Amazon CLF-C02 Online Practice Questions and Exam Preparation

Amazon CLF-C02 Online Questions & Answers

• Question 1051:

  A company needs to use dashboards and charts to analyze insights from business data.

  Which AWS service will provide the dashboards and charts for these insights?

  A. Amazon Macie
  B. Amazon Aurora
  C. Amazon QuickSight
  D. AWS CloudTrail
  C. Amazon QuickSight

  ---

  Explanation

  The correct answer is C because Amazon QuickSight is an AWS service that will provide the dashboards and charts for the insights from business data. Amazon QuickSight is a fully managed, scalable, and serverless business intelligence service that enables users to create and share interactive dashboards and charts. Amazon QuickSight can connect to various data sources, such as Amazon S3, Amazon RDS, Amazon Redshift, and more. Amazon QuickSight also provides users with machine learning insights, such as anomaly detection, forecasting, and natural language narratives. The other options are incorrect because they are not AWS services that will provide the dashboards and charts for the insights from business data. Amazon Macie is an AWS service that helps users discover, classify, and protect sensitive data stored in Amazon S3. Amazon Aurora is an AWS service that provides a relational database that is compatible with MySQL and PostgreSQL. AWS CloudTrail is an AWS service that enables users to track user activity and API usage across their AWS account.

  Amazon QuickSight FAQs

• Question 1052:

  Which AWS service gives users the ability to deploy highly repeatable infrastructure configurations?

  A. AWS CloudFormation
  B. AWS CodeDeploy
  C. AWS CodeBuild
  D. AWS Systems Manager
  A. AWS CloudFormation

  ---

  Explanation

  AWS CloudFormation allows users to define and deploy infrastructure as code, creating highly repeatable and consistent configurations across environments. It uses templates to automate the provisioning and management of resources. CodeDeploy focuses on application deployment, and Systems Manager offers operational management, but neither provides templated infrastructure deployment at the same level as CloudFormation.

• Question 1053:

  A company must archive its documents by using a write-once, read-many (WORM) model to meet legal and compliance obligations.

  Which feature of Amazon S3 can the company use to meet this requirement?

  A. S3 Versioning
  B. S3 bucket policy
  C. S3 Glacier Vault Lock
  D. S3 multi-factor authentication (MFA) delete
  C. S3 Glacier Vault Lock

  ---

  Explanation

• Question 1054:

  In which of the following AWS services should database credentials be stored for maximum security?

  A. AWS Identity and Access Management (IAM)
  B. AWS Secrets Manager
  C. Amazon S3
  D. AWS Key Management Service (AWS KMS)
  B. AWS Secrets Manager

  ---

  Explanation

  AWS Secrets Manager is the AWS service where database credentials should be stored for maximum security. AWS Secrets Manager helps to protect the secrets, such as database credentials, passwords, API keys, and tokens, that are used to access applications, services, and resources. AWS Secrets Manager enables secure storage, encryption, rotation, and retrieval of the secrets. AWS Secrets Manager also integrates with other AWS services, such as AWS Identity and Access Management (IAM), AWS Key Management Service (AWS KMS), and AWS Lambda. For more information, see [What is AWS Secrets Manager?] and [Getting Started with AWS Secrets Manager].

• Question 1055:

  A company wants to continuously improve processes and procedures to deliver business value. Which pillar of the AWS Well-Architected Framework does this goal represent?

  A. Performance efficiency
  B. Operational excellence
  C. Reliability
  D. Sustainability
  B. Operational excellence

  ---

  Explanation

• Question 1056:

  Which AWS tool or feature acts as a VPC firewall at the subnet level?

  A. Security group
  B. Network ACL
  C. Traffic Mirroring
  D. Internet gateway
  B. Network ACL

  ---

  Explanation

• Question 1057:

  A company wants to design a centralized storage system to manage the configuration data and passwords for its critical business applications. Which AWS service or capability will meet these requirements MOST cost-effectively?

  A. AWS Systems Manager Parameter Store
  B. AWS Secrets Manager
  C. AWS Config
  D. Amazon S3
  A. AWS Systems Manager Parameter Store

  ---

  Explanation

  "Parameter Store, a capability of AWS Systems Manager, provides secure, hierarchical storage for configuration data management and secrets management. You can store data such as passwords, database strings, Amazon Machine Image (AMI) IDs, and license codes as parameter values."

  https://docs.aws.amazon.com/systems-manager/latest/userguide/systems-manager-parameter-store.html

• Question 1058:

  A company wants to control the protection of its AWS resources. The company wants to block SQL injection attacks and cross-site scripting.

  Which AWS service or feature meets these requirements?

  A. Amazon GuardDuty
  B. AWSWAF
  C. Security groups
  D. AWS Shield
  B. AWSWAF

  ---

  Explanation

• Question 1059:

  A company runs applications that process credit card information. Auditors have asked if the AWS environment has changed since the previous audit. If the AWS environment has changed, the auditors want to know how it has changed. Which AWS services can provide this information? (Select TWO.)

  A. AWS Artifact
  B. AWS Trusted Advisor
  C. AWS Config
  D. AWS Cloud Trail
  E. AWS Identity and Access Management (IAM)
  C. AWS Config
  D. AWS Cloud Trail

  ---

  Explanation

  AWS Artifact is your go-to, central resource for compliance-related information that matters to you. It provides on-demand access to AWS' security and compliance reports and select online agreements. AWS Trusted Advisor provides recommendations that help you follow AWS best practices. Trusted Advisor evaluates your account by using checks. These checks identify ways to optimize your AWS infrastructure, improve security and performance, reduce costs, and monitor service quotas. AWS Config is a service that enables you to assess, audit, and evaluate the configurations of your AWS resources. Config continuously monitors and records your AWS resource configurations and allows you to automate the evaluation of recorded configurations against desired configurations. AWS CloudTrail enables auditing, security monitoring, and operational troubleshooting by tracking user activity and API usage. CloudTrail logs, continuously monitors, and retains account activity related to actions across your AWS infrastructure, giving you control over storage, analysis, and remediation actions. AWS Identity and Access Management (IAM) provides fine-grained access control across all of AWS. With IAM, you can specify who can access which services and resources, and under which conditions. With IAM policies, you manage permissions to your workforce and systems to ensure least-privilege permissions.

• Question 1060:

  Which AWS service or feature will search for and identify AWS resources that are shared externally?

  A. Amazon OpenSearch Service
  B. AWS Control Tower
  C. AWS IAM Access Analyzer
  D. AWS Fargate
  C. AWS IAM Access Analyzer

  ---

  Explanation

  AWS IAM Access Analyzer is an AWS service that helps customers identify and review the resources in their AWS account that are shared with an external entity, such as another AWS account, a root user, an organization, or a public entity. AWS IAM Access Analyzer uses automated reasoning, a form of mathematical logic and inference, to analyze the resource-based policies in the account and generate comprehensive findings that show the access level, the source of the access, the affected resource, and the condition under which the access applies. Customers can use AWS IAM Access Analyzer to audit their shared resources, validate their access policies, and monitor any changes to the resource sharing status.

  References: AWS IAM Access Analyzer, Identify and review resources shared with external entities, How AWS IAM Access Analyzer works