Amazon Amazon Certifications CLF-C02 Questions & Answers

• Question 121:

  Which AWS service enables companies to deploy an application close to end users?

  A. Amazon CloudFront

  B. AWS Auto Scaling

  C. AWS AppSync

  D. Amazon Route 53

  Correct Answer: A

  "Amazon CloudFront speeds up distribution of your static and dynamic web content, such as .html, .css, .php, image, and media files. When users request your content, CloudFront delivers it through a worldwide network of edge locations that provide low latency and high performance."

  Reference: https://docs.aws.amazon.com/cloudfront/

• Question 122:

  What are the benefits of consolidated billing for AWS Cloud services? (Choose two.)

  A. Volume discounts

  B. A minimal additional fee for use

  C. One bill for multiple accounts

  D. Installment payment options

  E. Custom cost and usage budget creation

  Correct Answer: AC

  https://docs.aws.amazon.com/awsaccountbilling/latest/aboutv2/consolidated-billing.html

• Question 123:

  A user wants to review all Amazon S3 buckets with ACLs and S3 bucket policies in the S3 console. Which AWS service or resource will meet this requirement?

  A. S3 Multi-Region Access Points

  B. S3 Storage Lens

  C. AWS IAM Identity Center (AWS Single Sign-On)

  D. Access Analyzer for S3

  Correct Answer: D

  When reviewing an at-risk bucket in IAM Access Analyzer for S3, you can block all public access to the bucket with a single click. We recommend that you block all access to your buckets unless you require public access to support a specific use case. Before you block all public access, ensure that your applications will continue to work correctly without public access. https://docs.aws.amazon.com/AmazonS3/latest/userguide/access-analyzer.html

• Question 124:

  What is the best resource for a user to find compliance-related information and reports about AWS?

  A. AWS Artifact

  B. AWS Marketplace

  C. Amazon Inspector

  D. AWS Support

  Correct Answer: A

  "AWS Artifact is your go-to, central resource for compliance-related information that matters to you. It provides on-demand access to security and compliance reports from AWS and ISVs who sell their products on AWS Marketplace." Reference: https://aws.amazon.com/artifact/

• Question 125:

  Which task is the customer's responsibility, according to the AWS shared responsibility model?

  A. Maintain the security of the AWS Cloud.

  B. Configure firewalls and networks.

  C. Patch the operating system of Amazon RDS instances.

  D. Implement physical and environmental controls.

  Correct Answer: B

• Question 126:

  Which AWS service helps deliver highly available applications with fast failover for multi-Region and Multi-AZ architectures?

  A. AWS WAF

  B. AWS Global Accelerator

  C. AWS Shield

  D. AWS Direct Connect

  Correct Answer: B

  "Deliver highly available applications with fast failover for multi-Region and multi-AZ architectures." Reference: https://aws.amazon.com/global-accelerator/

• Question 127:

  A company has a set of ecommerce applications. The applications need to be able to send messages to each other. Which AWS service meets this requirement?

  A. AWS Auto Scaling

  B. Elastic Load Balancing

  C. Amazon Simple Queue Service (Amazon SQS)

  D. Amazon Kinesis Data Streams

  Correct Answer: C

• Question 128:

  A company wants to assess its operational readiness. It also wants to identify and mitigate any operational risks ahead of a new product launch. Which AWS Support plan offers guidance and support for this kind of event at no additional charge?

  A. AWS Business Support

  B. AWS Basic Support

  C. AWS Developer Support

  D. AWS Enterprise Support

  Correct Answer: A

• Question 129:

  A company wants to establish a schedule for rotating database user credentials.

  Which AWS service will support this requirement with the LEAST amount of operational overhead?

  A. AWS Systems Manager

  B. AWS Secrets Manager

  C. AWS License Manager

  D. AWS Managed Services

  Correct Answer: B

• Question 130:

  Which AWS service or feature can be used to create a private connection between an on-premises workload and an AWS Cloud workload?

  A. Amazon Route 53

  B. Amazon Macie

  C. AWS Direct Connect

  D. AWS PrivateLink

  Correct Answer: C

  Direct connect is for private dedicated connection between on premise and AWS.

  PrivateLink is used when you comunicate with third party VPC and it Requires a network load balancer (Service VPC) and ENI (Customer VPC)