Amazon CLF-C02 Online Practice Questions and Exam Preparation

Amazon CLF-C02 Online Questions & Answers

• Question 141:

  Which AWS service can a company use to manage encryption keys in the cloud?

  A. AWS License Manager
  B. AWS Certificate Manager (ACM)
  C. AWS CloudHSM
  D. AWS Directory Service
  C. AWS CloudHSM

  ---

  Explanation

  AWS CloudHSM provides hardware-based key management to manage and protect encryption keys in the AWS Cloud. It allows customers to generate and use their own encryption keys while complying with rigorous security requirements. While AWS Certificate Manager (ACM) manages SSL/TLS certificates, it does not handle encryption keys independently, and AWS License Manager and AWS Directory Service are not designed for managing encryption keys. AWS KMS is also relevant for key management but wasn't listed as an option in this question.

• Question 142:

  A company wants a fully managed service that centralizes and automates data protection across AWS services and hybrid workloads.

  Which AWS service will meet these requirements?

  A. AWS Artifact
  B. AWS Backup
  C. AWS Batch
  D. AWS Shield
  B. AWS Backup

  ---

  Explanation

• Question 143:

  A company runs its production workload in the AWS Cloud. The company needs to choose one of the AWS Support Plans.

  Which of the AWS Support Plans will meet these requirements at the LOWEST cost?

  A. Developer
  B. Enterprise On-Ramp
  C. Enterprise
  D. Business
  A. Developer

  ---

  Explanation

  The AWS Developer Support plan is the lowest-cost AWS Support plan that provides basic guidance and technical support for running production workloads. It offers 24/7 access to AWS customer service, documentation, whitepapers, and access to a limited set of Trusted Advisor checks. This plan is ideal for non-critical workloads or early development phases but provides lower levels of support compared to the Business, Enterprise On-Ramp, and Enterprise plans.

  B. Enterprise On-Ramp: Incorrect, as it is a higher-cost support plan designed for production workloads needing more guidance and technical support.

  C. Enterprise: Incorrect, as it is the most expensive support plan, providing a Technical Account Manager and other premium support features.

  D. Business: Incorrect, as it provides comprehensive support for production workloads but is more expensive than the Developer plan.

• Question 144:

  A company wants to run relationship databases in the AWS Cloud. The company wants to use a managed service that will install the database and run regular software updates.

  Which AWS service will meet these requirements?

  A. Amazon S3
  B. Amazon RDS
  C. Amazon Elastic Block Store (Amazon EBS)
  D. Amazon DynamoDB
  B. Amazon RDS

  ---

  Explanation

• Question 145:

  Which AWS service decouples application components so that the components run independently?

  A. Amazon Simple Notification Service (Amazon SNS)
  B. Amazon Simple Workflow Service (Amazon SWF)
  C. AWS Glue
  D. Amazon Simple Queue Service (Amazon SQS)
  D. Amazon Simple Queue Service (Amazon SQS)

  ---

  Explanation

  Amazon SQS is a fully managed message queuing service that makes it easy to decouple and scale microservices, distributed systems, and serverless applications. Amazon SQS lets you decouple application components so that they run and fail independently, increasing the overall fault tolerance of the system.

• Question 146:

  A company wants a report that lists the status of multi-factor authentication (MFA) devices that all users in the company's AWS account use.

  Which AWS feature or service will meet this requirement?

  A. AWS Cost and Usage Reports
  B. IAM credential reports
  C. Detailed Billing Reports
  D. AWS Cost Explorer reports
  B. IAM credential reports

  ---

  Explanation

• Question 147:

  A company has deployed an Amazon EC2 instance.

  Which option is an AWS responsibility under the AWS shared responsibility model?

  A. Managing and encrypting application data
  B. Installing updates and security patches of guest operating system
  C. Configuration of infrastructure devices
  D. Configuration of security groups on each instance
  C. Configuration of infrastructure devices

  ---

  Explanation

  According to the AWS shared responsibility model, AWS is responsible for protecting the infrastructure that runs all of the services offered in the AWS Cloud, such as data centers, hardware, software, networking, and facilities. This includes the configuration of infrastructure devices, such as routers, switches, firewalls, and load balancers. Customers are responsible for managing their data, applications, operating systems, security groups, and other aspects of their AWS environment. Therefore, options A, B, and D are customer responsibilities, not AWS responsibilities.

  References: 1: AWS Well-Architected Framework - Elasticity; 2: Reactive Systems on AWS - Elastic

• Question 148:

  Which task must a user perform by using the AWS account root user credentials?

  A. Make changes to AWS production resources.
  B. Change AWS Support plans.
  C. Access AWS Cost and Usage Reports.
  D. Grant auditors' access to an AWS account for a compliance audit.
  B. Change AWS Support plans.

  ---

  Explanation

  The AWS account root user is the email address that you used to sign up for AWS. The root user has complete access to all AWS services and resources in the account. You should use the root user only to perform a few account and service management tasks. One of these tasks is changing AWS Support plans, which requires root user credentials. For other tasks, you should create an IAM user or role with the appropriate permissions and use that instead of the root user.

• Question 149:

  Which scenarios represent the concept of elasticity on AWS? (Select TWO.)

  A. Scaling the number of Amazon EC2 instances based on traffic
  B. Resizing Amazon RDS instances as business needs change
  C. Automatically directing traffic to less-utilized Amazon EC2 instances
  D. Using AWS compliance documents to accelerate the compliance process
  E. Having the ability to create and govern environments using code
  A. Scaling the number of Amazon EC2 instances based on traffic
  B. Resizing Amazon RDS instances as business needs change

  ---

  Explanation

  These are two scenarios that represent the concept of elasticity on AWS. Elasticity means the ability to adjust the resources and capacity of the system in response to changes in demand or environment. Scaling the number of Amazon EC2 instances based on traffic means using services such as AWS Auto Scaling or Elastic Load Balancing to add or remove instances as the traffic increases or decreases. Resizing Amazon RDS instances as business needs change means using the Amazon RDS console or API to modify the instance type, storage type, or storage size of the database as the workload grows or shrinks. You can learn more about the concept of elasticity on AWS from [this webpage] or [this digital course].

• Question 150:

  Which AWS service can companies use to subscribe to RSS feeds for updates about all AWS service issues?

  A. Amazon Simple Notification Service (Amazon SNS)
  B. AWS Health Dashboard
  C. AWS Config
  D. AWS CodeCommit
  B. AWS Health Dashboard

  ---

  Explanation