Amazon CLF-C02 Online Practice Questions and Exam Preparation

Amazon CLF-C02 Online Questions & Answers

• Question 431:

  Which AWS solution gives companies the ability to use protocols such as NFS to store and retrieve objects in Amazon S3?

  A. Amazon FSx for Lustre
  B. AWS Storage Gateway volume gateway
  C. AWS Storage Gateway file gateway
  D. Amazon Elastic File System (Amazon EFS)
  C. AWS Storage Gateway file gateway

  ---

  Explanation

  AWS Storage Gateway file gateway allows companies to use protocols such as NFS and SMB to store and retrieve objects in Amazon S3. File gateway provides a seamless integration between on-premises applications and Amazon S3, and enables low- latency access to data through local caching. File gateway also supports encryption, compression, and lifecycle management of the objects in Amazon S3. For more information, see What is AWS Storage Gateway? and File Gateway.

• Question 432:

  Which AWS service or resource provides answers to the most frequently asked security-related questions that AWS receives from its users?

  A. AWS Artifact
  B. Amazon Connect
  C. AWS Chatbot
  D. AWS Knowledge Center
  D. AWS Knowledge Center

  ---

  Explanation

  AWS Official Knowledge Center articles and videos covering the most frequent questions and requests that we receive from AWS customers. https://repost.aws/knowledge-center

• Question 433:

  A company wants a fully managed Windows file server for its Windows-based applications. Which AWS service will meet this requirement?

  A. Amazon FSx
  B. Amazon Elastic Kubernetes Service (Amazon EKS)
  C. Amazon Elastic Container Service (Amazon ECS)
  D. Amazon EMR
  A. Amazon FSx

  ---

  Explanation

  Amazon FSx lets you easily and securely backup, archive, or replicate your on-premises file storage to AWS in order to meet regulatory, data retention, or disaster recovery requirements. Learn how to get started. Choosing an Amazon FSx File System.

• Question 434:

  A company has a social media platform in which users upload and share photos with other users. The company wants to identify and remove inappropriate photos. The company has no machine learning (ML) scientists and must build this

  detection capability with no ML expertise.

  Which AWS service should the company use to build this capability?

  A. Amazon SageMaker
  B. Amazon Textract
  C. Amazon Rekognition
  D. Amazon Comprehend
  C. Amazon Rekognition

  ---

  Explanation

  Amazon Rekognition is the AWS service that the company should use to build the capability of identifying and removing inappropriate photos. Amazon Rekognition is a service that uses deep learning technology to analyze images and videos for various purposes, such as face detection, object recognition, text extraction, and content moderation. Amazon Rekognition can help users detect unsafe or inappropriate content in images and videos, such as nudity, violence, or drugs, and provide confidence scores for each label. Amazon Rekognition does not require any machine learning expertise, and users can easily integrate it with other AWS services

• Question 435:

  Which pillar of the AWS Well-Architected Framework includes the continual improvement of processes and procedures as a priority?

  A. Cost optimization
  B. Reliability
  C. Performance efficiency
  D. Operational excellence
  D. Operational excellence

  ---

  Explanation

• Question 436:

  Which AWS service can defend against DDoS attacks?

  A. AWS Firewall Manager
  B. AWS Shield Standard
  C. AWS WAF
  D. Amazon Inspector
  B. AWS Shield Standard

  ---

  Explanation

  AWS Shield Standard is a service that provides protection against Distributed Denial of Service (DDoS) attacks for all AWS customers at no additional charge. It automatically detects and mitigates the most common and frequently occurring network and transport layer DDoS attacks that target AWS resources, such as Amazon EC2 instances, Elastic Load Balancers, Amazon CloudFront distributions, and Amazon Route 53 hosted zones. AWS Firewall Manager is a service that allows users to centrally configure and manage firewall rules across their AWS accounts and resources, such as AWS WAF web ACLs, AWS Shield Advanced protections, and Amazon VPC security groups. AWS WAF is a web application firewall that helps protect web applications from common web exploits, such as SQL injection, cross-site scripting, and bot attacks. Amazon Inspector is an automated security assessment service that helps improve the security and compliance of applications deployed on AWS. It analyzes the behavior of the applications and checks for vulnerabilities, exposures, and deviations from best practices.

• Question 437:

  Which of the following AWS services are serverless? (Choose two.)

  A. AWS Outposts
  B. Amazon EC2
  C. Amazon Elastic Kubernetes Service (Amazon EKS)
  D. AWS Fargate
  E. AWS Lambda
  D. AWS Fargate
  E. AWS Lambda

  ---

  Explanation

• Question 438:

  Which option is an environment that consists of one or more data centers?

  A. Amazon CloudFront
  B. Availability Zone
  C. VPC
  D. AWS Outposts
  B. Availability Zone

  ---

  Explanation

  Understanding Availability Zones (AZs): An Availability Zone is a distinct location within an AWS region that is engineered to be isolated from failures in other AZs.

  Characteristics of Availability Zones:

  Use Cases for Availability Zones:

  References:

  AWS Global Infrastructure

  Understanding AWS Regions and Availability Zones

• Question 439:

  A company is planning a migration to the AWS Cloud and wants to examine the costs that are associated with different workloads.

  Which AWS tool will meet these requirements?

  A. AWS Budgets
  B. AWS Cost Explorer
  C. AWS Pricing Calculator
  D. AWS Cost and Usage Report
  C. AWS Pricing Calculator

  ---

  Explanation

  The AWS tool that will meet the requirements of the company that is planning a migration to the AWS Cloud and wants to examine the costs that are associated with different workloads is AWS Pricing Calculator. AWS Pricing Calculator is a tool that helps customers estimate the cost of using AWS services based on their requirements and preferences. The company can use AWS Pricing Calculator to compare the costs of different AWS services and configurations, such as Amazon EC2, Amazon S3, Amazon RDS, and more. AWS Pricing Calculator also provides detailed breakdowns of the cost components, such as compute, storage, network, and data transfer. AWS Pricing Calculator helps customers plan and optimize their cloud budget and migration strategy. AWS Budgets, AWS Cost Explorer, and AWS Cost and Usage Report are not the best tools to use for this purpose. AWS Budgets is a tool that helps customers monitor and manage their AWS spending and usage against predefined budget limits and thresholds. AWS Cost Explorer is a tool that helps customers analyze and visualize their AWS spending and usage trends over time. AWS Cost and Usage Report is a tool that helps customers access comprehensive and granular information about their AWS costs and usage in a CSV or Parquet file. These tools are more useful for tracking and optimizing the existing AWS costs and usage, rather than estimating the costs of different workloads34

• Question 440:

  A company is using AWS Identity and Access Management (IAM).

  Who can manage the access keys of the AWS account root user?

  A. IAM users in the same account that have been granted permission
  B. IAM roles in any account that have been granted permission
  C. IAM users and roles that have been granted permission
  D. The AWS account owner
  D. The AWS account owner

  ---

  Explanation