Amazon CLF-C02 Online Practice Questions and Exam Preparation

Amazon CLF-C02 Online Questions & Answers

• Question 1241:

  A company is planning to host its workloads on AWS.

  Which AWS service requires the company to update and patch the guest operating system?

  A. Amazon DynamoDB
  B. Amazon S3
  C. Amazon EC2
  D. Amazon Aurora
  C. Amazon EC2

  ---

  Explanation

• Question 1242:

  Which recommendation can AWS Cost Explorer provide to help reduce cost?

  A. Use a specific database engine.
  B. Change the programming language for an application.
  C. Deploy a specific operating system.
  D. Terminate an idle instance.
  D. Terminate an idle instance.

  ---

  Explanation

• Question 1243:

  Which Amazon EC2 Reserved Instances term commitment will give users the MOST cost savings?

  A. 1 year
  B. 2 years
  C. 3 years
  D. 5 years
  C. 3 years

  ---

  Explanation

• Question 1244:

  A company wants to use an AWS networking solution to connect multiple VPCs.

  Which AWS service will meet this requirement?

  A. AWS Config
  B. AWS Direct Connect
  C. Amazon GuardDuty
  D. AWS Transit Gateway
  D. AWS Transit Gateway

  ---

  Explanation

• Question 1245:

  A company has a workload that requires data to be collected, analyzed, and stored on premises. The company wants to extend the use of AWS services to run on premises with access to the company network and the company's VPC.

  Which AWS service meets this requirement?

  A. AWS Outposts
  B. AWS Storage Gateway
  C. AWS Direct Connect
  D. AWS Snowball
  A. AWS Outposts

  ---

  Explanation

  AWS Outposts is an AWS service that meets the requirement of running AWS services on premises with access to the company network and the company's VPC. AWS Outposts is a fully managed service that extends AWS infrastructure, AWS services, APIs, and tools to virtually any datacenter, co-location space, or on-premises facility for a truly consistent hybrid experience. AWS Outposts is ideal for workloads that require low latency access to on-premises systems, local data processing, or local data storage2.

• Question 1246:

  A company is hosting a web application in a Docker container on Amazon EC2. AWS is responsible for which of the following tasks?

  A. Scaling the web application and services developed with Docker
  B. Provisioning or scheduling containers to run on clusters and maintain their availability
  C. Performing hardware maintenance in the AWS facilities that run the AWS Cloud
  D. Managing the guest operating system, including updates and security patches
  C. Performing hardware maintenance in the AWS facilities that run the AWS Cloud

  ---

  Explanation

  AWS is responsible for performing hardware maintenance in the AWS facilities that run the AWS Cloud. This is part of the shared responsibility model, where AWS is responsible for the security of the cloud, and the customer is responsible for security in the cloud. AWS is also responsible for the global infrastructure that runs all of the services offered in the AWS Cloud, including the hardware, software, networking, and facilities that run AWS Cloud services3. The customer is responsible for the guest operating system, including updates and security patches, as well as the web application and services developed with Docker4.

• Question 1247:

  What can a cloud practitioner use to retrieve AWS security and compliance documents and submit them as evidence to an auditor or regulator?

  A. AWS Certificate Manager
  B. AWS Systems Manager
  C. AWS Artifact
  D. Amazon Inspector
  C. AWS Artifact

  ---

  Explanation

  AWS Artifact is a service that provides on-demand access to AWS security and compliance documents, such as AWS ISO certifications, Payment Card Industry (PCI) reports, and Service Organization Control (SOC) reports. You can

  download these documents and submit them as evidence to your auditors or regulators to demonstrate the security and compliance of the AWS infrastructure and services that you use. AWS Artifact also allows you to review, accept, and

  manage AWS agreements, such as the Business Associate Addendum (BAA) for customers who are subject to the Health Insurance Portability and Accountability Act (HIPAA).

  References: AWS Artifact, What is AWS Artifact?

• Question 1248:

  Which AWS service offers threat detection and continuously monitors for malicious activity and unauthorized behavior in AWS accounts?

  A. Amazon Made
  B. AWS Config
  C. Amazon GuardDuty
  D. Amazon Inspector
  C. Amazon GuardDuty

  ---

  Explanation

• Question 1249:

  A company has deployed several public applications behind Application Load Balancers. The company wants to improve the performance of the applications.

  Which AWS service will meet these requirements?

  A. AWS Global Accelerator
  B. Amazon Connect
  C. Amazon ElastiCache
  D. Amazon CloudWatch
  A. AWS Global Accelerator

  ---

  Explanation

• Question 1250:

  Which AWS service provides threat detection by monitoring for malicious activities and unauthorized actions to protect AWS accounts, workloads, and data that is stored in Amazon S3?

  A. AWS Shield
  B. AWS Firewall Manager
  C. Amazon GuardDuty
  D. Amazon Inspector
  C. Amazon GuardDuty

  ---

  Explanation

  Amazon GuardDuty is a service that provides intelligent threat detection and continuous monitoring for your AWS accounts, workloads, and data. Amazon GuardDuty analyzes and processes data sources, such as VPC Flow Logs, AWS CloudTrail event logs, and DNS logs, to identify malicious activities and unauthorized actions, such as reconnaissance, instance compromise, account compromise, and data exfiltration. Amazon GuardDuty can also detect threats to your data stored in Amazon S3, such as API calls from unusual locations or disabling of preventative controls. Amazon GuardDuty generates findings that summarize the details of the detected threats and provides recommendations for remediation. AWS Shield, AWS Firewall Manager, and Amazon Inspector are not the best services to meet this requirement. AWS Shield is a service that provides protection against distributed denial of service (DDoS) attacks. AWS Firewall Manager is a service that allows you to centrally configure and manage firewall rules across your accounts and resources. Amazon Inspector is a service that assesses the security and compliance of your applications running on EC2 instances.