Amazon CLF-C02 Online Practice Questions and Exam Preparation

Amazon CLF-C02 Online Questions & Answers

• Question 1131:

  How does the AWS Enterprise Support Concierge team help users?

  A. Supporting application development
  B. Providing architecture guidance
  C. Answering billing and account inquiries
  D. Answering questions regarding technical support cases
  C. Answering billing and account inquiries

  ---

  Explanation

  The AWS Enterprise Support Concierge team is a group of billing and account experts who specialize in working with enterprise customers. They can help customers with questions about billing, account management, cost optimization, and

  other non-technical issues. They can also assist customers with navigating and optimizing their AWS environment, such as setting up consolidated billing, applying for service limit increases, or requesting refunds.

  References:

  AWS Support Plan Comparison

  AWS Enterprise Support Plan

  Answer Explained: Which AWS Support plan provides access to AWS Concierge Support team for account assistance?

• Question 1132:

  A company needs real-time guidance to follow AWS best practices to save money, improve system performance, and close security gaps. Which AWS service should the company use?

  A. Amazon GuardDuty
  B. AWS Trusted Advisor
  C. AWS Management Console
  D. AWS Systems Manager
  B. AWS Trusted Advisor

  ---

  Explanation

  AWS Trusted Advisor provides recommendations that help you follow AWS best practices. Trusted Advisor evaluates your account by using checks.

• Question 1133:

  Which task is the customer's responsibility, according to the AWS shared responsibility model?

  A. Patch a guest operating system that is deployed on an Amazon EC2 instance.
  B. Control physical access to an AWS data center.
  C. Control access to AWS underlying hardware.
  D. Patch a host operating system that is deployed on Amazon S3.
  A. Patch a guest operating system that is deployed on an Amazon EC2 instance.

  ---

  Explanation

  According to the AWS Shared Responsibility Model, the customer is responsible for managing the guest operating system (including patches and updates) and any applications that they run on their Amazon EC2 instances. Why other options are not suitable:

  B. Control physical access to an AWS data center: AWS is responsible for the physical security of its data centers.

  C. Control access to AWS underlying hardware: AWS manages the hardware infrastructure.

  D. Patch a host operating system that is deployed on Amazon S3: Amazon S3 is a managed storage service, and AWS manages the underlying infrastructure, including the operating system.

• Question 1134:

  Which AWS service should a company use to organize characterize, and search large numbers of images?

  A. Amazon Transcribe
  B. Amazon Rekognition
  C. Amazon Aurora
  D. Amazon QuickSight
  B. Amazon Rekognition

  ---

  Explanation

  Amazon Rekognition is a machine learning service that can analyze and recognize objects, people, text, scenes, and activities in images and videos. It is specifically designed for organizing, categorizing, and searching large volumes of images based on various attributes. Amazon Transcribe is for speech-to-text, Amazon Aurora is a relational database service, and Amazon QuickSight is a business intelligence tool for data visualization.

• Question 1135:

  A company's compliance officer wants to review the AWS Service Organization Control (SOC) reports. Which AWS service or feature should the compliance officer use to complete this task?

  A. AWS Artifact
  B. AWS Concierge Support
  C. AWS Support
  D. AWS Trusted Advisor
  A. AWS Artifact

  ---

  Explanation

• Question 1136:

  A company wants a list of all users in its AWS account, the status of all of the users' access keys, and if multi-factor authentication (MFA) has been configured.

  Which AWS service or feature will meet these requirements?

  A. AWS Key Management Service (AWS KMS)
  B. IAM Access Analyzer
  C. IAM credential report
  D. Amazon CloudWatch
  C. IAM credential report

  ---

  Explanation

  IAM credential report is a feature that allows you to generate and download a report that lists all IAM users in your AWS account and the status of their various credentials, including access keys and MFA devices. You can use this report to audit the security status of your IAM users and ensure that they follow the best practices for using AWS1. AWS Key Management Service (AWS KMS) is a service that allows you to create and manage encryption keys to protect your data. It does not provide information about IAM users or their credentials2. IAM Access Analyzer is a feature that helps you identify the resources in your AWS account, such as S3 buckets or IAM roles, that are shared with an external entity. It does not provide information about IAM users or their credentials3. Amazon CloudWatch is a service that monitors and collects metrics, logs, and events from your AWS resources and applications. It does not provide information about IAM users or their credentials4.

  References: Getting credential reports for your AWS account - AWS Identity and Access Management AWS Key Management Service - Amazon Web Services IAM Access Analyzer - AWS Identity and Access Management Amazon CloudWatch - Amazon Web Services

• Question 1137:

  What is the MOST secure way to store passwords on AWS?

  A. Store passwords in an Amazon S3 bucket.
  B. Store passwords as AWS CloudFormation parameters.
  C. Store passwords in AWS Storage Gateway.
  D. Store passwords in AWS Secrets Manager.
  D. Store passwords in AWS Secrets Manager.

  ---

  Explanation

• Question 1138:

  A company wants to migrate all of its on-premises infrastructure to the AWS Cloud. Before migration, the company wants estimate of costs for running its as-is infrastructure.

  Which AWS service or principle should the company use to meet this requirement?

  A. AWS Pricing Calculator
  B. AWS Well-Architected Framework
  C. AWS shared responsibility model
  D. AWS Cloud Adoption Framework (AWS CAF)
  A. AWS Pricing Calculator

  ---

  Explanation

• Question 1139:

  Which action will help increase security in the AWS Cloud?

  A. Enable programmatic access for all IAM users.
  B. Use IAM users instead of IAM roles to delegate permissions.
  C. Rotate access keys on a reoccurring basis.
  D. Use inline policies instead of customer managed policies.
  C. Rotate access keys on a reoccurring basis.

  ---

  Explanation

• Question 1140:

  Which Amazon S3 feature or storage class uses the AWS backbone network and edge locations to reduce latencies from the end user to Amazon S3?

  A. S3 Cross-Region Replication
  B. S3 Transfer Acceleration
  C. S3 Event Notifications
  D. S3 Standard-Infrequent Access (S3 Standard-IA)
  B. S3 Transfer Acceleration

  ---

  Explanation