Amazon Amazon Certifications CLF-C02 Questions & Answers

• Question 891:

  Which AWS services can use AWS WAF to protect against common web exploitations? (Select TWO.)

  A. Amazon Route 53

  B. Amazon CloudFront

  C. AWS Transfer Family

  D. AWS Site-to-Site VPN

  E. Amazon API Gateway

  Correct Answer: BE

  Explanation: AWS WAF can be deployed on Amazon CloudFront, the Application Load Balancer (ALB), Amazon API Gateway, and AWS AppSync. As part of Amazon CloudFront it can be part of your Content Distribution Network (CDN) protecting your resources and content at the Edge locations.

• Question 892:

  What are characteristics of AWS IAM users and groups? (Select TWO.)

  A. Groups can be nested and can contain other groups.

  B. A user can be a member of multiple groups

  C. Groups can contain users only and cannot be nested

  D. A user can only be a member of a single group at one time.

  E. All new users are automatically added to a default group

  Correct Answer: BC

• Question 893:

  Which AWS service provides alerts when an AWS event may impact a company's AWS resources?

  A. AWS Personal Health Dashboard

  B. AWS Service Health Dashboard

  C. AWS Trusted Advisor

  D. AWS Infrastructure Event Management

  Correct Answer: A

• Question 894:

  A company manages an on-premises MySQL database on a Windows server. The company wants to migrate the database to AWS and needs a solution that will reduce the administrative overhead of the database.

  Which AWS service will meet this requirement?

  A. Amazon Redshift

  B. Amazon ElastiCache

  C. Amazon RDS

  D. Amazon Elastic File System (Amazon EFS)

  Correct Answer: C

• Question 895:

  Which task can a user complete by using AWS Identity and Access Management (IAM)?

  A. Validate JSON syntax from an application configuration file.

  B. Analyze logs from an Amazon API Gateway call.

  C. Filter traffic to or from an Amazon EC2 instance.

  D. Grant permissions to applications that run on Amazon EC2 instances.

  Correct Answer: A

  Explanation: AWS Identity and Access Management (IAM) is a web service for securely controlling access to AWS resources. It enables you to create and control services for user authentication or limit access to a certain set of people who use your AWS resources.

• Question 896:

  Which AWS service allows for file sharing between multiple Amazon EC2 instances?

  A. AWS Direct Connect

  B. AWS Snowball Edge

  C. AWS Backup

  D. Amazon Elastic File System (Amazon EFS)

  Correct Answer: D

  Explanation: Amazon EFS provides shared file storage for use with compute instances in the AWS Cloud and on-premises servers. Applications that require shared file access can use Amazon EFS for reliable file storage delivering high aggregate throughput to thousands of clients simultaneously.

• Question 897:

  A company needs to transfer 60 TB of data to the AWS Cloud in a secure manner.

  Which of the following should the company use to meet these requirements?

  A. AWS Snowball Edge device

  B. Amazon Elastic Block Store (Amazon EBS)

  C. Amazon Elastic File System (Amazon EFS)

  D. Amazon S3

  Correct Answer: D

• Question 898:

  A company needs a data warehouse for analytical workloads. The data warehouse must support standard SQL queries.

  Which AWS service meets these requirements?

  A. Amazon EMR

  B. Amazon Athena

  C. Amazon Redshift

  D. Amazon HDS

  Correct Answer: C

• Question 899:

  Which controls are shared under the AWS shared responsibility model? (Select TWO.)

  A. Awareness and training

  B. Patching of Amazon RDS

  C. Configuration management

  D. Physical and environmental controls

  E. Service and communications protection or security

  Correct Answer: AC

  Explanation: In the AWS shared security model, a shared control, AWS provides the requirements for the infrastructure and the customer must provide their own control implementation within their use of AWS services.

  Examples of shared controls include:

  *Patch Management ?AWS is responsible for patching and fixing flaws within the infrastructure, but customers are responsible for patching their guest OS and applications. *Configuration Management ?AWS maintains the configuration of its

  infrastructure devices, but a customer is responsible for configuring their own guest operating systems, databases, and applications.

  *Awareness and Training ?AWS trains AWS employees, but a customer must train their own employees.

  Customer Specific ?Controls which are solely the responsibility of the customer based on the application they are deploying within AWS services.

  Examples of customer specific controls include:

  *Service and Communications Protection or Zone Security which may require a customer to route or zone data within specific security environments.

• Question 900:

  A company with AWS Enterprise Support needs help understanding its monthly AWS bill and wants to implement billing best practices. Which AWS tool or resource is available to accomplish these goals?

  A. Resource tagging

  B. AWS Concierge Support team

  C. AWS Abuse team

  D. AWS Support

  Correct Answer: B