Amazon Amazon Certifications CLF-C02 Questions & Answers

• Question 661:

  A company wants to track its AWS account's service costs. The company also wants to receive notifications when costs are forecasted to reach a specific level.

  Which AWS service or tool provides this functionality?

  A. AWS Budgets

  B. AWS Cost Explorer

  C. Savings Plans

  D. AWS Billing Conductor

  Correct Answer: A

  AWS Budgets gives you the ability to set custom budgets that alert you when your costs or usage exceed (or are forecasted to exceed) your budgeted amount. You can also use AWS Budgets to set reservation utilization or coverage targets and receive alerts when your utilization drops below the threshold you define2.

• Question 662:

  Which AWS services or features can control VPC traffic? (Select TWO.)

  A. Security groups

  B. AWS Direct Connect

  C. Amazon GuardDuty

  D. Network ACLs

  E. Amazon Connect

  Correct Answer: AD

  The AWS services or features that can control VPC traffic are security groups and network ACLs. Security groups are stateful firewalls that control the inbound and outbound traffic at the instance level. You can assign one or more security groups to each instance in a VPC, and specify the rules that allow or deny traffic based on the protocol, port, and source or destination. Network ACLs are stateless firewalls that control the inbound and outbound traffic at the subnet level. You can associate one network ACL with each subnet in a VPC, and specify the rules that allow or deny traffic based on the protocol, port, and source or destination. AWS Direct Connect, Amazon GuardDuty, and Amazon Connect are not services or features that can control VPC traffic. AWS Direct Connect is a service that establishes a dedicated network connection between your premises and AWS. Amazon GuardDuty is a service that monitors your AWS account and workloads for malicious or unauthorized activity. Amazon Connect is a service that provides a cloud-based contact center solution.

• Question 663:

  Which AWS service aggregates, organizes, and prioritizes security alerts and findings from multiple AWS services?

  A. Amazon Detective

  B. Amazon Inspector

  C. Amazon Macie

  D. AWS Security Hub

  Correct Answer: D

  The correct answer is D because AWS Security Hub is a service that aggregates, organizes, and prioritizes security alerts and findings from multiple AWS services, such as Amazon GuardDuty, Amazon Inspector, Amazon Macie, AWS Firewall Manager, and AWS IAM Access Analyzer. The other options are incorrect because they are not services that aggregate security alerts and findings from multiple AWS services. Amazon Detective is a service that helps users analyze and visualize security data to investigate and remediate potential issues. Amazon Inspector is a service that helps users find security vulnerabilities and deviations from best practices in their Amazon EC2 instances. Amazon Macie is a service that helps users discover, classify, and protect sensitive data stored in Amazon S3. Reference: AWS Security Hub FAQs

• Question 664:

  Which of the following are pillars of the AWS Well-Architected Framework? (Select TWO.)

  A. Availability

  B. Reliability

  C. Scalability

  D. Responsive design

  E. Operational excellence

  Correct Answer: BE

  The correct answers to the questions are B and E because reliability and operational excellence are pillars of the AWS Well-Architected Framework. The AWS Well- Architected Framework is a set of best practices and guidelines for designing and operating reliable, secure, efficient, and cost-effective systems in the cloud. The AWS Well- Architected Framework consists of five pillars: operational excellence, security, reliability, performance efficiency, and cost optimization. Each pillar has a set of design principles that describe the characteristics of a well-architected system. Reliability is the pillar that focuses on the ability of a system to recover from failures and meet business and customer demand. Operational excellence is the pillar that focuses on the ability of a system to run and monitor processes that support business outcomes and continually improve. The other options are incorrect because they are not pillars of the AWS Well-Architected Framework. Availability, scalability, and responsive design are important aspects of cloud architecture, but they are not separate pillars in the framework. Availability and scalability are related to the reliability and performance efficiency pillars, while responsive design is related to the customer experience and user interface. Reference: AWS Well-Architected Framework

• Question 665:

  A company has deployed an Amazon EC2 instance.

  Which option is an AWS responsibility under the AWS shared responsibility model?

  A. Managing and encrypting application data

  B. Installing updates and security patches of guest operating system

  C. Configuration of infrastructure devices

  D. Configuration of security groups on each instance

  Correct Answer: C

• Question 666:

  A company wants to migrate its PostgreSQL database to AWS. The company does not use the database frequently. Which AWS service or resource will meet these requirements with the LEAST management overhead?

  A. PostgreSQL on Amazon EC2

  B. Amazon RDS for PostgreSQL

  C. Amazon Aurora PostgreSQL-Compatible Edition

  D. Amazon Aurora Serverless

  Correct Answer: D

• Question 667:

  A company is using Amazon DynamoDB for its application database.

  Which tasks are the responsibility of AWS, according to the AWS shared responsibility model? (Choose two.)

  A. Classify data.

  B. Configure access permissions.

  C. Manage encryption options.

  D. Provide public endpoints to store and retrieve data.

  E. Manage the infrastructure layer and the operating system.

  Correct Answer: DE

• Question 668:

  A company wants to create a globally accessible ecommerce platform for its customers. The company wants to use a highly available and scalable DNS web service to connect users to the platform. Which AWS service will meet these requirements?

  A. Amazon EC2

  B. Amazon VPC

  C. Amazon Route 53

  D. Amazon RDS

  Correct Answer: C

• Question 669:

  Which maintenance task is the customer's responsibility, according to the AWS shared responsibility model?

  A. Physical connectivity among Availability Zones

  B. Network switch maintenance

  C. Hardware updates and firmware patches

  D. Amazon EC2 updates and security patches

  Correct Answer: D

• Question 670:

  A company wants to improve its security posture by reviewing user activity through API calls. Which AWS service will meet this requirement?

  A. AWS WAF

  B. Amazon Detective

  C. Amazon CloudWatch

  D. AWS CloudTrail

  Correct Answer: D