Amazon CLF-C02 Online Practice Questions and Exam Preparation

Amazon CLF-C02 Online Questions & Answers

• Question 881:

  A global company wants to use a managed security service for protection from SQL injection attacks. The service also must provide detailed logging information about access to the company's ecommerce applications.

  Which AWS service will meet these requirements?

  A. AWS Network Firewall
  B. Amazon RDS for SQL Server
  C. Amazon GuardDuty
  D. AWS WAF
  D. AWS WAF

  ---

  Explanation

• Question 882:

  A company wants an AWS service to collect and process 10 TB of data locally and transfer the data to AWS. The company has intermittent connectivity.

  Which AWS service will meet these requirements?

  A. AWS Database Migration Service (AWS DMS)
  B. AWS DataSync
  C. AWS Backup
  D. AWS Snowball Edge
  D. AWS Snowball Edge

  ---

  Explanation

• Question 883:

  A company wants to modernize and convert a monolithic application into microservices. The company wants to move the application to AWS. Which migration strategy should the company use?

  A. Rehost
  B. Replatform
  C. Repurchase
  D. Refactor
  D. Refactor

  ---

  Explanation

• Question 884:

  A company has multiple AWS accounts. The company needs to receive a consolidated bill from AWS and must centrally manage security and compliance.

  Which AWS service or feature should the company use to meet these requirements?

  A. AWS Cost and Usage Report
  B. AWS Organizations
  C. AWS Config
  D. AWS Security Hub
  B. AWS Organizations

  ---

  Explanation

  AWS Organizations enables consolidated billing across multiple AWS accounts and allows for centralized management of security and compliance policies. It provides account grouping and centralized payment management, making it the optimal choice for a company requiring consolidated billing and centralized governance. AWS Cost and Usage Report only provides billing information, and AWS Config and Security Hub offer monitoring and security insights but do not handle billing consolidation.

• Question 885:

  Which of the following services can be used to block network traffic to an instance? (Choose two.)

  A. Security groups
  B. Amazon Virtual Private Cloud (Amazon VPC) flow logs
  C. Network ACLs
  D. Amazon CloudWatch
  E. AWS CloudTrail
  A. Security groups
  C. Network ACLs

  ---

  Explanation

  Security groups are stateful firewalls that control inbound and outbound traffic at the instance level. You can configure security groups to allow or deny specific types of network traffic to and from your instances.

  Network ACLs (Access Control Lists) are stateless firewalls that control traffic at the subnet level. Network ACLs define rules to allow or deny traffic based on source and destination IP addresses, ports, and protocols.

• Question 886:

  Which AWS service can a company use to find security and compliance reports, including International Organization for Standardization (ISO) reports?

  A. AWS Artifact
  B. Amazon CloudWatch
  C. AWS Config
  D. AWS Audit Manager
  A. AWS Artifact

  ---

  Explanation

  AWS Artifact is a self-service portal that provides on-demand access to AWS security and compliance reports and select online agreements. You can use AWS Artifact to download AWS service audit reports, such as ISO, PCI, and SOC, and to accept and manage agreements with AWS, such as the Business Associate Addendum (BAA).

• Question 887:

  A company plans to run a compute-intensive workload that uses graphics processing units (GPUs).

  Which Amazon EC2 instance type should the company use?

  A. Accelerated computing
  B. Compute optimized
  C. Storage optimized
  D. General purpose
  A. Accelerated computing

  ---

  Explanation

• Question 888:

  Which AWS service or feature offers security for a VPC by acting as a firewall to control traffic in and out of subnets?

  A. AWS Security Hub
  B. Security groups
  C. Network ACL
  D. AWSWAF
  C. Network ACL

  ---

  Explanation

  A network access control list (network ACL) is a feature that acts as a firewall for controlling traffic in and out of one or more subnets in a virtual private cloud (VPC). Network ACLs can be configured with rules that allow or deny traffic based on the source and destination IP addresses, ports, and protocols1. AWS Security Hub is a service that provides a comprehensive view of the security posture of AWS accounts and resources2. Security groups are features that act as firewalls for controlling traffic at the instance level3. AWS WAF is a web application firewall that helps protect web applications from common web exploits4.

• Question 889:

  A company wants to migrate its workloads to AWS, but it lacks expertise in AWS Cloud computing.

  Which AWS service or feature will help the company with its migration?

  A. AWS Trusted Advisor
  B. AWS Consulting Partners
  C. AWS Artifacts
  D. AWS Managed Services
  D. AWS Managed Services

  ---

  Explanation

  AWS Managed Services is a service that provides operational management for AWS infrastructure and applications. It helps users migrate their workloads to AWS and provides ongoing support, security, compliance, and automation. AWS Trusted Advisor is a service that provides best practices and recommendations for cost optimization, performance, security, and fault tolerance. AWS Consulting Partners are professional services firms that help customers design, architect, build, migrate, and manage their workloads and applications on AWS. AWS Artifacts is a service that provides on-demand access to AWS compliance reports and select online agreements.

• Question 890:

  A company runs an application on AWS that performs batch jobs. The application is fault-tolerant and can handle interruptions. The company wants to optimize the cost to run the application.

  Which AWS offering will meet these requirements?

  A. Amazon Macie
  B. Amazon Neptune
  C. Amazon EC2 Spot Instances
  D. Amazon EC2 On-Demand Instances
  C. Amazon EC2 Spot Instances

  ---

  Explanation

  Amazon EC2 Spot Instances offer spare AWS compute capacity at a significantly reduced cost compared to On-Demand Instances. Spot Instances are ideal for fault-tolerant and flexible workloads that can tolerate interruptions, such as batch

  jobs, data processing, or large-scale computations. These instances may be interrupted by AWS if there is a demand for capacity, but they provide the best cost optimization for workloads that can handle such interruptions.

  Why other options are not suitable:

  A. Amazon Macie: A data security and privacy service, not relevant to running batch jobs.

  B. Amazon Neptune: A graph database service, not relevant to compute optimization.

  D. Amazon EC2 On-Demand Instances: Provide flexible compute capacity but at a higher cost than Spot Instances, which are more suitable for cost optimization.

  References:

  Amazon EC2 Spot Instances Documentation