Amazon Exam, CLF-C01 Exam Dumps, CLF-C01 Exam Questions, CLF-C01 PDF Dumps, CLF-C01 VCE Dumps

[July-2021]New Braindump2go AWS-Certified-Cloud-Practitioner PDF Dumps[Q788-Q824]

July/2021 Latest Braindump2go CLF-C01 Exm Dumps with PDF and VCE Free Updated Today! Following are some new CLF-C01 Real Exam Questions!

QUESTION 788
A company believes an unauthorized user copied data from an Amazon S3 bucket to their own account.
Which AWS service will record the actions taken by the user?

A. Amazon CloudWatch
B. AWS CloudTrail
C. AWS Infrastructure Event Management
D. AWS Systems Manager

Answer: B
Explanation:
https://docs.aws.amazon.com/AmazonS3/latest/userguide/security-best-practices.html

QUESTION 789
Which AWS service provides a simple way to set up a new multi-account AWS environment and govern it at scale?

A. AWS Trusted Advisor
B. AWS Security Hub
C. AWS Control Tower
D. AWS Resource Access Manager

Answer: C
Explanation:
https://aws.amazon.com/about-aws/whats-new/2020/04/you-can-now-use-aws-control-tower-to-set-up-new-multi-account-aws-environments-in-aws-organizations/

QUESTION 790
How does the AWS global infrastructure offer high availability and fault tolerance to its users?

A. The AWS infrastructure is made up of multiple AWS Regions within various Availability Zones located in areas that have low flood risk, and are interconnected with low-latency networks and redundant power supplies.
B. The AWS infrastructure consists of subnets containing various Availability Zones with multiple data centers located in the same geographic location.
C. AWS allows users to choose AWS Regions and data centers so that users can select the closest data centers in different Regions.
D. The AWS infrastructure consists of isolated AWS Regions with independent Availability Zones that are connected with low-latency networking and redundant power supplies.

Answer: D
Explanation:
https://docs.aws.amazon.com/whitepapers/latest/aws-overview/global-infrastructure.html

QUESTION 791
How can moving to the AWS Cloud help users reduce the time dedicated to operating system patching? (Choose two.)

A. Users can take advantage of managed services on AWS.
B. Users can outsource operating system patching to the AWS Support team.
C. AWS Professional Services will upgrade instances to the latest operating system versions.
D. Users have the ability to use license-included Amazon EC2 instances.
E. Users can take advantage of AWS Systems Manager features.

Answer: AE

QUESTION 792
A user has an AWS Business Support plan and requires detailed billing information.
Which AWS resource will help?

A. AWS Concierge Support
B. AWS Service Catalog
C. AWS Budgets
D. AWS Cost and Usage Report

Answer: A
Explanation:
https://aws.amazon.com/premiumsupport/faqs/

QUESTION 793
A company has enabled billing alerts in its AWS account and wants to receive a notification through Amazon Simple Notification Service (Amazon SNS) whenever its monthly bill exceeds a set amount.
Which AWS service or tool should the company use to achieve this?

A. Amazon CloudWatch
B. Cost Explorer
C. AWS Cost and Usage Report
D. AWS Pricing Calculator

Answer: A
Explanation:
https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/monitor_estimated_charges_with_cloudwatch.html

QUESTION 794
A user wants to move legacy applications to the AWS Cloud to reduce the total cost.
Which option is the MOST cost-effective according to best practices?

A. Rewrite the legacy applications in an open-source language, such as Python.
B. Right-size the Amazon EC2 instances to prevent over-provisioning in terms of compute and memory.
C. Migrate relational databases to Amazon DynamoDB.
D. Reserve a data center facility with an upfront payment, which provides an additional discount.

Answer: B

QUESTION 795
According to the AWS shared responsibility model, which task is the responsibility of AWS for workloads running on Amazon EC2?

A. Updating the physical hardware
B. Updating the operating system
C. Updating the database engine
D. Updating the user data

Answer: A
Explanation:
https://aws.amazon.com/compliance/shared-responsibility-model/

QUESTION 796
A user needs to identify underutilized Amazon Elastic Block Store (Amazon EBS) volumes to reduce costs.
Which AWS service or feature will meet this requirement?

