Amazon Amazon Certifications CLF-C02 Questions & Answers

• Question 61:

  A company needs to transfer data between an Amazon S3 bucket and an on-premises application. Who is responsible for the security of this data, according to the AWS shared responsibility model?

  A. The company

  B. AWS

  C. Firewall vendor

  D. AWS Marketplace partner

  Correct Answer: A

• Question 62:

  Which pillar of the AWS Well-Architected Framework refers to the ability of a system to recover from infrastructure or service disruptions and dynamically acquire computing resources to meet demand?

  A. Security

  B. Reliability

  C. Performance efficiency

  D. Cost optimization

  Correct Answer: B

  "Ability of a system to recover from infrastructure or service disruptions, dynamically acquire computing resources to meet demand, and mitigate disruptions such as misconfigurations or transient network issues."

• Question 63:

  A company wants to identify Amazon S3 buckets that are shared with another AWS account. Which AWS service or feature will meet these requirements?

  A. AWS Lake Formation

  B. IAM credential report

  C. Amazon CloudWatch

  D. IAM Access Analyzer

  Correct Answer: D

• Question 64:

  Which AWS service gives users the ability to build interactive business intelligence dashboards that include machine learning insights?

  A. Amazon Athena

  B. Amazon Kendra

  C. Amazon QuickSight

  D. Amazon Redshift

  Correct Answer: C

  Amazon QuickSight is the AWS service that gives users the ability to create interactive business intelligence (BI) dashboards that can include machine learning insights. It allows you to connect and visualize data from various sources, perform exploratory analysis and share information collaboratively in the form of reports and dashboards.

• Question 65:

  A user wants to securely automate the management and rotation of credentials that are shared between applications, while spending the least amount of time on managing tasks. Which AWS service or feature can be used to accomplish this?

  A. AWS CloudHSM

  B. AWS Key Management Service (AWS KMS)

  C. AWS Secrets Manager

  D. Server-side encryption

  Correct Answer: C

• Question 66:

  Which security service automatically recognizes and classifies sensitive data or intellectual property on AWS?

  A. Amazon GuardDuty

  B. Amazon Macie

  C. Amazon Inspector

  D. AWS Shield

  Correct Answer: B

• Question 67:

  A company is running a critical workload on an Amazon RDS DB instance. The company needs the DB instance to be highly available with a recovery time of less than 5 minutes. Which solution will meet these requirements?

  A. Create a read replica of the DB instance.

  B. Create a template of the DB instance by using AWS CloudFormation.

  C. Take frequent snapshots of the DB instance. Store the snapshots in Amazon S3.

  D. Modify the DB instance to be a Multi-AZ deployment.

  Correct Answer: D

• Question 68:

  Which AWS services can a company use to achieve a loosely coupled architecture? (Choose two.)

  A. Amazon WorkSpaces

  B. Amazon Simple Queue Service (Amazon SQS)

  C. Amazon Connect

  D. AWS Trusted Advisor

  E. AWS Step Functions

  Correct Answer: BD

• Question 69:

  Which AWS Cloud service can send alerts to customers if custom spending thresholds are exceeded?

  A. AWS Budgets

  B. AWS Cost Explorer

  C. AWS Cost Allocation Tags

  D. AWS Organizations

  Correct Answer: A

• Question 70:

  A company needs to quickly and securely move files over long distances between its client and an Amazon S3 bucket. Which S3 feature will meet this requirement?

  A. S3 Versioning

  B. S3 Transfer Acceleration

  C. S3ACLs

  D. S3 Intelligent-Tiering

  Correct Answer: B