amazon.com/global-accelerator/features/

A company needs to install an application in a Docker container. Which AWS service eliminates the need to provision and manage the container hosts?

• AWS Fargate

• Amazon FSx for Windows File Server

• Amazon Elastic Container Service (Amazon ECS)

• Amazon EC2

Answer explanation

https://aws.amazon.com/fargate

Which AWS service or feature checks access policies and offers actionable recommendations to help users set secure and functional policies?

• AWS Systems Manager

• AWS IAM Access Analyzer

• AWS Trusted Advisor

• Amazon GuardDuty

Answer explanation

https://aws.amazon.com/about-aws/whats-new/2021/06/iam-access-analyzer-adds-new-policy-checks-help-validate-conditions-during-iam-policy-authoring/