Amazon CLF-C02 Online Practice Questions and Exam Preparation

Amazon CLF-C02 Online Questions & Answers

• Question 1171:

  A company uses Amazon Aurora as its database service. The company wants to encrypt its databases and database backups.

  Which party manages the encryption of the database clusters and database snapshots, according to the AWS shared responsibility model?

  A. AWS
  B. The company
  C. AWS Marketplace partners
  D. Third-party partners
  A. AWS

  ---

  Explanation

  AWS manages the encryption of the database clusters and database snapshots for Amazon Aurora, as well as the encryption keys. This is part of the AWS shared responsibility model, where AWS is responsible for the security of the cloud, and the customer is responsible for the security in the cloud. Encryption is one of the security features that AWS provides to protect the data at rest and in transit. For more information, see Amazon Aurora FAQs and AWS Shared Responsibility Model.

• Question 1172:

  A company is running a regulated Linux-based application. The application must run every Ft day horn 8 AM until midnight. The application is critical and cannot be interrupted Which Amazon EC2 instance purchasing option meets this requirement MOST cost-effectively?

  A. On-Demand Capacity Reservation with Savings Plan
  B. Spot instances
  C. Regional Reserved Instances
  D. Dedicated Hosts
  A. On-Demand Capacity Reservation with Savings Plan

  ---

  Explanation

• Question 1173:

  A company wants to migrate its on-premises SQL Server database to the AWS Cloud. The company wants AWS to handle the day-to-day administration of the database. Which AWS service will meet the company's requirements?

  A. Amazon EC2 foe Microsoft SQL Server
  B. Amazon DynamoDB
  C. Amazon RDS
  D. Amazon Aurora
  C. Amazon RDS

  ---

  Explanation

  Amazon RDS (Relational Database Service) supports SQL Server and other relational databases while handling administrative tasks such as backups, patching, monitoring, and scaling. This allows the company to migrate its SQL Server database without managing the infrastructure manually. Amazon EC2 for SQL Server would require more administrative overhead, as the company would be responsible for the maintenance. Amazon DynamoDB and Aurora do not support SQL Server directly.

• Question 1174:

  A company plans to migrate its application from on premises to the AWS Cloud. The company needs to gather usage and Configuration data for the application components.

  Which AWS service will meet these requirements?

  A. AWS Database Migration Service (AWS DMS)
  B. AWS Transfer Family
  C. AWS Application Discovery Service
  D. AWS Global Accelerator
  C. AWS Application Discovery Service

  ---

  Explanation

• Question 1175:

  Which of the following are characteristics of AWS WAF? (Select TWO.)

  A. Acts as a firewall that controls inbound and outbound traffic between Amazon EC2 instances
  B. Acts as a firewall that controls inbound and outbound traffic between subnets
  C. Gives users the ability to block traffic that has specific HTTP headers
  D. Protects websites that are not hosted on AWS
  E. Scans Amazon EC2 instances for common vulnerabilities
  B. Acts as a firewall that controls inbound and outbound traffic between subnets
  C. Gives users the ability to block traffic that has specific HTTP headers

  ---

  Explanation

  AWS WAF lets you create rules to filter web traffic based on conditions that include IP addresses, HTTP headers and body, or custom URIs. This gives you an additional layer of protection from web attacks that attempt to exploit vulnerabilities in custom or third party web applications. In addition, AWS WAF makes it easy to create rules that block common web exploits like SQL injection and cross site scripting. AWS WAF allows you to create a centralized set of rules that you can deploy across multiple websites. This means that in an environment with many websites and web applications you can create a single set of rules that you can reuse across applications rather than recreating that rule on every application you want to protect.

• Question 1176:

  A developer needs to use a standardized template to create copies of a company's AWS architecture for development test, and production environments. Which AWS service should the developer use to meet this requirement?

  A. AWS Cloud Map
  B. AWS Cloud Formation
  C. Amazon CloudFront
  D. AWS CloudTrail
  B. AWS Cloud Formation

  ---

  Explanation

  AWS CloudFormation allows developers to create, manage, and deploy AWS resources using templates, ensuring a standardized and repeatable infrastructure setup. It's ideal for setting up development, test, and production environments consistently. AWS Cloud Map, CloudFront, and CloudTrail do not provide templated infrastructure management capabilities.

