Amazon CLF-C02 Online Practice Questions and Exam Preparation

Amazon CLF-C02 Online Questions & Answers

• Question 1261:

  A developer wants AWS users to access AWS services by using temporary security credentials.

  Which AWS service or feature should the developer use to provide these credentials?

  A. IAM policies
  B. IAM user groups
  C. AWS Security Token Service (AWS STS)
  D. AWS IAM Identity Center (AWS Single Sign-On)
  C. AWS Security Token Service (AWS STS)

  ---

  Explanation

• Question 1262:

  Which AWS feature provides a no-cost platform for AWS users to join community groups, ask questions, find answers, and read community-generated articles about best practices?

  A. AWS Knowledge Center
  B. AWS re:Post
  C. AWS IQ
  D. AWS Enterprise Support
  B. AWS re:Post

  ---

  Explanation

  AWS re:Post is a no-cost platform for AWS users to join community groups, ask questions, find answers, and read community-generated articles about best practices. AWS re:Post is a social media platform that connects AWS users with each other and with AWS experts. Users can create posts, comment on posts, follow topics, and join groups related to AWS services, solutions, and use cases. AWS re:Post also features live event feeds, community stories, and AWS Hero profiles. AWS re:Post is a great way to learn from the AWS community, share your knowledge, and get inspired.

• Question 1263:

  Which of the following can the AWS Pricing Calculator do?

  A. Project monthly AWS costs.
  B. Calculate historical AWS costs.
  C. Provide in-depth information about AWS pricing strategies.
  D. Provide users with access to their monthly bills.
  A. Project monthly AWS costs.

  ---

  Explanation

  The AWS Pricing Calculator is a web-based tool that allows customers to estimate their monthly AWS costs by configuring and projecting the costs of different AWS services. The calculator is specifically designed to help customers plan their AWS spending based on their specific architecture and usage patterns. The other options are not correct because:

  B. Calculate historical AWS costs: This is incorrect as the AWS Pricing Calculator does not track or calculate historical costs. For historical costs, AWS Cost Explorer is used.

  C. Provide in-depth information about AWS pricing strategies: While the AWS Pricing Calculator provides cost estimations, it does not provide detailed insights into AWS pricing strategies.

  D. Provide users with access to their monthly bills: This is incorrect; AWS Billing and Cost Management provides access to actual billing information.

• Question 1264:

  A company needs to set up dedicated network connectivity between its on-premises data center and the AWS Cloud. The network cannot use the public internet. Which AWS service or feature will meet these requirements?

  A. AWS Transit Gateway
  B. AWS VPN
  C. Amazon CloudFront
  D. AWS Direct Connect
  D. AWS Direct Connect

  ---

  Explanation

• Question 1265:

  A company is using Amazon DynamoDB.

  Which task is the company's responsibility, according to the AWS shared responsibility model?

  A. Patch the operating system.
  B. Provision hosts.
  C. Manage database access permissions.
  D. Secure the operating system.
  C. Manage database access permissions.

  ---

  Explanation

  According to the AWS shared responsibility model, AWS is responsible for the security of the cloud, while customers are responsible for the security in the cloud. This means that AWS is responsible for the physical servers, networking, and

  operating system that run DynamoDB, while customers are responsible for the security of their data and access to the database. Customers need to manage database access permissions, such as creating and managing AWS Identity and

  Access Management (IAM) policies and roles, and using encryption and key management options to protect their data.

  References:

  1: Shared Responsibility Model - Amazon Web Services (AWS),

  2: Security in Amazon DynamoDB - Amazon DynamoDB,

  3: AWS Shared Responsibility Model - Introduction to DevOps ...

• Question 1266:

  Which of the following is the customer responsible for updating and patching, according to the AWS shared responsibility model?

  A. Amazon FSx for Windows File Server
  B. Amazon Workspaces virtual Windows desktop
  C. AWS Directory Service for Microsoft Active Directory
  D. Amazon RDS for Microsoft SQL Server
  B. Amazon Workspaces virtual Windows desktop

  ---

  Explanation

• Question 1267:

  A company hosts an application on an Amazon EC2 instance. The EC2 instance needs to access several AWS resources, including Amazon S3 and Amazon DynamoDB.

  What is the MOST operationally efficient solution to delegate permissions?

  A. Create an IAM role with the required permissions. Attach the role to the EC2 instance.
  B. Create an IAM user and use its access key and secret access key in the application.
  C. Create an IAM user and use its access key and secret access key to create a CLI profile in the EC2 instance.
  D. Create an IAM role with the required permissions. Attach the role to the administrativeIAM user.
  A. Create an IAM role with the required permissions. Attach the role to the EC2 instance.

  ---

  Explanation

  Creating an IAM role with the required permissions and attaching the role to the EC2 instance is the most operationally efficient solution to delegate permissions. An IAM role is an entity that defines a set of permissions for making AWS service requests. An IAM role can be assumed by an EC2 instance to access other AWS resources, such as Amazon S3 and Amazon DynamoDB, without having to store any credentials on the instance. This solution is more secure and scalable than using IAM users and their access keys. For more information, see [IAM Roles for Amazon EC2] and [Using an IAM Role to Grant Permissions to Applications Running on Amazon EC2 Instances].

• Question 1268:

  Which AWS service provides command line access to AWS tools and resources directly from a web browser?

  A. AWS CloudHSM
  B. AWS CloudShell
  C. Amazon WorkSpaces
  D. AWS Cloud Map
  B. AWS CloudShell

  ---

  Explanation

• Question 1269:

  A company wants high levels of detection and near-real-time (NRT) mitigation against large and sophisticated distributed denial of service (DDoS) attacks on applications running on AWS.

  Which AWS service should the company use?

  A. Amazon GuardDuty
  B. Amazon Inspector
  C. AWS Shield Advanced
  D. Amazon Macie
  C. AWS Shield Advanced

  ---

  Explanation

  AWS Shield Advanced is a service that provides high levels of detection and near-real-time (NRT) mitigation against large and sophisticated distributed denial of service (DDoS) attacks on applications running on AWS. AWS Shield Advanced also provides you with 24x7 access to the AWS DDoS Response Team (DRT) and protection against DDoS attacks of any size or duration1. Amazon GuardDuty is a service that provides threat detection for your AWS accounts and workloads, but it does not offer DDoS protection. Amazon Inspector is a service that helps you improve the security and compliance of your applications deployed on AWS by automatically assessing them for vulnerabilities and deviations from best practices. Amazon Macie is a service that uses machine learning and pattern matching to discover and protect your sensitive data in AWS.

• Question 1270:

  A company is considering migration to the AWS Cloud. The company wants a fully managed service or feature that can transfer streaming data from multiple sources to an Amazon S3 bucket.

  Which AWS service or feature should the company use to meet these requirements?

  A. AWS DataSync
  B. Amazon Kinesis Data Firehose
  C. S3 Select
  D. AWS Transfer Family
  B. Amazon Kinesis Data Firehose

  ---

  Explanation

  Amazon Kinesis Data Firehose is a fully managed service that delivers real- time streaming data to destinations such as Amazon S3, Amazon Redshift, Amazon Elasticsearch Service, and Splunk. You can use Amazon Kinesis Data Firehose to capture, transform, and load streaming data from multiple sources, such as web applications, mobile devices, IoT sensors, and social media.