πŸ”

CLF-C02 β€” questions

Page 6 of 36 Β· 719 total questions.

Topic 1 Β· Question 101

Which option is an AWS Cloud Adoption Framework (AWS CAF) platform perspective capability?

  • AData architecture (correct answer)
  • BData protection
  • CData governance
  • DData science
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: Data architecture.

Topic 1 Β· Question 102

A company is running a workload in the AWS Cloud. Which AWS best practice ensures the MOST cost-effective architecture for the workload?

  • ALoose coupling
  • BRightsizing (correct answer)
  • CCaching
  • DRedundancy
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Rightsizing This option delivers the requirement at the lowest cost.

Topic 1 Β· Question 103

A company is using a third-party service to back up 10 TB of data to a tape library. The on-premises backup server is running out of space. The company wants to use AWS services for the backups without changing its existing backup workflows. Which AWS service should the company use to meet these requirements?

  • AAmazon Elastic Block Store (Amazon EBS)
  • BAWS Storage Gateway (correct answer)
  • CAmazon Elastic Container Service (Amazon ECS)
  • DAWS Lambda
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: AWS Storage Gateway

Explanation

AWS Storage Gateway bridges on-premises apps to AWS storage with local caching.

Topic 1 Β· Question 104

Which AWS tool gives users the ability to plan their service usage, service costs, and instance reservations, and also allows them to set custom alerts when their costs or usage exceed established thresholds?

  • ACost Explorer
  • BAWS Budgets (correct answer)
  • CAWS Cost and Usage Report
  • DReserved Instance reporting
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: AWS Budgets

Explanation

AWS Budgets alerts on cost and usage thresholds.

Topic 1 Β· Question 105 Β· Select all that apply

Which tasks are the customer’s responsibility, according to the AWS shared responsibility model? (Choose two.)

  • AEstablish the global infrastructure.
  • BPerform client-side data encryption. (correct answer)
  • CConfigure IAM credentials. (correct answer)
  • DSecure edge locations.
  • EPatch Amazon RDS DB instances.
Reveal answer & explanation
Correct answer: B, C

The correct answer is B, C. Option B: Perform client-side data encryption. Option C: Configure IAM credentials.

Explanation

AWS IAM controls authenticated and authorized access to AWS resources with fine-grained policies. AWS Config tracks resource configuration changes and evaluates compliance.

Topic 1 Β· Question 106 Β· Select all that apply

A developer has been hired by a large company and needs AWS credentials. Which are security best practices that should be followed? (Choose two.)

  • AGrant the developer access to only the AWS resources needed to perform the job. (correct answer)
  • BShare the AWS account root user credentials with the developer.
  • CAdd the developer to the administrator’s group in AWS IAM.
  • DConfigure a password policy that ensures the developer’s password cannot be changed.
  • EEnsure the account password policy requires a minimum length. (correct answer)
Reveal answer & explanation
Correct answer: A, E

The correct answer is A, E. Option A: Grant the developer access to only the AWS resources needed to perform the job. Option E: Ensure the account password policy requires a minimum length.

Topic 1 Β· Question 107

A company has multiple AWS accounts that include compute workloads that cannot be interrupted. The company wants to obtain billing discounts that are based on the company’s use of AWS services. Which AWS feature or purchasing option will meet these requirements?

  • AResource tagging
  • BConsolidated billing (correct answer)
  • CPay-as-you-go pricing
  • DSpot Instances
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Consolidated billing.

Topic 1 Β· Question 108

A user wants to allow applications running on an Amazon EC2 instance to make calls to other AWS services. The access granted must be secure. Which AWS service or feature should be used?

  • ASecurity groups
  • BAWS Firewall Manager
  • CIAM roles (correct answer)
  • DIAM user SSH keys
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: IAM roles

Explanation

An IAM role grants temporary, least-privilege permissions to AWS resources without long-term credentials. AWS IAM controls authenticated and authorized access to AWS resources with fine-grained policies.

Topic 1 Β· Question 109

A company wants a fully managed Windows file server for its Windows-based applications. Which AWS service will meet this requirement?

  • AAmazon FSx (correct answer)
  • BAmazon Elastic Kubernetes Service (Amazon EKS)
  • CAmazon Elastic Container Service (Amazon ECS)
  • DAmazon EMR
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: Amazon FSx

Explanation

Amazon FSx provides fully managed third-party file systems.

Topic 1 Β· Question 110

A company wants to migrate its NFS on-premises workload to AWS. Which AWS Storage Gateway type should the company use to meet this requirement?

