Download CLF C01 Dumps PDF & Get Free Demo | Amazon CLF Exam Questions
Question No. 1
Your
organization’s corporate website must be available on www.acme.com and
acme.com. How should you configure Amazon Route 53 to meet this requirement?
A. Configure acme.com with an ALIAS record targeting the
ELB. www.acme.com with an ALIAS record targeting the ELB.
B. Configure acme.com with an A record targeting the ELB.
www.acme.com with a CNAME record targeting the acme.com record.
C. Configure acme.com with a CNAME record targeting the ELB.
www.acme.com with a CNAME record targeting the acme.com record.
D. Configure acme.com using a second ALIAS record with the
ELB target. www.acme.com using a PTR record with the acme.com record target.
Question No. 2
You are
building an application in AWS that requires Amazon Elastic MapReduce (Amazon
EMR). The application needs to resolve hostnames in your internal, on-premises
Active Directory domain. You update your DHCP Options Set in the VPC to point
to a pair of Active Directory-integrated DNS servers running in your VPC. Which
action is required to support a successful Amazon EMR cluster launch?
A. Add a conditional forwarder to the Amazon-provided DNS
server.
B. Enable seamless domain join for the Amazon EMR cluster.
C. Launch an AD connector for the internal domain.
D. Configure an Amazon Route 53 private zone for the EMR cluster.
Question No. 3
You have a
three-tier web application with separate subnets for Web, Applications, and
Database tiers. Your CISO suspects your application will be the target of
malicious activity. You are tasked with notifying the security team in the
event your application is port scanned by external systems.
Which two AWS Services cloud you leverage to build an
automated notification system? (Select two.)
A. Internet gateway
B. VPC Flow Logs
C. AWS CloudTrail
D. Lambda
Question No. 4
You are
designing the network infrastructure for an application server in Amazon VPC.
Users will access all the application instances from the Internet and from an
on-premises network. The on-premises network is connected to your VPC over an
AWS Direct Connect link. How should you design routing to meet these
requirements?
A. Configure a single routing table with two default routes:
one to the Internet via an IGW, the other to the on-premises network via the
VGW. Use this routing table across all subnets in your VPC.
B. Configure two routing tables: one that has a default
route via the IGW, and another that has a default route via the VGW. Associate
both routing tables with each VPC subnet.
C. Configure a single routing table with a default route via
the IGW. Propagate a default route via BGP on the AWS Direct Connect customer
router. Associate the routing table with all VPC subnets.
D. Configure a single routing table with a default route via
the IGW. Propagate specific routes for the on-premises networks via BGP on the AWS Direct
Connect customer router. Associate the routing table with all VPC subnets.
Question No. 5
Your company
decides to use Amazon S3 to augment its on-premises data store. Instead of
using the company’s highly controlled, on-premises Internet gateway, a Direct
Connect connection is ordered to provide high bandwidth, low latency access to
S3. Since the company does not own a publically routable IPv4 address block, a
request was made to AWS for an AWS-owned address for a Public Virtual Interface
(VIF). The security team is calling this new connection a “backdoor”, and you
have been asked to clarify the risk to the company. Which concern from the
security team is valid and should be addressed?
A. AWS advertises its aggregate routes to the Internet
allowing anyone on the Internet to reach the router.
B. Direct Connect customers with a Public VIF in the same region could directly reach the router.
C. EC2 instances in the same region with access to the
Internet could directly reach the router.
D. The S3 service could reach the router through a
pre-configured VPC Endpoint.
Question No. 6
Your organization uses a VPN to connect to your VPC but must upgrade to a 1-G AWS
Direct Connect connection for stability and performance. Your
telecommunications provider has provisioned the circuit from your data center
to an AWS Direct Connect facility and needs information on how to cross-connect
(e.g., which rack/port to connect). What is the AWS-recommended procedure for
providing this information?
A. Create a support ticket. Provide your AWS account number
and telecommunications company’s name and where you need the Direct Connect
connection to terminate.
B. Create a new connection through your AWS Management
Console and wait for an email from AWS with information.
C. Ask your telecommunications provider to contact AWS
through an AWS Partner Channel. Provide your AWS account number.
D. Contact an AWS Account Manager and provide your AWS
account number, telecommunications company’s name, and where you need the
Direct Connect connection to terminate.
Comments
Post a Comment