Amazon Amazon Certifications CLF-C02 Questions & Answers

• Question 881:

  A company needs to perform queries and interactively search and analyze log data.

  Which AWS service or feature will meet this requirement?

  A. Amazon EventBridge (Amazon CloudWatch Events)

  B. Amazon CloudWatch anomaly detection

  C. Amazon CloudWatch Logs Insights

  D. Amazon CloudWatch Logs streams

  Correct Answer: C

• Question 882:

  Which AWS service or feature enables users to block the incoming or outgoing traffic associated with specific IP addresses flowing through a VPC?

  A. Network ACLs

  B. Security groups

  C. AWS Identity and Access Management (IAM) D. AWS WAF

  Correct Answer: A

  Explanation: To allow or block specific IP addresses for your EC2 instances, use a network Access Control List (ACL) or security group rules in your VPC. Network ACLs and security group rules act as firewalls allowing or blocking IP addresses from accessing your resources.

• Question 883:

  Which of the following are advantages of the AWS Cloud? (Select TWO.)

  A. AWS manages all the security within the cloud

  B. Expenses never change from month to month

  C. Users can stop spending money on the maintenance of data centers

  D. Users do not need to deploy applications globally

  E. Users can stop guessing about resource capacity

  Correct Answer: CE

• Question 884:

  A company's on-premises application deployment cycle was 3-4 weeks. After migrating to the AWS Cloud, the company can deploy the application in 2-3 days. Which benefit has this company experienced by moving to the AWS Cloud?

  A. Elasticity

  B. Flexibility

  C. Agility

  D. Resilience

  Correct Answer: C

  Explanation: https://docs.aws.amazon.com/whitepapers/latest/aws-overview/six- advantages-of-cloud-computing.html

• Question 885:

  Which task can a company complete by using AWS Organizations?

  A. Track application deployment statuses globally.

  B. Remove unused and underutilized AWS resources across all accounts.

  C. Activate DDoS protection across all accounts.

  D. Share pre-purchased Amazon EC2 resources across accounts.

  Correct Answer: B

  Explanation: Using AWS Organizations, you can programmatically create new AWS accounts and allocate resources, group accounts to organize your workflows, apply policies to accounts or groups for governance, and simplify billing by using a single payment method for all of your accounts.

• Question 886:

  Which of the following are aspects of the AWS shared responsibility model? (Select TWO.)

  A. Configuration management of infrastructure devices is the customer's responsibility.

  B. For Amazon S3, AWS operates the infrastructure layer, the operating systems, and the platforms.

  C. AWS is responsible for protecting the physical cloud infrastructure.

  D. AWS is responsible for training the customer's employees on AWS products and services.

  E. For Amazon EC2, AWS is responsible for maintaining the guest operating system.

  Correct Answer: AC

  Explanation: AWS responsibility "Security of the Cloud" - AWS is responsible for protecting the infrastructure that runs all of the services offered in the AWS Cloud. This infrastructure is composed of the hardware, software, networking, and facilities that run AWS Cloud services. Customer responsibility "Security in the Cloud" ?Customer responsibility will be determined by the AWS Cloud services that a customer selects. This determines the amount of configuration work the customer must perform as part of their security responsibilities. For example, a service such as Amazon Elastic Compute Cloud (Amazon EC2) is categorized as Infrastructure as a Service (IaaS) and, as such, requires the customer to perform all of the necessary security configuration and management tasks. Customers that deploy an Amazon EC2 instance are responsible for management of the guest operating system (including updates and security patches), any application software or utilities installed by the customer on the instances, and the configuration of the AWS-provided firewall (called a security group) on each instance. For abstracted services, such as Amazon S3 and Amazon DynamoDB, AWS operates the infrastructure layer, the operating system, and platforms, and customers access the endpoints to store and retrieve data. Customers are responsible for managing their data (including encryption options), classifying their assets, and using IAM tools to apply the appropriate permissions.

  

  Shared_Responsibility_Model_V2

• Question 887:

  A company is using an Amazon RDS database to run reports that are input/output (I/O) intensive. Which AWS service can be used to improve the database performance?

  A. Amazon DynamoDB Accelerator (DAX)

  B. Amazon EMR

  C. Amazon ElastiCache

  D. Amazon Redshift

  Correct Answer: C

• Question 888:

  A company is reviewing the current costs of running its own infrastructure on premises. The company wants to compare these on-premises costs to the costs of running infrastructure in the AWS Cloud. How should the company make this comparison?

  A. Review the AWS shared responsibility model.

  B. Audit existing software and hardware licensing costs.

  C. Analyze the AWS Well-Architected Framework.

  D. Use Migration Evaluator.

  Correct Answer: D

• Question 889:

  How does the AWS global infrastructure offer high availability and fault tolerance lo its users?

  A. The AWS infrastructure is made up of multiple AWS Regions within various Availability Zones located in areas that have low flood risk and are interconnected with low-latency networks and redundant power supplies

  B. The AWS infrastructure consists of subnets containing various Availability Zones with multiple data centers located in the same geographic location

  C. AWS allows users to choose AWS Regions and data centers so that users can select the closest data centers in different Regions

  D. The AWS infrastructure consists of isolated AWS Regions with independent Availability Zones that ate connected with low-latency networking and redundant power supplies

  Correct Answer: D

• Question 890:

  A company needs to automatically protect its Amazon EC2 instances from distributed denial of service (DDoS) attacks. Which AWS service or tool will provide this protection?

  A. Network access control list (ACL)

  B. AWS Shield

  C. Security group

  D. Amazon GuardDuty

  Correct Answer: B