Amazon CLF-C02 Online Practice Questions and Exam Preparation

Amazon CLF-C02 Online Questions & Answers

• Question 1211:

  A company has deployed applications on Amazon EC2 instances. The company needs to assess application vulnerabilities and must identify infrastructure deployments that do not meet best practices.

  Which AWS service can the company use to meet these requirements?

  A. AWS Trusted Advisor
  B. Amazon Inspector
  C. AWS Config
  D. Amazon GuardDuty
  B. Amazon Inspector

  ---

  Explanation

  Amazon Inspector is a service that provides automated security assessment and management for AWS resources, such as Amazon EC2 instances. Amazon Inspector can scan applications for common vulnerabilities, such as SQL injection,

  cross-site scripting, and remote code execution. Amazon Inspector can also check the configuration of AWS resources against security best practices, such as the CIS Benchmarks and the AWS Security Best Practices. Amazon Inspector

  can help customers identify and remediate security issues, comply with security standards, and improve the security posture of their AWS environment.

  References:

  Amazon Inspector

  Improved, Automated Vulnerability Management for Cloud Workloads with a New Amazon Inspector | AWS News Blog

• Question 1212:

  Which AWS Cloud benefit is shown by an architecture's ability to withstand failures with minimal downtime?

  A. Agility
  B. Elasticity
  C. Scalability
  D. High availability
  D. High availability

  ---

  Explanation

  High availability = minimal downtime = recovery quickly from failure.

  Agility is about how quickly something is deployed.

  https://aws.amazon.com/marketplace/solutions/infrastructure-software/high-availability

• Question 1213:

  Which AWS service offers object storage?

  A. Amazon RDS
  B. Amazon Elastic File System (Amazon EFS)
  C. Amazon S3
  D. Amazon DynamoDB
  C. Amazon S3

  ---

  Explanation

  Amazon S3 is the AWS service that offers object storage. Object storage is a technology that stores and manages data in an unstructured format called objects. Each object consists of the data, metadata, and a unique identifier. Object storage is ideal for storing large amounts of unstructured data, such as photos, videos, email, web pages, sensor data, and audio files1. Amazon S3 provides industry-leading scalability, data availability, security, and performance for object storage2. Amazon RDS is the AWS service that offers relational database storage. Relational database storage is a technology that stores and manages data in a structured format called tables. Each table consists of rows and columns that define the attributes and values of the data. Relational database storage is ideal for storing structured or semi-structured data, such as customer records, inventory, transactions, and analytics3. Amazon Elastic File System (Amazon EFS) is the AWS service that offers file storage. File storage is a technology that stores and manages data in a hierarchical format called files and folders. Each file consists of the data and metadata, and each folder consists of files or subfolders. File storage is ideal for storing shared data that can be accessed by multiple users or applications, such as home directories, content repositories, media libraries, and configuration files4. Amazon DynamoDB is the AWS service that offers NoSQL database storage. NoSQL database storage is a technology that stores and manages data in a flexible format called documents or key-value pairs. Each document or key-value pair consists of the data and metadata, and can have different attributes and values depending on the schema. NoSQL database storage is ideal for storing dynamic or unstructured data that requires high performance, scalability, and availability, such as web applications, social media, gaming, and IoT.

• Question 1214:

  Which AWS service should a company use to decouple large monolithic applications into smaller microservices components?

  A. AWS Direct Connect
  B. Amazon Lightsail
  C. Amazon Simple Queue Service (Amazon SQS)
  D. Amazon CloudWatch
  C. Amazon Simple Queue Service (Amazon SQS)

  ---

  Explanation

  Amazon SQS is a fully managed message queuing service that makes it easy to decouple and scale microservices, distributed systems, and serverless applications

• Question 1215:

  Which AWS service can be used to provide an on-demand, cloud-based contact center?

  A. AWS Direct Connect
  B. Amazon Connect
  C. AWS Support Center
  D. AWS Managed Services
  B. Amazon Connect

  ---

  Explanation

  https://aws.amazon.com/connect/

• Question 1216:

  Which AWS service or tool lists all the users in an account and reports on the status of account details, including passwords, access keys, and multi-factor authentication (MFA) devices?

  A. WS Shield
  B. AWS Trusted Advisor
  C. Amazon Inspector
  D. IAM credential report
  D. IAM credential report

  ---

  Explanation

  You can generate and download a credential report that lists all users in your account and the status of their various credentials, including passwords, access keys, and MFA devices. You can get a credential report from the AWS Management Console, the AWS SDKs and Command Line Tools , or the IAM API.

• Question 1217:

  Which cloud computing benefit does AWS demonstrate with its ability to offer lower variable costs as a result of high purchase volumes?

  A. Pay-as-you-go pricing
  B. High availability
  C. Global reach
  D. Economies of scale
  D. Economies of scale

  ---

  Explanation

• Question 1218:

  Which AWS service or tool can be used to consolidate payments for a company with multiple AWS accounts?

  A. AWS Cost and Usage Report
  B. AWS Organizations
  C. Cost Explorer
  D. AWS Budgets
  B. AWS Organizations

  ---

  Explanation

  AWS Organizations is an account management service that enables you to consolidate multiple AWS accounts into an organization that you create and centrally manage. AWS Organizations includes consolidated billing and account management capabilities that enable you to better meet the budgetary, security, and compliance needs of your business1.

• Question 1219:

  A company wants to organize its users so that the company can grant permissions to the users as a group. Which AWS service or tool can the company use to meet this requirement?

  A. Security groups
  B. AWS identity and Access Management (IAM)
  C. Resource groups
  D. AWS Security Hub
  B. AWS identity and Access Management (IAM)

  ---

  Explanation

• Question 1220:

  A company is learning about its responsibilities that are related to the management of Amazon EC2 instances.

  Which tasks for EC2 instances are the company's responsibility, according to the AWS shared responsibility model? (Choose two.)

  A. Install and patch the machine hypervisor.
  B. Patch the guest operating system.
  C. Encrypt data at rest on associated storage.
  D. Install the physical hardware and cabling.
  E. Provide physical security for the EC2 instances.
  B. Patch the guest operating system.
  C. Encrypt data at rest on associated storage.

  ---

  Explanation

  Under the AWS Shared Responsibility Model, AWS manages the security of the cloud, while customers manage security in the cloud. For EC2 instances, it is the customer's responsibility to manage the guest operating system, including patching and encrypting data stored on attached storage volumes. AWS is responsible for the underlying infrastructure, including physical security and hypervisor maintenance.