A. AWS CloudTrail
B. AWS Budgets
C. AWS Trusted Advisor
D. AWS Personal Health Dashboard

Answer: C
Explanation:
https://docs.aws.amazon.com/whitepapers/latest/cost-optimization-storage-optimization/optimizing-amazon-ebs-storage.html

QUESTION 797
Which AWS service will help a company identify the user who deleted an Amazon EC2 instance yesterday?

A. Amazon CloudWatch
B. AWS Trusted Advisor
C. AWS CloudTrail
D. Amazon Inspector

Answer: C
Explanation:
https://aws.amazon.com/cloudtrail/

QUESTION 798
A company has existing software licenses that it wants to bring to AWS, but the licensing model requires licensing physical cores.
How can the company meet this requirement in the AWS Cloud?

A. Launch an Amazon EC2 instance with default tenancy.
B. Launch an Amazon EC2 instance on a Dedicated Host.
C. Create an On-Demand Capacity Reservation.
D. Purchase Dedicated Reserved Instances.

Answer: A
Explanation:
https://aws.amazon.com/blogs/compute/byol-and-oversubscription/

QUESTION 799
A company must keep records of all resource changes that are made through the AWS Management Console and AWS APIs.
Which AWS service should the company use to meet this requirement?

A. Amazon CloudWatch
B. AWS CloudTrail
C. AWS X-Ray
D. Amazon Inspector

Answer: B
Explanation:
https://aws.amazon.com/cloudtrail/

QUESTION 800
A company requires an isolated environment within AWS for security purposes.
Which action can be taken to accomplish this?

A. Create a separate Availability Zone to host the resources.
B. Create a separate VPC to host the resources.
C. Create a placement group to host the resources.
D. Create an AWS Direct Connect connection between the company and AWS.

Answer: B
Explanation:
https://docs.aws.amazon.com/AWSEC2/latest/WindowsGuide/infrastructure-security.html

QUESTION 801
A company needs to monitor and forecast AWS costs and usage. The company also must set event-driven alert notifications that occur if spending limits are exceeded.
Which AWS service or tool should the company use to meet these requirements?

A. AWS Budgets
B. Amazon CloudWatch
C. AWS Config
D. AWS Service Catalog

Answer: A
Explanation:
https://aws.amazon.com/aws-cost-management/aws-budgets/

QUESTION 802
Which of the following is a best practice for creating policies for IAM users?

A. Start with a large set of permissions and remove the permissions that are not required.
B. Use only Amazon managed policies.
C. Start with a minimum set of permissions and grant additional permissions as necessary.
D. Attach policies directly to each user individually.

Answer: C
Explanation:
https://docs.aws.amazon.com/IAM/latest/UserGuide/best-practices.html

QUESTION 803
A user with an AWS Basic Support plan has determined that illegal activities are being run on their AWS resources
What is the recommended method for the user to report the activity to AWS?

A. Contact the AWS Concierge Support team.
B. Contact an AWS technical account manager.
C. Contact the AWS Abuse team.
D. Contact the AWS Support team.

Answer: C

QUESTION 804
AWS can relieve a company’s IT staff of which of the following IT tasks? (Choose two.)

A. Patching database software
B. Storage capacity planning
C. Creating database schemas
D. Setting up access controls for data
E. Writing application code

Answer: AC

QUESTION 805
A company’s security team requires that all Amazon EC2 workloads use approved Amazon Machine Images (AMIs).
Which AWS service should the company use to verify that the EC2 instances are using approved AMIs?

A. Amazon CloudWatch
B. Amazon Inspector
C. AWS Config
D. AWS Trusted Advisor

Answer: C
Explanation:
https://aws.amazon.com/blogs/devops/aws-config-checking-for-compliance-with-new-managed-rule-options/

QUESTION 806
Which of the following are benefits of using the AWS Cloud? (Choose two.)