  • ATape Gateway
  • BVolume Gateway
  • CAmazon FSx File Gateway
  • DAmazon S3 File Gateway (correct answer)
Reveal answer & explanation
Correct answer: D

The correct answer is D. Option D: Amazon S3 File Gateway

Explanation

Amazon S3 provides durable, scalable object storage that is fully managed. S3 File Gateway presents S3 as an NFS/SMB file share to on-premises applications.

Topic 1 Β· Question 111

A company needs to track the activity in its AWS accounts, and needs to know when an API call is made against its AWS resources. Which AWS tool or service can be used to meet these requirements?

  • AAmazon CloudWatch
  • BAmazon Inspector
  • CAWS CloudTrail (correct answer)
  • DAWS IAM
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: AWS CloudTrail

Explanation

AWS CloudTrail records API activity for auditing and governance.

Topic 1 Β· Question 112

A company has an uninterruptible application that runs on Amazon EC2 instances. The application constantly processes a backlog of files in an Amazon Simple Queue Service (Amazon SQS) queue. This usage is expected to continue to grow for years. What is the MOST cost-effective EC2 instance purchasing model to meet these requirements?

  • ASpot Instances
  • BOn-Demand Instances
  • CSavings Plans (correct answer)
  • DDedicated Hosts
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: Savings Plans

Explanation

Savings Plans reduce cost for consistent compute usage in exchange for a usage commitment. This option delivers the requirement at the lowest cost.

Topic 1 Β· Question 113

A company wants an AWS service to provide product recommendations based on its customer data. Which AWS service will meet this requirement?

  • AAmazon Polly
  • BAmazon Personalize (correct answer)
  • CAmazon Comprehend
  • DAmazon Rekognition
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Amazon Personalize

Explanation

Amazon Personalize builds real-time recommendation systems.

Topic 1 Β· Question 114

A company is planning its migration to the AWS Cloud. The company is identifying its capability gaps by using the AWS Cloud Adoption Framework (AWS CAF) perspectives. Which phase of the cloud transformation journey includes these identification activities?

  • AEnvision
  • BAlign (correct answer)
  • CScale
  • DLaunch
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Align.

Topic 1 Β· Question 115

A social media company wants to protect its web application from common web exploits such as SQL injections and cross-site scripting. Which AWS service will meet these requirements?

  • AAmazon Inspector
  • BAWS WAF (correct answer)
  • CAmazon GuardDuty
  • DAmazon CloudWatch
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: AWS WAF

Explanation

AWS WAF protects web applications from common exploits and malicious requests.

Topic 1 Β· Question 116

Which fully managed AWS service assists with the creation, testing, and management of custom Amazon EC2 images?

  • AEC2 Image Builder (correct answer)
  • BAmazon Machine Image (AMI)
  • CAWS Launch Wizard
  • DAWS Elastic Beanstalk
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: EC2 Image Builder

Explanation

Amazon EC2 provides resizable virtual servers when you need full control of the operating system.

Topic 1 Β· Question 117

A company wants an automated process to continuously scan its Amazon EC2 instances for software vulnerabilities. Which AWS service will meet these requirements?

  • AAmazon GuardDuty
  • BAmazon Inspector (correct answer)
  • CAmazon Detective
  • DAmazon Cognito
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Amazon Inspector

Explanation

Amazon Inspector automatically scans workloads for software vulnerabilities.

Topic 1 Β· Question 118

A company needs to perform data processing once a week that typically takes about 5 hours to complete. Which AWS service should the company use for this workload?

  • AAWS Lambda
  • BAmazon EC2 (correct answer)
  • CAWS CodeDeploy
  • DAWS Wavelength
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Amazon EC2

Explanation

Amazon EC2 provides resizable virtual servers when you need full control of the operating system.

Topic 1 Β· Question 119

Which AWS service or feature provides log information of the inbound and outbound traffic on network interfaces in a VPC?

  • AAmazon CloudWatch Logs
  • BAWS CloudTrail
  • CVPC Flow Logs (correct answer)
  • DAWS Identity and Access Management (IAM)
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: VPC Flow Logs.

Topic 1 Β· Question 120

A company wants to design a centralized storage system to manage the configuration data and passwords for its critical business applications. Which AWS service or capability will meet these requirements MOST cost-effectively?

  • AAWS Systems Manager Parameter Store (correct answer)
  • BAWS Secrets Manager
  • CAWS Config
  • DAmazon S3
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: AWS Systems Manager Parameter Store

Explanation

Systems Manager Parameter Store securely stores configuration data and secrets. AWS Systems Manager operates and automates management of fleets of resources. This option delivers the requirement at the lowest cost.

Showing questions 101–120 of 719 Β· Page 6 of 36