Online Access Free CLF-C01 Exam Questions

Which VPC component provides a layer of security at the subnet level?

• A.NAT gateways
• B.Network ACLs
• C.Security groups
• D.Route tables

A developer wants to use an Amazon S3 bucket to store application logs that contain sensitive data.
Which AWS service or feature should the developer use to restrict read and write access to the S3 bucket?

• A.AWS CloudTrail
• B.ACLs
• C.Security groups
• D.Amazon CloudWatch

Which AWS solution should the company use to meet this requirement?

• A.AWS AppSync
• B.AWS Service Catalog
• C.AWS software development kits (SDKs)
• D.AWS Config

A company wants to host its relational databases on AWS. The databases have predefined schemas that the company needs to replicate on AWS.
Which AWS services could the company use for the databases? (Select TWO.)

• A.Amazon Neptune
• B.Amazon Aurora
• C.Amazon DocumentDB (with MongoDB compatibility)
• D.Amazon DynamoDB
• E.Amazon RDS

Which tasks are customer responsibilities, according to the AWS shared responsibility model? (Select TWO.)

• A.Patch or upgrade Amazon DynamoDB.
• B.Configure the AWS provided security group firewall.
• C.Determine which Availability Zones to use for Amazon S3 buckets.
• D.Classify company assets in the AWS Cloud.
• E.Select Amazon EC2 instances to run AWS Lambda on.
• F.AWS Config