A. 100% fault tolerance
B. Total control over underlying infrastructure
C. Fast provisioning of IT resources
D. Outsourcing all application coding to AWS
E. Ability to go global quickly

Answer: CE

QUESTION 807
Which of the following security-related aspects of running an Amazon Elastic Compute Cloud (Amazon EC2) instance is the responsibility of AWS?

A. Security of private keys
B. Hypervisor software updates
C. Security updates to software running on the instance
D. Policies controlling instance access

Answer: B

QUESTION 808
Which AWS service aggregates, organizes, and prioritizes security alerts and findings from multiple AWS services?

A. Amazon Detective
B. Amazon Inspector
C. Amazon Macie
D. AWS Security Hub

Answer: D
Explanation:
https://aws.amazon.com/security-hub/?aws-security-hub-blogs.sort-by=item.additionalFields.createdDate&aws-security-hub-blogs.sort-order=desc

QUESTION 809
A developer has an AWS account and needs access to another account’s test database.
Which AWS service or feature can the developer use to gain access to the test database?

A. Amazon Macie
B. Security groups
C. IAM roles
D. AWS Trusted Advisor

Answer: C
Explanation:
https://docs.aws.amazon.com/IAM/latest/UserGuide/tutorial_cross-account-with-roles.html

QUESTION 810
Using Amazon Elastic Container Service (Amazon ECS) to break down a monolithic architecture into microservices is an example of:

A. a loosely coupled architecture.
B. a tightly coupled architecture.
C. a stateless architecture.
D. a stateful architecture.

Answer: A
Explanation:
https://aws.amazon.com/blogs/apn/migrating-applications-from-monolithic-to-microservice-on-aws/

QUESTION 811
Which service enables customers to audit API calls in their AWS accounts?

A. AWS CloudTrail
B. AWS Trusted Advisor
C. Amazon Inspector
D. AWS X-Ray

Answer: A
Explanation:
https://aws.amazon.com/cloudtrail/

QUESTION 812
Which VPC component provides a layer of security at the subnet level?

A. Security groups
B. Network ACLs
C. NAT gateways
D. Route tables

Answer: A
Explanation:
https://docs.aws.amazon.com/vpc/latest/userguide/VPC_SecurityGroups.html

QUESTION 813
Which benefit is available for Convertible Reserved Instances but NOT Standard Reserved Instances?

A. The instances can be exchanged for instances of a different instance size.
B. The instances can be exchanged for instances of a different instance family.
C. The instances can be changed to a different Availability Zone.
D. The instances can be changed to a different AWS Region.

Answer: C
Explanation:
https://aws.amazon.com/about-aws/whats-new/2016/09/amazon-ec2-convertible-reserved-instances-and-the-reserved-instance-regional-benefit/

QUESTION 814
Which of the following enables users to leverage the power of AWS services programmatically?

A. AWS Command Line Interface (AWS CLI)
B. AWS Trusted Advisor
C. AWS CodeDeploy
D. AWS Management Console

Answer: D
Explanation:
https://aws.amazon.com/blogs/aws/category/aws-management-console/

QUESTION 815
Which security credentials are required to run commands by using the AWS Command Line Interface (AWS CLI)?

A. Access Key ID and Secret Access Key
B. AWS root user email and password
C. Amazon Elastic Compute Cloud (Amazon EC2) key pairs
D. AWS Identity and Access Management (IAM) user name and password

Answer: A
Explanation:
https://docs.aws.amazon.com/cli/latest/userguide/cli-configure-quickstart.html

QUESTION 816
Which are customer responsibilities when using Amazon EC2? (Choose two.)

A. Underlying hardware maintenance
B. File-system-level encryption
C. Guest operating system firewall configuration
D. Hypervisor-level software patching
E. Physical security at data center facilities

Answer: CD
Explanation:
https://aws.amazon.com/compliance/shared-responsibility-model/?ref=wellarchitected

QUESTION 817
A web developer has limited knowledge of AWS networking services such as Amazon VPC, Elastic Load Balancing, and Auto Scaling, but wants to host a highly available web application.
Which AWS service would automatically handle the deployment and reduce the complexity for the developer?

