CCP (CLF-C01) 4 — Questions and Answers
Question 1: Which AWS service helps you discover and protect sensitive data stored in Amazon S3?
- Amazon GuardDuty
- Amazon Macie (Correct answer)
- AWS Shield
- AWS WAF
Correct answer: Amazon Macie
Amazon Macie uses machine learning to automatically discover, classify, and protect sensitive data such as PII in Amazon S3.
Question 2: What is an AWS Region?
- A single physical data center
- A collection of data centers in a geographic area (Correct answer)
- A low-latency point of presence for content delivery
- A virtual network isolated from other customers
Correct answer: A collection of data centers in a geographic area
An AWS Region is a geographic area containing multiple, isolated Availability Zones made up of one or more data centers.
Question 3: Which AWS service provides a fully managed message queuing service to decouple application components?
- Amazon SNS
- Amazon SQS (Correct answer)
- Amazon MQ
- AWS EventBridge
Correct answer: Amazon SQS
Amazon SQS (Simple Queue Service) is a fully managed message queuing service that enables decoupling of application components.
Question 4: A company needs to run a Windows-based application on AWS with complete control over the underlying server. Which option is best?
- AWS Lambda
- Amazon EC2 Dedicated Hosts (Correct answer)
- AWS Fargate
- Amazon Lightsail
Correct answer: Amazon EC2 Dedicated Hosts
EC2 Dedicated Hosts provide a physical server fully dedicated to your use, giving complete control over instance placement and underlying hardware.
Question 5: Which pillar of the AWS Well-Architected Framework focuses on the ability to recover from failures and meet demand?
- Security
- Performance Efficiency
- Reliability (Correct answer)
- Cost Optimization
Correct answer: Reliability
The Reliability pillar focuses on a workload's ability to recover from failures and dynamically acquire resources to meet demand.
Question 6: Which AWS service can be used to automate infrastructure provisioning using code templates?
- AWS Systems Manager
- AWS CloudFormation (Correct answer)
- AWS OpsWorks
- AWS CodeDeploy
Correct answer: AWS CloudFormation
AWS CloudFormation enables infrastructure as code by using JSON or YAML templates to provision and manage AWS resources.
Question 7: What is the benefit of deploying an application across multiple AWS Availability Zones?
- Lower data transfer costs
- Increased fault tolerance and high availability (Correct answer)
- Faster global content delivery
- Simplified IAM management
Correct answer: Increased fault tolerance and high availability
Deploying across multiple Availability Zones ensures that a failure in one zone does not take down the entire application, improving high availability.
CCP (CLF-C01) 4
Which AWS service helps you discover and protect sensitive data stored in Amazon S3?