• Question 1177:

  A company is using multiple AWS accounts for different business teams. The finance team wants to receive one bill for all of the company's accounts.

  Which AWS service or tool should the finance team use to meet this requirement?

  A. AWS Organizations
  B. AWS Trusted Advisor
  C. Cost Explorer
  D. AWS Budgets
  A. AWS Organizations

  ---

  Explanation

  AWS Organizations is a service that helps users centrally manage and govern multiple AWS accounts. With AWS Organizations, a company can consolidate billing and receive a single bill for all AWS accounts under an organization, making

  it easier for the finance team to track costs.

  Why other options are not suitable:

  B. AWS Trusted Advisor: Provides real-time guidance to help optimize AWS resources, not for consolidated billing.

  C. Cost Explorer: A tool for visualizing and managing AWS costs and usage, but it does not consolidate billing.

  D. AWS Budgets: Allows setting custom budgets and alerts but does not consolidate billing across accounts.

• Question 1178:

  Which actions is the responsibility of AWS under the AWS shared responsibility model (Select TWO.)

  A. Scanning AWS service endpoints for vulnerabilities
  B. Enabling encryption on an Amazon S3 bucket
  C. Configuring security group rules
  D. Enforcing application access restrictions
  E. Encrypting traffic on the AWS backbone between global and regional AWS facilities
  A. Scanning AWS service endpoints for vulnerabilities
  E. Encrypting traffic on the AWS backbone between global and regional AWS facilities

  ---

  Explanation

• Question 1179:

  A manufacturing company has a critical application that runs at a remote site that has a slow internet connection. The company wants to migrate the workload to AWS. The application is sensitive to latency and interruptions in connectivity. The company wants a solution that can host this application with minimum latency.

  Which AWS service or feature should the company use to meet these requirements?

  A. Availability Zones
  B. AWS Local Zones
  C. AWS Wavelength
  D. AWS Outposts
  D. AWS Outposts

  ---

  Explanation

  AWS Outposts is a service that offers fully managed and configurable compute and storage racks built with AWS-designed hardware that allow you to run your workloads on premises and seamlessly connect to AWS services in the cloud. AWS Outposts is ideal for workloads that require low latency, local data processing, or local data storage. With AWS Outposts, you can use the same AWS APIs, tools, and infrastructure across on premises and the cloud to deliver a truly consistent hybrid experience5. Availability Zones are isolated locations within each AWS Region that are engineered to be fault-tolerant and provide high availability. AWS Local Zones are extensions of AWS Regions that are placed closer to large population, industry, and IT centers where no AWS Region exists today. AWS Wavelength is a service that enables developers to build applications that deliver ultra-low latency to mobile devices and users by deploying AWS compute and storage at the edge of the 5G network. None of these services or features can help you host a critical application with minimum latency at a remote site that has a slow internet connection.

• Question 1180:

  An administrator observed that multiple AWS resources were deleted yesterday.

  Which AWS service will help identify the cause and determine which user deleted the resources?

  A. AWS CloudTrail
  B. Amazon Inspector
  C. Amazon GuardDuty
  D. AWS Trusted Advisor
  A. AWS CloudTrail

  ---

  Explanation

  AWS CloudTrail is a service that enables governance, compliance, and operational and risk auditing of your AWS account. With CloudTrail, you can log, continuously monitor, and retain account activity related to actions across your AWS infrastructure. CloudTrail logs provide a history of AWS API calls for your account, including those made by the AWS Management Console, AWS SDKs, command-line tools, and other AWS services. In this case, AWS CloudTrail will help the administrator identify which user deleted the resources by reviewing the event history. This history records details such as the user who performed the action, the time of the action, and the resources that were affected.

  Amazon Inspector: Incorrect. This is a security assessment service that helps identify vulnerabilities and deviations from best practices, but it is not used for tracking user activity.

  Amazon GuardDuty: Incorrect. This is a threat detection service that monitors malicious activity and unauthorized behavior, but it is not specifically designed for tracking changes made by users.

  AWS Trusted Advisor: Incorrect. This service provides best practices and guidance for cost optimization, security, fault tolerance, and performance, but it is not used for logging user actions.