Amazon Amazon Certifications CLF-C02 Questions & Answers

• Question 791:

  A company needs to use machine learning and pattern matching to identify and protect sensitive data that the company stores in the AWS Cloud.

  Which AWS service will meet these requirements?

  A. Amazon Inspector

  B. Amazon Macie

  C. Amazon GuardDuty

  D. AWS Audit Manager

  Correct Answer: B

  Explanation: Amazon Macie is a fully managed data security and data privacy service that uses machine learning and pattern matching to discover and protect your sensitive data in AWS.

• Question 792:

  Which databases are available on Amazon RDS? (Select TWO.)

  A. Sybase

  B. Microsoft SQL Server

  C. IBM Db2

  D. MongoDB

  E. PostgreSQL

  Correct Answer: BE

• Question 793:

  A company needs to deploy an Amazon EC2 instance and attach a storage mount for the operating system and application files. Which AWS service will meet these requirements?

  A. AWS Backup

  B. Amazon Elastic File System (Amazon EFS)

  C. Amazon S3

  D. Amazon Elastic Block Store (Amazon EBS)

  Correct Answer: D

• Question 794:

  Which AWS service should a company use to create a NoSQL database?

  A. Amazon Aurora

  B. Amazon DynamoDB

  C. Amazon Redshift

  D. Amazon Neptune

  Correct Answer: B

• Question 795:

  A company needs to run an application on Amazon EC2 instances. The instances cannot be interrupted at any time. The company needs an instance purch asing option that requires no long-term commitment or upfront payment. Which instance purchasing option will meet these requirements MOST cost-effectively?

  A. On-Demand Instances

  B. Spot Instances

  C. Dedicated Hosts

  D. Reserved Instances

  Correct Answer: A

• Question 796:

  Which action will provide documentation to help a company evaluate whether its use of the AWS Cloud is compliant with local regulatory standards?

  A. Running Amazon GuardDuty

  B. Using AWS Artifact

  C. Creating an AWS Support ticket

  D. AWS Cloud Trail logs

  Correct Answer: B

• Question 797:

  Which AWS service provides an isolated virtual network to connect AWS services and resources?

  A. Amazon EC2

  B. Amazon DynamoDB

  C. Amazon Lightsail

  D. Amazon VPC

  Correct Answer: D

  Explanation: Amazon Virtual Private Cloud (Amazon VPC) enables you to launch AWS resources into a virtual network that you've defined. This virtual network closely resembles a traditional network that you'd operate in your own data center, with the benefits of using the scalable infrastructure of AWS.

• Question 798:

  A company is choosing an AWS Support plan. The company needs the ability to contact cloud support engineers by phone, email, and chat 24 hours a day, 7 days a week. What is the LEAST expensive AWS Support plan that meets these requirements?

  A. AWS Basic Support

  B. AWS Developer Support

  C. AWS Business Support

  D. AWS Enterprise Support

  Correct Answer: C

  Explanation: https://aws.amazon.com/premiumsupport/plans/

• Question 799:

  What is an AWS Region?

  A. A broad set of global, cloud-based products that include compute, storage, and databases

  B. A physical location around the world where data centers are clustered

  C. One or more discrete data centers with redundant power, networking, and connectivity

  D. A service that developers use to build applications that deliver latencies of single-digit milliseconds to users

  Correct Answer: B

  Explanation: AWS has the concept of a Region, which is a physical location around the world where we cluster data centers. We call each group of logical data centers an Availability Zone. Each AWS Region consists of multiple, isolated, and physically separate AZs within a geographic area.

• Question 800:

  A company notices suspicious network activity against an application that is running on a fleet of Amazon EC2 instances The suspicious activity is coming from a single IP address. Which AWS service should the company use to block access from this IP address?

  A. AWS Shield

  B. AWS Config

  C. Amazon GuardDuty

  D. AWS WAF

  Correct Answer: D

  AWS WAF is a web application firewall that lets you monitor the HTTP and HTTPS requests that are forwarded to your protected web application resources. You can protect the following resource types: Amazon CloudFront distribution Amazon API Gateway REST API Application Load Balancer AWS AppSync GraphQL API Amazon Cognito user pool AWS WAF also lets you control access to your content. Based on conditions that you specify, such as the IP addresses that requests originate from or the values of query strings, your protected resource responds to requests either with the requested content, with an HTTP 403 status code (Forbidden), or with a custom response.

  https://docs.aws.amazon.com/waf/latest/developerguide/what-is-aws-waf.html