Amazon CLF-C02 Online Practice Questions and Exam Preparation

Amazon CLF-C02 Online Questions & Answers

• Question 791:

  Which AWS service provides a cloud-based customer contact center?

  A. AWS CloudFormation
  B. Amazon CloudWatch
  C. Amazon Connect
  D. AWS Direct Connect
  C. Amazon Connect

  ---

  Explanation

• Question 792:

  A company that has AWS Enterprise Support is launching a new version of a popular product in 2 months. The company expects a large increase in traffic to its website. The website is hosted on Amazon EC2 instances. Which action should the company take to assess its readiness to scale for this launch?

  A. Replace the EC2 instances with AWS Lambda functions.
  B. Use AWS Infrastructure Event Management (IEM) support.
  C. Submit a request on AWS Marketplace to monitor the event.
  D. Review the coverage reports in the AWS Cost Management console.
  B. Use AWS Infrastructure Event Management (IEM) support.

  ---

  Explanation

• Question 793:

  Which AWS service gives users on-demand, sell-service access to AWS compliance control reports?

  A. AWS Config
  B. Amazon GuardDuty
  C. AWS Trusted Advisor
  D. AWS Artifact
  D. AWS Artifact

  ---

  Explanation

  AWS Artifact provides on-demand access to AWS compliance reports and security documentation. It is a self-service portal where customers can download documents like SOC reports, ISO certifications, and other compliance-related materials necessary for meeting regulatory requirements. AWS Config and Trusted Advisor offer security assessments and compliance monitoring, but they do not provide direct access to compliance reports.

• Question 794:

  A company is building a web application using AWS.

  Which AWS service will help prevent network layer DDoS attacks against the web application?

  A. AWS WAF
  B. AWS Firewall Manager
  C. Amazon GuardDuty
  D. AWS Shield
  D. AWS Shield

  ---

  Explanation

  AWS Shield is a managed Distributed Denial of Service (DDoS) protection service that safeguards AWS applications against network and transport layer attacks. AWS Shield Standard is automatically included with all AWS services and offers protection against common DDoS attacks. For more advanced protection, AWS Shield Advanced provides additional DDoS mitigation measures. Although AWS WAF, Firewall Manager, and GuardDuty contribute to security, they do not specialize in DDoS mitigation at the network layer like AWS Shield does.

• Question 795:

  Which AWS security service protects applications from distributed denial of service attacks with always-on detection and automatic inline mitigations?

  A. Amazon Inspector
  B. AWS Web Application Firewall (AWS WAF)
  C. Elastic Load Balancing (ELB)
  D. AWS Shield
  D. AWS Shield

  ---

  Explanation

• Question 796:

  Amazon Elastic File System (Amazon EFS) and Amazon FSx offer which type of storage?

  A. File storage
  B. Object storage
  C. Block storage
  D. Instance store
  A. File storage

  ---

  Explanation

  Amazon Elastic File System (Amazon EFS) and Amazon FSx are AWS services that offer file storage. File storage is a type of storage that organizes data into files and folders that can be accessed and shared over a network. File storage is suitable for applications that require shared access to data, such as content management, media processing, and web serving. Amazon EFS provides a simple, scalable, and fully managed elastic file system that can be used with AWS Cloud services and on-premises resources. Amazon FSx provides fully managed third-party file systems, such as Windows File Server and Lustre, with native compatibility and high performance12

• Question 797:

  A company wants to manage its AWS Cloud resources through a web interface. Which AWS service will meet this requirement?

  A. AWS Management Console
  B. AWS CLI
  C. AWS SDK
  D. AWS Cloud
  A. AWS Management Console

  ---

  Explanation

• Question 798:

  A company needs to test a new application that was written in Python. The code will activate when new images are stored in an Amazon S3 bucket. The application will put a watermark on each image and then will store the images in a different S3 bucket.

  Which AWS service should the company use to conduct the test with the LEAST amount of operational overhead?

  A. Amazon EC2
  B. AWS CodeDeploy
  C. AWS Lambda
  D. Amazon Lightsail
  C. AWS Lambda

  ---

  Explanation

  AWS Lambda is a compute service that lets you run code without provisioning or managing servers. AWS Lambda executes your code only when needed and scales automatically, from a few requests per day to thousands per second. You pay only for the compute time you consume - there is no charge when your code is not running. With AWS Lambda, you can run code for virtually any type of application or backend service - all with zero administration. AWS Lambda runs your code on a high-availability compute infrastructure and performs all of the administration of the compute resources, including server and operating system maintenance, capacity provisioning and automatic scaling, code monitoring and logging

• Question 799:

  Under the AWS shared responsibility model, which of the following is a responsibility of the customer?

  A. Shred disk drives before they leave a data center.
  B. Prevent customers from gathering packets or collecting traffic at the hypervisor level.
  C. Patch the guest operating system with the latest security patches.
  D. Maintain security systems that provide physical monitoring of data centers.
  C. Patch the guest operating system with the latest security patches.

  ---

  Explanation

  Under the AWS Shared Responsibility Model, AWS is responsible for the security of the cloud, which includes the physical infrastructure, networking, and hypervisor layer. Customers, however, are responsible for security in the cloud, which includes managing the security of their data, patching and maintaining their guest operating system and applications, and managing identity and access.

  The responsibilities of shredding disk drives, preventing packet capture at the hypervisor level, and physical monitoring are handled by AWS as part of its responsibility for security of the cloud.

• Question 800:

  A company wants phone, email, and chat access to AWS support engineers. The company also wants the ability to get support for business-critical systems within 15 minutes.

  Which AWS Support plan meets these requirements?

  A. AWS Developer Support
  B. AWS Business Support
  C. AWS Enterprise Support
  D. AWS Basic Support
  C. AWS Enterprise Support

  ---

  Explanation