Amazon CLF-C02 Online Practice Questions and Exam Preparation

Amazon CLF-C02 Online Questions & Answers

• Question 811:

  A company wants to allow users to authenticate and authorize multiple AWS accounts by using a single set of credentials. Which AWS service or resource will meet this requirement?

  A. AWS Organizations
  B. IAM user
  C. AWS IAM Identity Center (AWS Single Sign-On)
  D. AWS Control Tower
  C. AWS IAM Identity Center (AWS Single Sign-On)

  ---

  Explanation

  AWS IAM Identity Center (AWS Single Sign-On) is a cloud-based service that makes it easy to centrally manage single sign-on (SSO) access to multiple AWS accounts and business applications. You can use AWS SSO to enable your users to sign in to the AWS Management Console or the AWS Command Line Interface (AWS CLI) with their existing corporate credentials. You can also manage SSO access and user permissions across all your AWS accounts in AWS Organizations.

  References: AWS Single Sign-On - AWS Documentation, AWS Organizations - AWS Documentation

• Question 812:

  Which of the following are AWS best practice recommendations for the use of AWS Identity and Access Management (IAM)? (Select TWO.)

  A. Use the AWS account root user for daily access.
  B. Use access keys and secret access keys on Amazon EC2.
  C. Rotate credentials on a regular basis.
  D. Create a shared set of access keys for system administrators.
  E. Configure multi-factor authentication (MFA).
  C. Rotate credentials on a regular basis.
  E. Configure multi-factor authentication (MFA).

  ---

  Explanation

  If you do have an access key for your AWS account root user, delete it. If you must keep it, rotate (change) the access key regularly. To delete or rotate your root user access keys, go to the My Security Credentials page in the AWS Management Console and sign in with your account's email address and password. You can manage your access keys in the Access keys section. For more information about rotating access keys, see Rotating access keys.

• Question 813:

  An external auditor has requested that a company provide a list of all its IAM users, including the status of users' credentials and access keys.

  What is the SIMPLEST way to provide this information?

  A. Create an IAM user account for the auditor, granting the auditor administrator permissions.
  B. Take a screenshot of each user's page in the AWS Management Console, then provide the screenshots to the auditor.
  C. Download the IAM credential report, then provide the report to the auditor.
  D. Download the AWS Trusted Advisor report, then provide the report to the auditor.
  C. Download the IAM credential report, then provide the report to the auditor.

  ---

  Explanation

• Question 814:

  Which task requires the use of AWS account root user credentials?

  A. The deletion of IAM users
  B. The change to a different AWS Support plan
  C. The creation of an organization in AWS Organizations
  D. The deletion of Amazon EC2 instances
  B. The change to a different AWS Support plan

  ---

  Explanation

  The creation of an organization in AWS Organizations requires the use of AWS account root user credentials. The AWS account root user is the email address that was used to create the AWS account. The root user has complete access to all AWS services and resources in the account, and can perform sensitive tasks such as changing the account settings, closing the account, or creating an organization. The root user credentials should be used sparingly and securely, and only for tasks that cannot be performed by IAM users or roles4

• Question 815:

  Which of the following are economic benefits of using the AWS Cloud? (Choose two.)

  A. Consumption-based pricing
  B. Perpetual licenses
  C. Economies of scale
  D. AWS Enterprise Support at no additional cost
  E. Bring-your-own-hardware model
  A. Consumption-based pricing
  C. Economies of scale

  ---

  Explanation

• Question 816:

  Which tasks are responsibilities of AWS, according to the AWS shared responsibility model? (Select TWO.)

  A. Encrypt client-side data and authenticate data integrity.
  B. Manage customer data.
  C. Perform identity and access management.
  D. Provide physical security for Availability Zones.
  E. Patch the operating system of Amazon S3
  D. Provide physical security for Availability Zones.
  E. Patch the operating system of Amazon S3

  ---

  Explanation

• Question 817:

  A company wants to store data in Amazon S3. The company rarely access the data, and the data can be regenerated if necessary. The company wants to store the data in the most cost-effective storage class. Which S3 storage class will meet this requirement?

  A. S3 Standard
  B. S3 Intelligent-Tiering
  C. S3 Standard-Infrequent Access (S3 Standard-IA)
  D. S3 One Zone-Infrequent Access (S3 One Zone-IA)
  D. S3 One Zone-Infrequent Access (S3 One Zone-IA)

  ---

  Explanation

• Question 818:

  A company wants to store data with high availability, encrypt the data at rest, and have direct access to the data over the internet.

  Which AWS service will meet these requirements MOST cost-effectively?

  A. Amazon Elastic Block Store (AmazonEBS)
  B. Amazon S3
  C. Amazon Elastic File System (Amazon EFS)
  D. AWS Storage Gateway
  C. Amazon Elastic File System (Amazon EFS)

  ---

  Explanation

  Amazon Elastic File System (Amazon EFS) provides a simple, scalable, fully managed elastic NFS file system for use with AWS Cloud services and on-premises resources. It is built to scale on demand to petabytes without disrupting applications, growing and shrinking automatically as you add and remove files, eliminating the need to provision and manage capacity to accommodate growth. Amazon EFS offers two storage classes: the Standard storage class, and the Infrequent Access storage class (EFS IA). EFS IA provides price/performance that is costoptimized for files not accessed every day. Amazon EFS encrypts data at rest and in transit, and supports direct access over the internet.

• Question 819:

  Which of the following can be components of a VPC in the AWS Cloud? (Choose two.)

  A. Amazon API Gateway
  B. Amazon S3 buckets and objects
  C. AWS Storage Gateway
  D. Internet gateway
  E. Subnet
  D. Internet gateway
  E. Subnet

  ---

  Explanation

  A VPC (Virtual Private Cloud) in AWS is a logically isolated network that you define in the AWS Cloud. Within a VPC, you can create subnets, route tables, network gateways, and more.

  D. Internet Gateway: An internet gateway is a component that allows communication between resources in a VPC and the internet.

  E. Subnet: A subnet is a range of IP addresses in your VPC. Subnets can be public or private and are essential for organizing resources within a VPC. Why other options are not suitable:

  A. Amazon API Gateway: Used for creating and managing APIs, not a direct component of a VPC.

  B. Amazon S3 buckets and objects: Amazon S3 is a storage service; its resources are globally accessible and not confined to a VPC.

  C. AWS Storage Gateway: A hybrid cloud storage service, not a core component of a VPC.

• Question 820:

  A company wants to use a serverless compute service for an application. Which AWS service will meet this requirement?

  A. AWS Lambda
  B. AWS CloudFormation
  C. AWS Elastic Beanstalk
  D. Elastic Load Balancing
  A. AWS Lambda

  ---

  Explanation