Amazon CLF-C02 Online Practice Questions and Exam Preparation

Amazon CLF-C02 Online Questions & Answers

• Question 511:

  Which AWS service or resource helps on-premises applications connect to AWS Cloud- based storage and caches the data locally for low-latency access?

  A. AWS Direct Connect
  B. AWS Storage Gateway
  C. Amazon S3
  D. AWS Snowball Edge
  B. AWS Storage Gateway

  ---

  Explanation

  Storage Gateway enables on-premises applications to use cloud storage by providing low-latency data access over standard storage protocols.

• Question 512:

  A company is running an application on AWS. The company wants to identify and prevent the accidental

  Which AWS service or feature will meet these requirements?

  A. Amazon GuardDuty
  B. Network ACL
  C. AWS WAF
  D. AWS Network Firewall
  A. Amazon GuardDuty

  ---

  Explanation

  Amazon GuardDuty is a threat detection service that continuously monitors for malicious activity and unauthorized behavior to protect your AWS accounts, workloads, and data stored in Amazon S3. With the cloud, the collection and aggregation of account and network activities is simplified, but it can be time consuming for security teams to continuously analyze event log data for potential threats. With GuardDuty, you can automate anomaly detection and get actionable findings to help you protect your AWS resources4.

• Question 513:

  A company's information security manager is supervising a move to AWS and wants to ensure that AWS best practices are followed. The manager has concerns about the potential misuse of AWS account root user credentials.

  Which of the following is an AWS best practice for using the AWS account root user credentials?

  A. Allow only the manager to use the account root user credentials for normal activities.
  B. Use the account root user credentials only for Amazon EC2 instances from the AWS Free Tier.
  C. Use the account root user credentials only when they alone must be used to perform a required function.
  D. Use the account root user credentials only for the creation of private VPC subnets.
  C. Use the account root user credentials only when they alone must be used to perform a required function.

  ---

  Explanation

  The AWS best practice for using the AWS account root user credentials is to use them only when they alone must be used to perform a required function. The AWS account root user credentials have full access to all the resources in the account, and therefore pose a security risk if compromised or misused. You should create individual IAM users with the minimum necessary permissions for everyday tasks, and use AWS Organizations to manage multiple accounts. You should also enable multi-factor authentication (MFA) and rotate the password for the root user regularly. Some of the functions that require the root user credentials are changing the account name, closing the account, changing the support plan, and restoring an IAM user's access.

• Question 514:

  A company is in the early stages of planning a migration to AWS. The company wants to obtain the monthly predicted total AWS cost of ownership for future Amazon EC2 instances and associated storage.

  Which AWS service or tool should the company use to meet these requirements?

  A. AWS Pricing Calculator
  B. AWS Compute Optimizer
  C. AWS Trusted Advisor
  D. AWS Application Migration Service
  A. AWS Pricing Calculator

  ---

  Explanation

• Question 515:

  A company wants to develop applications that run on AWS. The company's developers need a set of libraries and development tools that are available in multiple programming languages.

  Which AWS solution provides these libraries and tools?

  A. AWS CodePipeline
  B. AWS SDKs
  C. Amazon CloudWatch
  D. AWS CodeDeploy
  B. AWS SDKs

  ---

  Explanation

• Question 516:

  Which pillar of the AWS Well-Architected Framework includes the AWS shared responsibility model?

  A. Operational excellence
  B. Performance efficiency
  C. Reliability
  D. Security
  D. Security

  ---

  Explanation

  The AWS Well-Architected Framework is a set of best practices and guidelines for designing and operating reliable, secure, efficient, and cost-effective systems in the cloud. The framework consists of five pillars: operational excellence, performance efficiency, reliability, security, and cost optimization. The security pillar covers the AWS shared responsibility model, which defines the security and compliance responsibilities of AWS and the customers. You can learn more about the AWS Well-Architected Framework from [this whitepaper] or [this digital course].

• Question 517:

  A company notices suspicious network activity against an application that is running on a fleet of Amazon EC2 instances The suspicious activity is coming from a single IP address.

  Which AWS service should the company use to block access from this IP address?

  A. AWS Shield
  B. AWS Config
  C. Amazon GuardDuty
  D. AWS WAF
  D. AWS WAF

  ---

  Explanation

  AWS WAF is a web application firewall that lets you monitor the HTTP and HTTPS requests that are forwarded to your protected web application resources. You can protect the following resource types: Amazon CloudFront distribution Amazon API Gateway REST API Application Load Balancer AWS AppSync GraphQL API Amazon Cognito user pool AWS WAF also lets you control access to your content. Based on conditions that you specify, such as the IP addresses that requests originate from or the values of query strings, your protected resource responds to requests either with the requested content, with an HTTP 403 status code (Forbidden), or with a custom response. https://docs.aws.amazon.com/waf/latest/developerguide/what-is-aws-waf.html

• Question 518:

  Which AWS service can a company use to directly query and analyze AWS Cost and Usage Reports?

  A. Amazon OpenSearch Service
  B. Amazon Athena
  C. Amazon Aurora
  D. AWS Glue
  B. Amazon Athena

  ---

  Explanation

• Question 519:

  A company needs to host an application in a specific geographic area to comply with regulations.

  Which feature of the AWS global infrastructure will help the company meet this requirement?

  A. Scalability
  B. Global footprint
  C. Availability
  D. Performance
  B. Global footprint

  ---

  Explanation

• Question 520:

  A company wants to migrate critical on-premises production systems to Amazon EC2 instances. The production instances will be used for at least 3 years. The company wants a pricing option that will minimize cost. Which solution will meet these requirements?

  A. On-Demand Instances
  B. Reserved Instances
  C. Spot Instances
  D. AWS Free Tier
  B. Reserved Instances

  ---

  Explanation

  Reserved Instances (RIs) offer a significant discount (up to 75%) compared to On-Demand pricing in exchange for committing to use AWS for a period of 1 or 3 years. This pricing model is ideal for applications with predictable usage patterns

  or long-term commitments, such as critical production systems that will be running for at least 3 years.

  On-Demand Instances: Incorrect. On-Demand Instances provide flexibility without commitment but are more expensive over the long term.

  Spot Instances: Incorrect. Spot Instances offer the lowest cost for non-critical, interruptible workloads but are not suitable for critical production systems due to their potential for sudden termination.

  AWS Free Tier: Incorrect. The AWS Free Tier provides limited free usage for certain AWS services for a short period (typically one year) and is not intended for long-term production workloads.