Amazon CLF-C02 Online Practice Questions and Exam Preparation

Amazon CLF-C02 Online Questions & Answers

• Question 781:

  Which AWS Cloud Adoption Framework (AWS CAF) perspective focuses on managing identities and permissions at scale?

  A. Operations
  B. Platform
  C. Governance
  D. Security
  D. Security

  ---

  Explanation

• Question 782:

  A company hosts a web application on AWS. The company has improved the availability of its application by provisioning multiple Amazon EC2 instances. The company wants to distribute its traffic across the EC2 instances while providing a single point of contact to the web clients.

  Which AWS service can distribute the traffic to multiple EC2 instances as targets?

  A. VPC endpoints
  B. Application Load Balancer
  C. NAT gateway
  D. Internet gateway
  B. Application Load Balancer

  ---

  Explanation

• Question 783:

  A cloud practitioner needs to obtain AWS compliance reports before migrating an environment to the AWS Cloud. How can these reports be generated?

  A. Contact the AWS Compliance team.
  B. Download the reports from AWS Artifact.
  C. Open a case with AWS Support.
  D. Generate the reports with Amazon Macie.
  B. Download the reports from AWS Artifact.

  ---

  Explanation

  AWS Artifact is a service that provides on-demand access to security and compliance reports from AWS and Independent Software Vendors (ISVs) who sell their products on AWS Marketplace. You can use AWS Artifact to download auditor-issued reports, certifications, accreditations, and other third-party attestations of AWS compliance with various standards and regulations, such as PCI-DSS, HIPAA, FedRAMP, GDPR, and more. You can also use AWS Artifact to review, accept, and manage your agreements with AWS and apply them to current and future accounts within your organization

  References: 1: Cloud Compliance - Amazon Web Services (AWS), 2: Security Compliance Management - AWS Artifact - AWS, 3: AWS Compliance Contact Us - Amazon Web Services, 4: AWS SECURITY AND COMPLIANCE QUICK REFERENCE GUIDE

• Question 784:

  An ecommerce company has migrated its IT infrastructure from an on-premises data center to the AWS Cloud.

  Which AWS service is used to track, record, and audit configuration changes made to AWS resources?

  A. AWS Shield
  B. AWS Config
  C. AWS IAM
  D. Amazon Inspector
  B. AWS Config

  ---

  Explanation

  AWS Config is a service that enables you to assess, audit, and evaluate the configurations of your AWS resources. AWS Config continuously monitors and records your AWS resource configurations and allows you to automate the evaluation of recorded configurations against desired configurations. With AWS Config, you can review changes in configurations and relationships between AWS resources, dive into detailed resource configuration histories, and determine your overall compliance against the configurations specified in your internal guidelines3.

• Question 785:

  A company discovered unauthorized access to resources in its on-premises data center. Upon investigation, the company found that the requests originated from a resource hosted on AWS. Which AWS team should the company contact to report this issue?

  A. AWS Customer Service team
  B. AWS Sales team
  C. AWS Abuse team
  D. AWS Technical Support team
  C. AWS Abuse team

  ---

  Explanation

  If a company discovers unauthorized access or abuse originating from a resource hosted on AWS, they should contact the AWS Abuse team. The Abuse team handles reports of inappropriate behavior, security incidents, and other potential violations of AWS Acceptable Use Policy (AUP). They will investigate the issue and take appropriate actions to address the situation.

• Question 786:

  A company has deployed an application in the AWS Cloud. The company wants to ensure that the application is highly resilient.

  Which component of AWS infrastructure can the company use to meet this requirement?

  A. Content delivery network (CDN)
  B. Edge locations
  C. Wavelength Zones
  D. Availability Zones
  D. Availability Zones

  ---

  Explanation

  Availability Zones are components of AWS infrastructure that can help the company ensure that the application is highly resilient. Availability Zones are multiple, isolated locations within each AWS Region. Each Availability Zone has independent power, cooling, and physical security, and is connected to the other Availability Zones in the same Region via low-latency, high-throughput, and highly redundant networking. Availability Zones allow you to operate production applications and databases that are more highly available, fault tolerant, and scalable than would be possible from a single data center.

• Question 787:

  A company wants guidance to optimize the cost and performance of its current AWS environment.

  Which AWS service or tool should the company use to identify areas for optimization?

  A. Amazon QuickSight
  B. AWS Trusted Advisor
  C. AWS Organizations
  D. AWS Budgets
  B. AWS Trusted Advisor

  ---

  Explanation

  AWS Trusted Advisor is the AWS service or tool that the company should use to identify areas for optimization. According to the AWS Trusted Advisor User Guide, "AWS Trusted Advisor is an online tool that provides you real time guidance to help you provision your resources following AWS best practices. AWS Trusted Advisor checks help optimize your AWS infrastructure, increase security and performance, reduce your overall costs, and monitor service limits." Amazon QuickSight, AWS Organizations, and AWS Budgets are not designed to provide optimization recommendations for the current AWS environment.

• Question 788:

  Which component must be attached to a VPC to enable inbound internet access?

  A. NAT gateway
  B. VPC endpoint
  C. VPN connection
  D. Internet gateway
  D. Internet gateway

  ---

  Explanation

• Question 789:

  A company needs to perform queries and interactively search and analyze log data. Which AWS service or feature will meet this requirement?

  A. Amazon EventBridge (Amazon CloudWatch Events)
  B. Amazon CloudWatch anomaly detection
  C. Amazon CloudWatch Logs Insights
  D. Amazon CloudWatch Logs streams
  C. Amazon CloudWatch Logs Insights

  ---

  Explanation

• Question 790:

  A company needs a content delivery network that provides secure delivery of data, videos, applications, and APIs to users globally with low latency and high transfer speeds.

  Which AWS service meets these requirements?

  A. Amazon CloudFront
  B. Elastic Load Balancing
  C. Amazon S3
  D. Amazon Elastic Transcoder
  A. Amazon CloudFront

  ---

  Explanation

  The correct answer is A because Amazon CloudFront is an AWS service that provides secure delivery of data, videos, applications, and APIs to users globally with low latency and high transfer speeds. Amazon CloudFront is a fast content delivery network (CDN) that integrates with other AWS services, such as Amazon S3, Amazon EC2, AWS Lambda, and AWS Shield. Amazon CloudFront delivers content through a worldwide network of edge locations that are located close to the end users. The other options are incorrect because they are not AWS services that provide secure delivery of data, videos, applications, and APIs to users globally with low latency and high transfer speeds. Elastic Load Balancing is an AWS service that distributes incoming traffic across multiple targets, such as Amazon EC2 instances, containers, and IP addresses. Amazon S3 is an AWS service that provides object storage for data of any size and type. Amazon Elastic Transcoder is an AWS service that converts media files from their original source format into different formats that will play on various devices.

  Amazon CloudFront FAQs