A. AWS CodeDeploy
B. AWS Resource Access Manager
C. AWS Elastic Beanstalk
D. AWS CloudFormation

Answer: C
Explanation:
https://docs.aws.amazon.com/elasticbeanstalk/latest/dg/Welcome.html

QUESTION 818
A company wants to route its traffic directly and privately to a VPC without going over the public internet.
Which connectivity option provides this capability?

A. AWS VPN
B. AWS Direct Connect
C. VPC NAT gateway
D. VPC internet gateway

Answer: D
Explanation:
https://aws.amazon.com/vpc/faqs/

QUESTION 819
A company wants to build an application for a new line of business.
According to the AWS Well-Architected Framework, what design principles should be implemented? (Choose two.)

A. Consolidate multiple AWS accounts into a single account.
B. Buy and host hardware in the AWS Cloud.
C. Decouple the AWS Cloud architecture to break up monolithic deployments.
D. Move on-premises network hardware to VPCs.
E. Design elasticity into the AWS Cloud design.

Answer: DE

QUESTION 820
A company wants to forecast its AWS Cloud costs for the upcoming year by analyzing its past AWS Cloud spending trends.
Which AWS service should the company use to meet this requirement?

A. AWS Control Tower
B. Cost Explorer
C. AWS OpsWorks
D. AWS CloudFormation

Answer: B
Explanation:
https://docs.aws.amazon.com/awsaccountbilling/latest/aboutv2/ce-forecast.html

QUESTION 821
Which AWS service or feature can help a company determine if it has Amazon S3 buckets that are publicly available?

A. AWS Service Health Dashboard
B. Amazon CloudWatch Logs
C. AWS Trusted Advisor
D. AWS Service Catalog

Answer: C
Explanation:
https://d1.awsstatic.com/product-marketing/S3/Amazon_S3_Security_eBook_2020.pdf

QUESTION 822
A company’s newly launched application is gaining in popularity very quickly. To improve customer service, the company wants to set up a phone number to manage the increasing volume of calls received by the company’s support staff.
Which AWS service should be used to meet this requirement?

A. Amazon Connect
B. Amazon CloudFront
C. Amazon DirectConnect
D. AWS Trusted Advisor

Answer: A
Explanation:
https://docs.aws.amazon.com/connect/latest/adminguide/contact-center-phone-number.html

QUESTION 823
Which credentials used to sign in to the AWS Management Console meet security best practices? (Choose two.)

A. An access key
B. Multi-factor authentication
C. X.509 certificates
D. A secret key
E. User name and password

Answer: BE
Explanation:
https://aws.amazon.com/blogs/security/getting-started-follow-security-best-practices-as-you-configure-your-aws-resources/

QUESTION 824
Which of the following are ways to improve security on AWS? (Choose two.)

A. Using AWS Artifact
B. Granting the broadest permissions to all IAM roles
C. Running application code with AWS Cloud9
D. Enabling multi-factor authentication (MFA) with Amazon Cognito
E. Using AWS Trusted Advisor security checks

Answer: DE
Explanation:
https://aws.amazon.com/blogs/security/top-10-security-items-to-improve-in-your-aws-account/


Resources From:

1.2021 Latest Braindump2go CLF-C01 Exam Dumps (PDF & VCE) Free Share:
https://www.braindump2go.com/aws-certified-cloud-practitioner.html

2.2021 Latest Braindump2go CLF-C01 PDF and CLF-C01 VCE Dumps Free Share:
https://drive.google.com/drive/folders/1krJU57a_UPVWcWZmf7UYjIepWf04kaJg?usp=sharing

3.2021 Free Braindump2go CLF-C01 Exam Questions Download:
https://www.braindump2go.com/free-online-pdf/CLF-C01-PDF-Dumps(788-806).pdf
https://www.braindump2go.com/free-online-pdf/CLF-C01-VCE-Dumps(807-824).pdf

Free Resources from Braindump2go,We Devoted to Helping You 100% Pass All Exams!