Amazon CLF-C02 Online Practice Questions and Exam Preparation

Amazon CLF-C02 Online Questions & Answers

• Question 491:

  A library wants to automate the classification of electronic books based on the contents of the books. Which AWS service should the library use to meet this requirement?

  A. Amazon Redshift
  B. Amazon CloudSearch
  C. Amazon Comprehend
  D. Amazon Aurora
  C. Amazon Comprehend

  ---

  Explanation

• Question 492:

  A company is using Amazon EC2 instances.

  Which tasks are the company's responsibility, according to the AWS shared responsibility model? (Select TWO.)

  A. Maintain the network infrastructure.
  B. Patch the guest operating system.
  C. Configure a security group on deployed EC2 instances.
  D. Provide physical security for the underlying hardware Of the EC2 instances.
  E. Manage the underlying hypervisor.
  B. Patch the guest operating system.
  C. Configure a security group on deployed EC2 instances.

  ---

  Explanation

  Patching the guest operating system is the responsibility of the customer. AWS is responsible for patching and maintaining the underlying infrastructure.

  Configuring a security group on deployed EC2 instances is the customer's responsibility. AWS is responsible for providing the security of the infrastructure and the underlying hypervisor.

• Question 493:

  Which options are perspectives that include foundational capabilities of the AWS Cloud Adoption Framework (AWS CAF)? (Select TWO.)

  A. Sustainability
  B. Security
  C. Operations
  D. Performance efficiency
  E. Reliability
  C. Operations
  D. Performance efficiency

  ---

  Explanation

  The options that are perspectives that include foundational capabilities of the AWS Cloud Adoption Framework (AWS CAF) are operations and performance efficiency. The AWS CAF is a guidance that helps organizations design and travel an accelerated path to successful cloud adoption. The AWS CAF organizes the cloud adoption process into six areas of focus, called perspectives, which are business, people, governance, platform, security, and operations. Each perspective is divided into capabilities, which are further divided into skills and responsibilities. The operations perspective focuses on the management and monitoring of the cloud resources and applications, as well as the automation and optimization of the operational processes. The operations perspective capabilities are operations support, operations integration, and service management. The performance efficiency perspective focuses on the selection and configuration of the right cloud resources and services to meet the performance requirements of the applications, as well as the continuous improvement and innovation of the cloud solutions. The performance efficiency perspective capabilities are selection, review, and monitoring. Sustainability, security, and reliability are not perspectives of the AWS CAF, but they are aspects of the AWS Well-Architected Framework. The AWS Well-Architected Framework is a guidance that helps users build and operate secure, reliable, efficient, and cost-effective systems in the cloud. The AWS Well-Architected Framework consists of five pillars, which are operational excellence, security, reliability, performance efficiency, and cost optimization. Sustainability is a cross-cutting theme that applies to all the pillars, and refers to the environmental and social impact of the cloud solutions.

• Question 494:

  A company has a managed IAM policy that does not grant the necessary permissions for users to accomplish required tasks. How can this be resolved?

  A. Enable AWS Shield Advanced.
  B. Create a custom IAM policy.
  C. Use a third-party web application firewall (WAF) managed rule from the AWS Marketplace.
  D. Use AWS Key Management Service (AWS KMS) to create a customer-managed key.
  B. Create a custom IAM policy.

  ---

  Explanation

• Question 495:

  A company wants to log in securely to Linux Amazon EC2 instances. How can the company accomplish this goal?

  A. Use SSH keys.
  B. Use a VPN.
  C. Use end-to-end encryption.
  D. Use Amazon Route 53.
  A. Use SSH keys.

  ---

  Explanation

• Question 496:

  A company wants to secure its consumer web application by using SSL/TLS to encrypt traffic.

  Which AWS service can the company use to meet this goal?

  A. AWS WAF
  B. AWS Shield
  C. Amazon VPC
  D. AWS Certificate Manager (ACM)
  D. AWS Certificate Manager (ACM)

  ---

  Explanation

  To enable HTTPS connections to your website or application in AWS, you need an SSL/TLS server certificate. For certificates in a Region supported by AWS Certificate Manager (ACM), we recommend that you use ACM to provision, manage, and deploy your server certificates.

• Question 497:

  A company wants to migrate petabytes of data from its on-premises data center to AWS. The company does not want to use an internet connection to perform the migration. Which AWS service will meet these requirements?

  A. AWS DataSync
  B. Amazon Connect
  C. AWS Snowmobile
  D. AWS Direct Connect
  C. AWS Snowmobile

  ---

  Explanation

• Question 498:

  An ecommerce company has been monitoring usage of its online store that is hosted on a fleet of Amazon EC2 instances. Surges in traffic occur every weekend day at the same time and last for approximately 4 hours.

  A. AWS Lambda
  B. Amazon EventBridge
  C. Elastic Load Balancing (ELB)
  D. Amazon EC2 Auto Scaling
  D. Amazon EC2 Auto Scaling

  ---

  Explanation

• Question 499:

  A company is launching a mobile app. The company wants customers to be able to use the app without upgrading their mobile devices.

  Which pillar of the AWS Well-Architected Framework does this goal represent?

  A. Security
  B. Reliability
  C. Cost optimization
  D. Sustainability
  C. Cost optimization

  ---

  Explanation

  Cost optimization is one of the five pillars of the AWS Well-Architected Framework. It focuses on avoiding unnecessary costs, understanding and controlling where money is being spent, selecting the most appropriate and right number of resource types, analyzing spend over time, and scaling to meet business needs without overspending.

• Question 500:

  A user wants to review all Amazon S3 buckets with ACLs and S3 bucket policies in the S3 console. Which AWS service or resource will meet this requirement?

  A. S3 Multi-Region Access Points
  B. S3 Storage Lens
  C. AWS IAM Identity Center (AWS Single Sign-On)
  D. Access Analyzer for S3
  D. Access Analyzer for S3

  ---

  Explanation

  When reviewing an at-risk bucket in IAM Access Analyzer for S3, you can block all public access to the bucket with a single click. We recommend that you block all access to your buckets unless you require public access to support a specific use case. Before you block all public access, ensure that your applications will continue to work correctly without public access. https://docs.aws.amazon.com/AmazonS3/latest/userguide/access-analyzer.html