Amazon CLF-C02 Online Practice Questions and Exam Preparation

Amazon CLF-C02 Online Questions & Answers

• Question 291:

  According to the AWS shared responsibility model, who is responsible for the virtualization layer down to the physical security of the facilities in which AWS services operate?

  A. It is the sole responsibility of the customer.
  B. It is the sole responsibility of AWS.
  C. It is a shared responsibility between AWS and the customer.
  D. The customer's AWS Support plan tier determines who manages the configuration.
  B. It is the sole responsibility of AWS.

  ---

  Explanation

  According to the AWS shared responsibility model, AWS is responsible for the security of the cloud, which includes the virtualization layer down to the physical security of the facilities in which AWS services operate. The customer is responsible for the security in the cloud, which includes the configuration and management of the AWS resources and applications that they use.

• Question 292:

  Which AWS database service provides in-memory data storage?

  A. Amazon DynamoDB
  B. Amazon ElastiCache
  C. Amazon RDS
  D. Amazon Timestream
  B. Amazon ElastiCache

  ---

  Explanation

  The correct answer is B because Amazon ElastiCache is a service that provides in-memory data storage. Amazon ElastiCache is a fully managed, scalable, and high-performance service that supports two popular open-source in-memory engines: Redis and Memcached. Amazon ElastiCache allows users to store and retrieve data from fast, low-latency, and high-throughput in-memory systems. Users can use Amazon ElastiCache to improve the performance of their applications by caching frequently accessed data, reducing database load, and enabling real-time data processing. The other options are incorrect because they are not services that provide in-memory data storage. Amazon DynamoDB is a service that provides key-value and document data storage. Amazon RDS is a service that provides relational data storage. Amazon Timestream is a service that provides time series data storage.

  Amazon ElastiCache FAQs

• Question 293:

  Which tasks are the responsibility of AWS, according to the AWS shared responsibility model? (Select TWO.)

  A. Patch AWS network devices.
  B. Set user password rules.
  C. Provide physical security for compute resources.
  D. Configure security groups.
  E. Patch the operating system of an Amazon EC2 instance.
  A. Patch AWS network devices.
  C. Provide physical security for compute resources.

  ---

  Explanation

  The correct answers are A and C because patching AWS network devices and providing physical security for compute resources are tasks that are the responsibility of AWS, according to the AWS shared responsibility model. The AWS shared responsibility model is a framework that defines the division of responsibilities between AWS and the customer for security and compliance. AWS is responsible for the security of the cloud, which includes the global infrastructure, such as the regions, availability zones, and edge locations; the hardware, software, networking, and facilities that run the AWS services; and the virtualization layer that separates the customer instances and storage. The customer is responsible for the security in the cloud, which includes the customer data, the guest operating systems, the applications, the identity and access management, the firewall configuration, and the encryption. The other options are incorrect because they are tasks that are the responsibility of the customer, according to the AWS shared responsibility model. Setting user password rules, configuring security groups, and patching the operating system of an Amazon EC2 instance are all tasks that the customer has to perform to secure their AWS environment.

  AWS Shared Responsibility Model

• Question 294:

  A company wants to enhance security by launching a third-party ISP intrusion detection system from its AWS account.

  Which AWS service or resource should the company use to meet this requirement?

  A. AWS Security Hub
  B. AWS Marketplace
  C. AWS Quick Starts
  D. AWS Security Center
  B. AWS Marketplace

  ---

  Explanation

  AWS Marketplace is a digital catalog that offers third-party software, including security solutions like intrusion detection systems, which can be deployed directly within an AWS environment. By using AWS Marketplace, companies can find, purchase, and deploy ISP intrusion detection systems or other security tools that meet their specific requirements. Other services, such as AWS Security Hub and Quick Starts, do not directly provide third-party application deployment.

• Question 295:

  Which AWS service or tool can be used to capture information about inbound and outbound traffic in an Amazon VPC?

  A. VPC Flow Logs
  B. Amazon Inspector
  C. VPC endpoint services
  D. NAT gateway
  A. VPC Flow Logs

  ---

  Explanation

• Question 296:

  Which AWS service provides command line access to AWS tools and resources directly (torn a web browser?

  A. AWS CIoudHSM
  B. AWS CloudShell
  C. Amazon Workspaces
  D. AWS Cloud Map
  B. AWS CloudShell

  ---

  Explanation

  AWS CloudShell is the service that provides command line access to AWS tools and resources directly from a web browser. AWS CloudShell is a browser-based shell that makes it easy to securely manage, explore, and interact with your AWS resources. It comes pre-authenticated with your console credentials and common development and administration tools are pre-installed, so no local installation or configuration is required. You can open AWS CloudShell from the AWS Management Console with a single click and start running commands and scripts using the AWS Command Line Interface (AWS CLI), Git, or SDKs. AWS CloudShell also provides persistent home directories with 1 GB of storage per AWS Region. The other services do not provide command line access to AWS tools and resources directly from a web browser. AWS CloudHSM is a service that helps you meet corporate, contractual and regulatory compliance requirements for data security by using dedicated Hardware Security Module (HSM) appliances within the AWS Cloud. Amazon WorkSpaces is a service that provides a fully managed, secure Desktop- as-a-Service (DaaS) solution that runs on AWS. AWS Cloud Map is a service that makes it easy for your applications to discover and connect to each other using logical names and attributes.

  References: AWS CloudShell, AWS CloudShell ?Command-Line Access to AWS Resources, AWS CloudHSM, Amazon WorkSpaces, AWS Cloud Map

• Question 297:

  A company wants to manage its cloud resources by using infrastructure as code (IaC) templates. The company needs to meet compliance requirements. Which AWS service should the company use to meet these requirements?

  A. AWS Artifact
  B. AWS Resource Explorer
  C. AWS License Manager
  D. AWS Service Catalog
  D. AWS Service Catalog

  ---

  Explanation

• Question 298:

  What is the customer ALWAYS responsible for managing, according to the AWS shared responsibility model?

  A. Software licenses
  B. Networking
  C. Customer data
  D. Encryption keys
  C. Customer data

  ---

  Explanation

• Question 299:

  A company is planning to migrate to the AWS Cloud. The company needs to understand the existing on-premises usage and Configuration. The company does not want to replicate its workloads to AWS, yet.

  Which AWS service or tool will meet these requirements?

  A. AWS Application Discovery Service
  B. AWS Application Migration Service
  C. Cloud Migration Factory
  D. AWS Transfer Family
  A. AWS Application Discovery Service

  ---

  Explanation

• Question 300:

  Which AWS service or feature allows users to create new AWS accounts, group multiple accounts to organize workflows, and apply policies to groups of accounts?

  A. AWS Identity and Access Management (IAM)
  B. AWS Trusted Advisor
  C. AWS CloudFormation
  D. AWS Organizations
  D. AWS Organizations

  ---

  Explanation

  "AWS Organizations provides you with the capability to centrally manage and govern your cloud environment. You can manage and organize your accounts under a single bill, set central policies and configuration requirements for your entire organization, create custom permissions or capabilities within the organization, and delegate responsibilities to other accounts so they can manage on behalf of the organization."

  https://aws.amazon.com/organizations/features/