Amazon Amazon Certifications CLF-C02 Questions & Answers

• Question 91:

  A company wants to block SQL injection attacks.

  Which AWS service or feature should the company use to meet this requirement?

  A. AWS WAF

  B. Network ACLs

  C. Security groups

  D. AWS Certificate Manager (ACM)

  Correct Answer: A

  "AWS WAF is a web application firewall that helps protect web applications from attacks by allowing you to configure rules that allow, block, or monitor (count) web requests based on conditions that you define. These conditions include IP addresses, HTTP headers, HTTP body, URI strings, SQL injection and cross-site scripting."

  References: https://aws.amazon.com/waf/faqs/

• Question 92:

  A company wants a unified tool to provide a consistent method to interact with AWS services. Which AWS service or tool will meet this requirement?

  A. AWS CLI

  B. Amazon Elastic Container Service (Amazon ECS)

  C. AWS Cloud9

  D. AWS Virtual Private Network (AWS VPN)

  Correct Answer: A

  "The AWS Command Line Interface (AWS CLI) is a unified tool to manage your AWS services. With just one tool to download and configure, you can control multiple AWS services from the command line and automate them through scripts."

  Reference: https://aws.amazon.com/cli/

• Question 93:

  A company needs to evaluate its AWS environment and provide best practice recommendations in five categories: cost, performance, service limits, fault tolerance and security. Which AWS service can the company use to meet these requirements?

  A. AWS Shield

  B. AWS WAF

  C. AWS Trusted Advisor

  D. AWS Service Catalog

  Correct Answer: C

• Question 94:

  Which perspective in the AWS Cloud Adoption Framework (AWS CAF) includes capabilities for configuration management and patch management?

  A. Platform

  B. Operations

  C. Security

  D. Governance

  Correct Answer: B

  AWS CAF Operations perspective capabilities Observability Event management (AIOps) Incident and problem management Change and release management Performance and capacity management Configuration management Patch management Availability and continuity management Application management

  Reference: https://docs.aws.amazon.com/whitepapers/latest/overview-aws-cloud-adoption-framework/operations-perspective.html

• Question 95:

  A company wants to store and retrieve files in Amazon S3 for its existing on-premises applications by using industry-standard file system protocols. Which AWS service will meet these requirements?

  A. AWS DataSync

  B. AWS Snowball Edge

  C. Amazon S3 File Gateway

  D. AWS Transfer Family

  Correct Answer: C

  "Amazon S3 File Gateway provides a seamless way to connect to the cloud in order to store application data files and backup images as durable objects in Amazon S3 cloud storage. Amazon S3 File Gateway offers SMB or NFS-based access to data in Amazon S3 with local caching. It can be used for on-premises data-intensive Amazon EC2-based applications that need file protocol access to S3 object storage."

  Reference: https://aws.amazon.com/storagegateway/file/s3/

• Question 96:

  A company plans to deploy containers on AWS. The company wants full control of the compute resources that host the containers. Which AWS service will meet these requirements?

  A. Amazon Elastic Kubernetes Service (Amazon EKS)

  B. AWS Fargate

  C. Amazon EC2

  D. Amazon Elastic Container Service (Amazon ECS)

  Correct Answer: C

• Question 97:

  Which AWS service or feature allows users to create new AWS accounts, group multiple accounts to organize workflows, and apply policies to groups of accounts?

  A. AWS Identity and Access Management (IAM)

  B. AWS Trusted Advisor

  C. AWS CloudFormation

  D. AWS Organizations

  Correct Answer: D

  "AWS Organizations provides you with the capability to centrally manage and govern your cloud environment. You can manage and organize your accounts under a single bill, set central policies and configuration requirements for your entire organization, create custom permissions or capabilities within the organization, and delegate responsibilities to other accounts so they can manage on behalf of the organization."

  Reference: https://aws.amazon.com/organizations/features/

• Question 98:

  A company wants to design a centralized storage system to manage the configuration data and passwords for its critical business applications. Which AWS service or capability will meet these requirements MOST cost-effectively?

  A. AWS Systems Manager Parameter Store

  B. AWS Secrets Manager

  C. AWS Config

  D. Amazon S3

  Correct Answer: A

  "Parameter Store, a capability of AWS Systems Manager, provides secure, hierarchical storage for configuration data management and secrets management. You can store data such as passwords, database strings, Amazon Machine Image (AMI) IDs, and license codes as parameter values."

  Reference: https://docs.aws.amazon.com/systems-manager/latest/userguide/systems-manager-parameter-store.html

• Question 99:

  Which AWS service or feature provides log information of the inbound and outbound traffic on network interfaces in a VPC?

  A. Amazon CloudWatch Logs

  B. AWS CloudTrail

  C. VPC Flow Logs

  D. AWS Identity and Access Management (IAM)

  Correct Answer: C

  VPC flow logs is a feature that enables you to capture information about the IP traffic going to and from network interfaces in your VPC. Flow logs data can be published to either Amazon CloudWatch Logs or Amazon S3. You can monitor your VPC flow logs to gain operational visibility about your network dependencies and traffic patterns, detect anomalies and prevent data leakage, or troubleshoot network connectivity and configuration issues. https://aws.amazon.com/vpc/faqs/#:~:text=VPC%20flow%20logs%20is%20a,network%20interfaces%20in%20your%20VPC.

• Question 100:

  Which fully managed AWS service assists with the creation, testing, and management of custom Amazon EC2 images?

  A. EC2 Image Builder

  B. Amazon Machine Image (AMI)

  C. AWS Launch Wizard

  D. AWS Elastic Beanstalk

  Correct Answer: A

  "EC2 Image Builder simplifies the creation, maintenance, validation, sharing, and deployment of Linux or Windows images for use with Amazon EC2 and on-premises." Reference: https://aws.amazon.com/image-builder/faqs/