Amazon CLF-C02 Online Practice Questions and Exam Preparation

Amazon CLF-C02 Online Questions & Answers

• Question 1221:

  A company is storing sensitive customer data in an Amazon S3 bucket. The company wants to protect the data from accidental deletion or overwriting. Which S3 feature should the company use to meet these requirements?

  A. S3 Lifecycle rules
  B. S3 Versioning
  C. S3 bucket policies
  D. S3 server-side encryption
  B. S3 Versioning

  ---

  Explanation

  Versioning in Amazon S3 is a means of keeping multiple variants of an object in the same bucket. You can use the S3 Versioning feature to preserve, retrieve, and restore every version of every object stored in your buckets. Versioningenabled buckets can help you recover objects from accidental deletion or overwrite. For example, if you delete an object, Amazon S3 inserts a delete marker instead of removing the object permanently. https://docs.aws.amazon.com/AmazonS3/latest/userguide/Versioning.html

• Question 1222:

  A company wants to run its workload on Amazon EC2 instances for more than 1 year. This workload will run continuously.

  Which option offers a discounted hourly rate compared to the hourly rate of On-Demand Instances?

  A. AWS Graviton processor
  B. Dedicated Hosts
  C. EC2 Instance Savings Plans
  D. Amazon EC2 Auto Scaling instances
  C. EC2 Instance Savings Plans

  ---

  Explanation

  EC2 Instance Savings Plans are a flexible pricing model that offer discounted hourly rates on Amazon EC2 instance usage for a 1 or 3 year term. EC2 Instance Savings Plans provide savings up to 72% off On-Demand rates, in exchange for a commitment to a specific instance family in a chosen AWS Region (for example, M5 in Virginia). These plans automatically apply to usage regardless of size (for example, m5.xlarge, m5.2xlarge, etc.), OS (for example, Windows, Linux, etc.), and tenancy (Host, Dedicated, Default) within the specified family in a Region. With an EC2 Instance Savings Plan, you can change your instance size within the instance family (for example, from c5.xlarge to c5.2xlarge) or the operating system (for example, from Windows to Linux), or move from Dedicated tenancy to Default and continue to receive the discounted rate provided by your EC2 Instance Savings Plan.

• Question 1223:

  A company needs to provide users with a list of company-generated products that are based on AWS services. The company also needs to control access to these products by provisioning a personalized portal for specific users.

  Which AWS service will meet these requirements?

  A. AWS AppSync
  B. Amazon Connect
  C. AWS Organizations
  D. AWS Service Catalog
  D. AWS Service Catalog

• Question 1224:

  A company wants to improve the overall availability and performance of its applications that are hosted on AWS. Which AWS service should the company use?

  A. Amazon Connect
  B. Amazon Lightsail
  C. AWS Global Accelerator
  D. AWS Storage Gateway
  C. AWS Global Accelerator

  ---

  Explanation

• Question 1225:

  A company wants to create Amazon QuickSight dashboards every week by using its billing data. Which AWS feature or tool can the company use to meet these requirements?

  A. AWS Budgets
  B. AWS Cost Explorer
  C. AWS Cost and Usage Report
  D. AWS Cost Anomaly Detection
  C. AWS Cost and Usage Report

  ---

  Explanation

• Question 1226:

  In which categories does AWS Trusted Advisor provide recommended actions? (Select TWO.)

  A. Operating system patches
  B. Cost optimization
  C. Repetitive tasks
  D. Service quotas
  E. Account activity records
  B. Cost optimization
  D. Service quotas

  ---

  Explanation

  AWS Trusted Advisor is a service that provides real-time guidance to help you provision your resources following AWS best practices. AWS Trusted Advisor provides recommended actions in five categories: cost optimization, performance, security, fault tolerance, and service quotas. Cost optimization helps you reduce your overall AWS costs by identifying idle and underutilized resources. Service quotas helps you monitor and manage your usage of AWS service quotas and request quota increases. Operating system patches, repetitive tasks, and account activity records are not categories that AWS Trusted Advisor provides recommended actions for. Source: [AWS Trusted Advisor]

• Question 1227:

  An AWS user wants to proactively detect when an instance or account might be compromised or if there are threats from attacks.

  Which AWS service should the user choose?

  A. Amazon GuardDuty
  B. AWS WAF
  C. AWS Shield
  D. Amazon Inspector
  A. Amazon GuardDuty

  ---

  Explanation

  Amazon GuardDuty is a threat detection service that continuously monitors AWS accounts and workloads for malicious activity and unauthorized behavior to help protect your AWS resources. It uses machine learning, anomaly detection, and integrated threat intelligence to detect when an instance or account might be compromised or if there are threats from attacks.

  B. AWS WAF: Incorrect, as it is a web application firewall that protects against common web exploits but does not provide comprehensive threat detection.

  C. AWS Shield: Incorrect, as it provides protection against DDoS attacks but does not detect compromises within AWS accounts.

  D. Amazon Inspector: Incorrect, as it is a service that helps improve the security and compliance of applications deployed on AWS by assessing for vulnerabilities, not for threat detection.

  AWS Cloud

  References:

  Amazon GuardDuty

• Question 1228:

  Which action should a company take to improve security in its AWS account?

  A. Require multi-factor authentication (MFA) for privileged users.
  B. Remove the root user account.
  C. Create an access key for the AWS account root user.
  D. Create an access key for each privileged user.
  A. Require multi-factor authentication (MFA) for privileged users.

  ---

  Explanation

  Enforcing multi-factor authentication (MFA) for privileged users enhances account security by requiring a second form of authentication. It reduces the risk of unauthorized access, even if credentials are compromised. Removing the root account is not possible, and creating access keys for the root account or privileged users can increase security risks rather than reduce them.

• Question 1229:

  A company is creating a web application that requires a relational database to store customer data. Which AWS service should the company use to host the database?

  A. Amazon Aurora
  B. Amazon DynamoDB
  C. Amazon ElastiCache
  D. Amazon Redshift
  A. Amazon Aurora

  ---

  Explanation

• Question 1230:

  Which AWS service provides an isolated virtual network to connect AWS services and resources?

  A. Amazon EC2
  B. Amazon DynamoDB
  C. Amazon Lightsail
  D. Amazon VPC
  D. Amazon VPC

  ---

  Explanation

  Amazon Virtual Private Cloud (Amazon VPC) enables you to launch AWS resources into a virtual network that you've defined. This virtual network closely resembles a traditional network that you'd operate in your own data center, with the benefits of using the scalable infrastructure of AWS.