CLF-C01

Which of the following can limit Amazon Storage Service (Amazon S3) bucket access to specific users?A . A public and private key-pairB . Amazon InspectorC . AWS Identity and Access Management (IAM) policiesD . Security GroupsView AnswerAnswer: C Explanation: Reference: https://aws.amazon.com/blogs/security/how-to-restrict-amazon-s3-bucket-access-to-a-specific­iam-role/

What is one of the advantages of the Amazon Relational Database Service (Amazon RDS)?A . It simplifies relational database administration tasks.B . It provides 99.99999999999% reliability and durability.C . It automatically scales databases for loads.D . It enabled users to dynamically adjust CPU and RAM resources.View AnswerAnswer: A

Your customer wants to grant restricted proxy rights to their HR Department to act on behalf of employees belonging to their legal entity. How can you perform this requirement? There are 2 correct answers to this question.A . Use the Manage Permission Roles tool to grant proxy rights to the...

AWS supports which of the following methods to add security to Identity and Access Management (IAM) users? (Choose two.)A . Implementing Amazon RekognitionB . Using AWS Shield-protected resourcesC . Blocking access with Security GroupsD . Using Multi-Factor Authentication (MFA)E . Enforcing password strength and expirationView AnswerAnswer: DE

What approach to transcoding a large number of individual video files adheres to AWS architecture principles?A . Using many instances in parallelB . Using a single large instance during off-peak hoursC . Using dedicated hardwareD . Using a large GPU instance typeView AnswerAnswer: A Explanation: Reference: https://aws.amazon.com/solutions/case-studies/encoding/

Which of the Reserved Instance (RI) pricing models can change the attributes of the RI as long as the exchange results in the creation of RIs of equal or greater value?A . Dedicated RIsB . Scheduled RIsC . Convertible RIsD . Standard RIsView AnswerAnswer: C Explanation: Reference: https://aws.amazon.com/ec2/pricing/reserved-instances/

A customer would like to design and build a new workload on AWS Cloud but does not have the AWS-related software technical expertise in-house. Which of the following AWS programs can a customer take advantage of to achieve that outcome?A . AWS Partner Network Technology PartnersB . AWS MarketplaceC ....

Where are AWS compliance documents, such as an SOC 1 report, located?A . Amazon InspectorB . AWS CloudTrailC . AWS ArtifactD . AWS Certificate ManagerView AnswerAnswer: C Explanation: Reference: https://aws.amazon.com/compliance/soc-faqs/

Which of the following is an AWS managed Domain Name System (DNS) web service?A . Amazon Route 53B . Amazon NeptuneC . Amazon SageMakerD . Amazon LightsailView AnswerAnswer: A Explanation: Reference: https://aws.amazon.com/getting-started/tutorials/get-a-domain/

Which service enables risk auditing by continuously monitoring and logging account activity, including user actions in the AWS Management Console and AWS SDKs?A . Amazon CloudWatchB . AWS CloudTrailC . AWS ConfigD . AWS HealthView AnswerAnswer: B Explanation: Reference: https://aws.amazon.com/cloudtrail/