Amazon CLF-C02 Online Practice Questions and Exam Preparation

Amazon CLF-C02 Online Questions & Answers

• Question 611:

  A company must be able to develop, test, and launch an application in the AWS Cloud quickly. Which advantage of cloud computing will meet these requirements?

  A. Stop guessing capacity
  B. Trade fixed expense for variable expense
  C. Achieve economies of scale
  D. Increase speed and agility
  D. Increase speed and agility

  ---

  Explanation

• Question 612:

  Which AWS service provides the SIMPLEST way for the company to establish a website on AWS?

  A. Amazon Elastic File System (Amazon EFS)
  B. AWS Elastic Beanstalk
  C. AWS Lambda
  D. Amazon Lightsail
  D. Amazon Lightsail

  ---

  Explanation

  Amazon Lightsail is an easy-to-use cloud platform that offers you everything needed to build an application or website, plus a cost-effective, monthly plan. Whether you're new to the cloud or looking to get on the cloud quickly with AWS infrastructure you trust, we've got you covered. Lightsail provides the simplest way for the company to establish a website on AWS.

• Question 613:

  A company is planning to use the Amazon EC2 instances as web servers. Customers from around the world will use the web servers. Most customers will use the web servers only during certain hours of the day.

  How should the company deploy the EC2 instances to achieve the LOWEST operational cost?

  A. In multiple Availability Zones
  B. In an Auto Scaling group
  C. In a placement group
  D. In private subnets
  B. In an Auto Scaling group

  ---

  Explanation

• Question 614:

  Which AWS service can be used to retrieve compliance reports on demand?

  A. AWS Secrets Manager
  B. AWS Artifact
  C. AWS Security Hub
  D. AWS Certificate Manager
  B. AWS Artifact

  ---

  Explanation

• Question 615:

  Which AWS service can identify when an Amazon EC2 instance was terminated?

  A. AWS Identity and Access Management (IAM)
  B. AWS CloudTrail
  C. AWS Compute Optimizer
  D. Amazon EventBridge
  B. AWS CloudTrail

  ---

  Explanation

  AWS CloudTrail is the AWS service that can identify when an Amazon EC2 instance was terminated. AWS CloudTrail is a service that records API calls and events for AWS accounts and resources. AWS CloudTrail can capture the TerminateInstances event, which is triggered when an EC2 instance is terminated by a user or an AWS service. The event contains information such as the instance ID, the user identity, the source IP address, the time, and the reason for the termination. Customers can use the CloudTrail console, the AWS CLI, or the AWS SDKs to view and search for the TerminateInstances events in their event history or in their S3 buckets where they store their CloudTrail logs.

• Question 616:

  A retail company has recently migrated its website to AWS. The company wants to ensure that it is protected from SQL injection attacks. The website uses an Application Load Balancer to distribute traffic to multiple Amazon EC2 instances.

  Which AWS service or feature can be used to create a custom rule that blocks SQL injection attacks?

  A. Security groups
  B. AWS WAF
  C. Network ACLs
  D. AWS Shield
  B. AWS WAF

  ---

  Explanation

  AWS WAF is a web application firewall that helps protect your web applications or APIs against common web exploits that may affect availability, compromise security, or consume excessive resources. AWS WAF gives you control over how traffic reaches your applications by enabling you to create security rules that block common attack patterns, such as SQL injection or cross-site scripting, and rules that filter out specific traffic patterns you define2. You can use AWS WAF to create a custom rule that blocks SQL injection attacks on your website.

• Question 617:

  A company manages global applications that require static IP addresses.

  Which AWS service would enable the company to improve the availability and performance of its applications?

  A. Amazon CloudFront
  B. AWS Global Accelerator
  C. Amazon S3 Transfer Acceleration
  D. Amazon API Gateway
  B. AWS Global Accelerator

  ---

  Explanation

  AWS Global Accelerator provides you with a set of static IP addresses that can map to multiple application endpoints across AWS Regions, to improve redundancy.

• Question 618:

  A company needs to use SQL syntax to perform a direct query of objects in an Amazon S3 bucket.

  Which AWS service can the company use to meet this requirement?

  A. AWS Glue
  B. Amazon Athena
  C. AWS Lambda
  D. Amazon Kinesis
  B. Amazon Athena

  ---

  Explanation

• Question 619:

  A company needs to convert video files and audio files to a format that will play on smartphones. Which AWS service will meet this requirement?

  A. Amazon Comprehend
  B. Amazon Rekognition
  C. Amazon Elastic Transcoder
  D. Amazon Polly
  C. Amazon Elastic Transcoder

  ---

  Explanation

  Amazon Elastic Transcoder is a media transcoding service that enables companies to convert video and audio files into formats optimized for playback on various devices, including smartphones. It automates the transcoding process and supports a wide array of video and audio formats, making it ideal for converting files into mobile-friendly formats. Services like Amazon Comprehend, Rekognition, and Polly do not perform media transcoding functions.

• Question 620:

  Which of the following are aspects of the AWS shared responsibility model? (Select TWO.)

  A. Configuration management of infrastructure devices is the customer's responsibility.
  B. For Amazon S3, AWS operates the infrastructure layer, the operating systems, and the platforms.
  C. AWS is responsible for protecting the physical cloud infrastructure.
  D. AWS is responsible for training the customer's employees on AWS products and services.
  E. For Amazon EC2, AWS is responsible for maintaining the guest operating system.
  B. For Amazon S3, AWS operates the infrastructure layer, the operating systems, and the platforms.
  C. AWS is responsible for protecting the physical cloud infrastructure.

  ---

  Explanation

  In the AWS shared responsibility model, the responsibility for security and management is shared between AWS and the customer. AWS takes care of the underlying infrastructure, operating systems, and platforms for services like Amazon S3. However, customers are responsible for using these services securely, setting up access controls, and managing their own data. Additionally, AWS is responsible for physical security and protection of the cloud infrastructure, while customers are responsible for configuring and managing their applications and data.