Amazon CLF-C01 Exam Questions & Answers

Treating infrastructure as code in the AWS Cloud allows users to:

A. automate migration of on-premises hardware to AWS data centers.

B. let a third party automate an audit of the AWS infrastructure.

C. turn over application code to AWS so it can run on the AWS infrastructure.

D. automate the infrastructure provisioning process.

Which AWS service of feature can be used to monitor CPU usage?

A. AWS CloudTrail

B. VPC Flow Logs

C. Amazon CloudWatch

D. AWSConfig

A developer is adding a feature to a client-side application so that users can upload videos to an Amazon S3 bucket. What is the MOST secure way to give the application the ability to write files to the S3 bucket?

A. Update the S3 bucket policy to allow public write access. Allow any user to upload videos by removing the need to handle user authentication within the client-side application

B. Create a new IAM policy and a corresponding 1AM user with permissions to write to the S3 bucket Store the key and the secret for the user in the application code Use the key to authenticate the video uploads

C. Configure the API layer of the application to have a new endpoint that creates signed URLs that allow an object to be put into the S3 bucket Generate a presigned URL through this API call in the client application. Upload the video by using the signed URL

D. Generate a new 1AM key and a corresponding secret by using the AWS account root user credentials Store the key and the secret for the user in the application code. Use the key to authenticate the video uploads