Amazon CLF-C02 Online Practice Questions and Exam Preparation

Amazon CLF-C02 Online Questions & Answers

• Question 681:

  Which of the following are benefits of AWS Trusted Advisor? (Choose two.)

  A. Access to Amazon Simple Queue Service (Amazon SQS)
  B. Cost optimization recommendations
  C. Hourly refresh of the service limit checks
  D. Security checks
  E. AWS Identity and Access Management (IAM) approval management
  B. Cost optimization recommendations
  D. Security checks

  ---

  Explanation

• Question 682:

  Which abilities are benefits of the AWS Cloud? (Choose two.)

  A. Trade variable expenses for capital expenses.
  B. Deploy globally in minutes.
  C. Plan capacity in advance of deployments.
  D. Take advantage of economies of scale.
  E. Reduce dependencies on network connectivity.
  B. Deploy globally in minutes.
  D. Take advantage of economies of scale.

  ---

  Explanation

• Question 683:

  What is a customer responsibility under the AWS shared responsibility model when using AWS Lambda?

  A. Maintenance of the underlying Lambda hardware.
  B. Maintenance of the Lambda networking infrastructure.
  C. The code and libraries that run in the Lambda functions.
  D. The Lambda server software.
  C. The code and libraries that run in the Lambda functions.

  ---

  Explanation

• Question 684:

  Which of the following are advantages of the AWS Cloud? (Select TWO.)

  A. AWS manages all the security within the cloud
  B. Expenses never change from month to month
  C. Users can stop spending money on the maintenance of data centers
  D. Users do not need to deploy applications globally
  E. Users can stop guessing about resource capacity
  C. Users can stop spending money on the maintenance of data centers
  E. Users can stop guessing about resource capacity

  ---

  Explanation

• Question 685:

  Which AWS service or feature offers HTTP attack protection to users running public-facing web applications?

  A. Security groups
  B. Network ACLs
  C. AWS Shield Standard
  D. AWS WAF
  D. AWS WAF

  ---

  Explanation

  AWS WAF is the AWS service or feature that offers HTTP attack protection to users running public-facing web applications. AWS WAF is a web application firewall that helps users protect their web applications from common web exploits, such as SQL injection, cross-site scripting, and bot attacks. Users can create custom rules to define the web traffic that they want to allow, block, or count. Users can also use AWS Managed Rules, which are pre-configured rules that are curated and maintained by AWS or AWS Marketplace Sellers. AWS WAF can be integrated with other AWS services, such as Amazon CloudFront, Amazon API Gateway, and Application Load Balancer, to provide comprehensive security for web applications. [AWS WAF Overview] AWS Certified Cloud Practitioner - aws.amazon.com

• Question 686:

  Which option is a physical location of the AWS global infrastructure?

  A. AWS DataSync
  B. AWS Region
  C. Amazon Connect
  D. AWS Organizations
  B. AWS Region

  ---

  Explanation

  AWS has the concept of a Region, which is a physical location around the world where we cluster data centers. We call each group of logical data centers an Availability Zone. Each AWS Region consists of a minimum of three, isolated, and

  physically separate AZs within a geographic area.

  https://aws.amazon.com/about-aws/global-infrastructure/regions_az/

• Question 687:

  Which AWS service supports a hybrid architecture that gives users the ability to extend AWS infrastructure, AWS services, APIs, and tools to data centers, co-location environments, or on-premises facilities?

  A. AWS Snowmobile
  B. AWS Local Zones
  C. AWS Outposts
  D. AWS Fargate
  C. AWS Outposts

  ---

  Explanation

  AWS Outposts is a service that delivers AWS infrastructure and services to virtually any on-premises or edge location for a truly consistent hybrid experience. AWS Outposts allows you to extend and run native AWS services on premises, and is available in a variety of form factors, from 1U and 2U Outposts servers to 42U Outposts racks, and multiple rack deployments. With AWS Outposts, you can run some AWS services locally and connect to a broad range of services available in the local AWS Region. Run applications and workloads on premises using familiar AWS services, tools, and APIs. AWS Outposts is the only AWS service that supports a hybrid architecture that gives users the ability to extend AWS infrastructure, AWS services, APIs, and tools to data centers, co- location environments, or on-premises facilities.

  References: On-Premises Infrastructure - AWS Outposts Family

• Question 688:

  A company wants to create a globally accessible ecommerce platform for its customers. The company wants to use a highly available and scalable DNS web service to connect users to the platform.

  Which AWS service will meet these requirements?

  A. Amazon EC2
  B. Amazon VPC
  C. Amazon Route 53
  D. Amazon RDS
  C. Amazon Route 53

  ---

  Explanation

  Amazon Route 53 is a highly available and scalable Domain Name System (DNS) web service that can route internet traffic to the company's ecommerce platform1. Route 53 can also register domain names, check the health of resources, and provide global DNS features. Route 53 can connect users to the platform by translating human-readable names like www.example.com into the numeric IP addresses that computers use to communicate with each other.

• Question 689:

  Which AWS service provides protection against DDoS attacks for applications that run in the AWS Cloud?

  A. Amazon VPC
  B. AWS Shield
  C. AWS Audit Manager
  D. AWS Config
  B. AWS Shield

  ---

  Explanation

  AWS Shield is an AWS service that provides protection against distributed denial of service (DDoS) attacks for applications that run in the AWS Cloud. DDoS attacks are attempts to make an online service unavailable by overwhelming it with traffic from multiple sources. AWS Shield provides two tiers of protection: AWS Shield Standard and AWS Shield Advanced. AWS Shield Standard is automatically enabled for all AWS customers at no additional charge. It provides protection against common and frequently occurring network and transport layer DDoS attacks. AWS Shield Advanced is an optional paid service that provides additional protection against larger and more sophisticated DDoS attacks. AWS Shield Advanced also provides access to 24/7 DDoS response team, cost protection, and enhanced detection and mitigation capabilities

• Question 690:

  Who is responsible for decommissioning end-of-life underlying storage devices that are used to host data on AWS?

  A. Customer
  B. AWS
  C. Account creator
  D. Auditing team
  B. AWS

  ---

  Explanation

  AWS is responsible for decommissioning end-of-life underlying storage devices that are used to host data on AWS. AWS follows strict and audited data destruction processes to ensure that customer data is not exposed to unauthorized individuals or devices when an AWS storage device reaches the end of its useful life. AWS uses techniques detailed in DoD 5220.22-M ("National Industrial Security Program Operating Manual") or NIST 800-88 ("Guidelines for Media Sanitization") to destroy data as part of the decommissioning process3.