Amazon Amazon Certifications CLF-C02 Questions & Answers

• Question 161:

  An ecommerce company has migrated its IT infrastructure from an on-premises data center to the AWS Cloud. Which cost is the company's direct responsibility?

  A. Cost of application software licenses

  B. Cost of the hardware infrastructure on AWS

  C. Cost of power for the AWS servers

  D. Cost of physical security for the AWS data center

  Correct Answer: A

• Question 162:

  Which AWS service or feature identifies whether an Amazon S3 bucket or an IAM role has been shared with an external entity?

  A. AWS Service Catalog

  B. AWS Systems Manager

  C. AWS IAM Access Analyzer

  D. AWS Organizations

  Correct Answer: C

  IAM Access Analyzer helps identify resources in your organization and accounts that are shared with an external entity. https://docs.aws.amazon.com/IAM/latest/UserGuide/what-is-access-analyzer.html

• Question 163:

  A user needs programmatic access to AWS resources through the AWS CLI or the AWS API. Which option will provide the user with the appropriate access?

  A. Amazon Inspector

  B. Access keys

  C. SSH public keys

  D. AWS Key Management Service (AWS KMS) keys

  Correct Answer: B

  "Access keys are long-term credentials for an IAM user or the AWS account root user. You can use access keys to sign programmatic requests to the AWS CLI or AWS API (directly or using the AWS SDK)." https://docs.aws.amazon.com/ IAM/latest/UserGuide/id_credentials_access-keys.html

• Question 164:

  What does the concept of agility mean in AWS Cloud computing? (Choose two.)

  A. The speed at which AWS resources are implemented

  B. The speed at which AWS creates new AWS Regions

  C. The ability to experiment quickly

  D. The elimination of wasted capacity

  E. The low cost of entry into cloud computing

  Correct Answer: AC

  https://www.examtopics.com/discussions/amazon/view/99721-exam-aws-certified-cloud-practitioner-topic-1-question-661/

• Question 165:

  A company needs to block SQL injection attacks.

  Which AWS service or feature can meet this requirement?

  A. AWS WAF

  B. AWS Shield

  C. Network ACLs

  D. Security groups

  Correct Answer: A

  A: AWS WAF allows you to create custom rules to block SQL injection attempts.

  Create a WebACL: Go to AWS WAF dashboard and create a new WebACL.

  Add a Rule: Inside the WebACL, add a new rule.

  SQLi Filter: Choose the rule type to look for SQLi patterns. AWS WAF has built-in SQLi filters.

  Attach Resources: Attach the WebACL to a resource, such as an Application Load Balancer, Amazon CloudFront distribution, or an API Gateway.

  Deploy: Save and deploy the WebACL.

• Question 166:

  Which AWS service or resource provides answers to the most frequently asked security-related questions that AWS receives from its users?

  A. AWS Artifact

  B. Amazon Connect

  C. AWS Chatbot

  D. AWS Knowledge Center

  Correct Answer: D

  AWS Official Knowledge Center articles and videos covering the most frequent questions and requests that we receive from AWS customers. https://repost.aws/knowledge-center

• Question 167:

  A company has an AWS account. The company wants to audit its password and access key rotation details for compliance purposes. Which AWS service or tool will meet this requirement?

  A. IAM Access Analyzer

  B. AWS Artifact

  C. IAM credential report

  D. AWS Audit Manager

  Correct Answer: C

  You can use credential reports to assist in your auditing and compliance efforts. You can use the report to audit the effects of credential lifecycle requirements, such as password and access key updates. https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_getting-report.html

• Question 168:

  A company wants to receive a notification when a specific AWS cost threshold is reached. Which AWS services or tools can the company use to meet this requirement? (Choose two.)

  A. Amazon Simple Queue Service (Amazon SQS)

  B. AWS Budgets

  C. Cost Explorer

  D. Amazon CloudWatch

  E. AWS Cost and Usage Report

  Correct Answer: BD

  B. AWS Budgets: AWS Budgets is a service that allows you to set custom cost and usage budgets for your AWS resources. You can configure a budget with a specific threshold and define actions, such as sending notifications, when that threshold is reached.

  D. Amazon CloudWatch: Amazon CloudWatch is a monitoring service that can be used to collect and track metrics, logs, and events from various AWS resources. It supports setting up alarms based on cost metrics, so you can create an alarm for a specific cost threshold and configure it to send notifications when the threshold is breached.

• Question 169:

  A company is running a monolithic on-premises application that does not scale and is difficult to maintain. The company has a plan to migrate the application to AWS and divide the application into microservices. Which best practice of the AWS Well-Architected Framework is the company following with this plan?

  A. Integrate functional testing as part of AWS deployment.

  B. Use automation to deploy changes.

  C. Deploy the application to multiple locations.

  D. Implement loosely coupled dependencies.

  Correct Answer: D

  Dependencies such as queuing systems, streaming systems, workflows, and load balancers are loosely coupled. Loose coupling helps isolate behavior of a component from other components that depend on it, increasing resiliency and agility. https://docs.aws.amazon.com/wellarchitected/latest/framework/rel_prevent_interaction_failure_loosely_coupled_system.html

• Question 170:

  Which option is a physical location of the AWS global infrastructure?

  A. AWS DataSync

  B. AWS Region

  C. Amazon Connect

  D. AWS Organizations

  Correct Answer: B

  AWS has the concept of a Region, which is a physical location around the world where we cluster data centers. We call each group of logical data centers an Availability Zone. Each AWS Region consists of a minimum of three, isolated, and

  physically separate AZs within a geographic area.

  https://aws.amazon.com/about-aws/global-infrastructure/regions_az/