Amazon Amazon Certifications CLF-C02 Questions & Answers

• Question 921:

  Which of the following are AWS best practice recommendations for the use of AWS Identity and Access Management (IAM)? (Select TWO.)

  A. Use the AWS account root user for daily access.

  B. Use access keys and secret access keys on Amazon EC2.

  C. Rotate credentials on a regular basis.

  D. Create a shared set of access keys for system administrators.

  E. Configure multi-factor authentication (MFA).

  Correct Answer: CE

  Explanation: If you do have an access key for your AWS account root user, delete it. If you must keep it, rotate (change) the access key regularly. To delete or rotate your root user access keys, go to the My Security Credentials page in the AWS Management Console and sign in with your account's email address and password. You can manage your access keys in the Access keys section. For more information about rotating access keys, see Rotating access keys.

• Question 922:

  Which of the following are AWS compute services? (Select TWO.)

  A. Amazon Lightsail

  B. AWS Systems Manager

  C. AWS CloudFormation

  D. AWS Batch

  E. Amazon Inspector

  Correct Answer: AD

  Explanation: Amazon Lightsail is designed to be the easiest way to launch and manage a virtual private server with AWS. Lightsail plans include everything you need to jumpstart your project ?a virtual machine, SSD-based storage, data transfer, DNS management, and a static IP address ?for a low, predictable price. AWS Batch enables developers, scientists, and engineers to easily and efficiently run hundreds of thousands of batch computing jobs on AWS. AWS Batch dynamically provisions the optimal quantity and type of compute resources (e.g., CPU or memory- optimized instances) based on the volume and specific resource requirements of the batch jobs submitted. With AWS Batch, there is no need to install and manage batch computing software or server clusters that you use to run your jobs, allowing you to focus on analyzing results and solving problems. AWS Batch plans, schedules, and runs your batch computing workloads across the full range of AWS compute services and features, such as Amazon EC2 and Spot Instances.

• Question 923:

  A company is using Amazon RDS.

  Which task is the company's responsibility, according to the AWS shared responsibility model?

  A. Apply encryption options for the database.

  B. Manage the underlying server hardware on which Amazon RDS runs.

  C. Apply patches to the underlying operating system.

  D. Apply minor patches to the database.

  Correct Answer: A

• Question 924:

  Which AWS service can a company use to analyze and debug performance issues of an AWS Lambda function?

  A. Amazon Inspector

  B. Amazon Detective

  C. AWS CodeStar

  D. AWS X-Ray

  Correct Answer: D

  https://docs.aws.amazon.com/lambda/latest/operatorguide/general-approach.html

• Question 925:

  A company's system administrator discovers that someone logged in to the company's AWS account during the weekend and terminated an Amazon EC2 instance.

  Which AWS service should the system administrator use to identify who made this change?

  A. Amazon Inspector

  B. Amazon Pinpoint

  C. AWS CloudTrail

  D. AWS Trusted Advisor

  Correct Answer: C

• Question 926:

  A company runs a web application on Amazon EC2 instances. The application must run constantly and is expected to run indefinitely without interruption.

  Which EC2 instance purchasing options will meet these requirements MOST cost- effectively? (Select TWO.)

  A. On-Demand Instances

  B. Spot Instances.

  C. Reserved Instances

  D. Savings Plans

  E. Dedicated Hosts

  Correct Answer: CD

  Explanation: Amazon EC2 provides the following purchasing options to enable you to optimize your costs based on your needs:

  *On-Demand Instances ?Pay, by the second, for the instances that you launch. *Savings Plans ?Reduce your Amazon EC2 costs by making a commitment to a consistent amount of usage, in USD per hour, for a term of 1 or 3 years.

  *Reserved Instances ?Reduce your Amazon EC2 costs by making a commitment to a consistent instance configuration, including instance type and Region, for a term of 1 or 3 years.

  *Spot Instances ?Request unused EC2 instances, which can reduce your Amazon EC2 costs significantly.

  *Dedicated Hosts ?Pay for a physical host that is fully dedicated to running your instances, and bring your existing per-socket, per-core, or per-VM software licenses to reduce costs. *Dedicated Instances ?Pay, by the hour, for instances that

  run on single-tenant hardware. *Capacity Reservations ?Reserve capacity for your EC2 instances in a specific Availability Zone for any duration. If you require a capacity reservation, purchase Reserved Instances or Capacity Reservations for

  a specific Availability Zone. Spot Instances are a cost-effective choice if you can be flexible about when your applications run and if they can be interrupted. Dedicated Hosts or Dedicated Instances can help you address compliance

  requirements and reduce costs by using your existing server-bound software licenses.

• Question 927:

  A company discovered unauthorized access to resources in its on-premises data center. Upon investigation, the company found that the requests originated from a resource hosted on AWS. Which AWS team should the company contact to report this issue?

  A. AWS Customer Service team

  B. AWS Sales team

  C. AWS Abuse team

  D. AWS Technical Support team

  Correct Answer: D

• Question 928:

  A system administrator notices that several Amazon EC2 instances nave been terminated. The system administrator needs to identity the user or AWS API call that terminated these instances. Which AWS service should the system administrator use to meet this requirement?

  A. AWS Trusted Advisor

  B. AWS CloudTrail

  C. Amazon Inspector

  D. Amazon Detective

  Correct Answer: B

• Question 929:

  A company is running a workload on AWS. The company wants to protect the workload from DDoS attacks.

  When AWS service will meet these requirements?

  A. AWS Identity and Access Management (IAM)

  B. AWS Shield

  C. Amazon VPC

  D. AWS Artifact

  Correct Answer: B

• Question 930:

  A company needs to audit its AWS resources. The company must document any changes that have been made to the resources. Which AWS service will meet these requirements?

  A. AWS Artifact

  B. AWS Config

  C. Amazon Inspector

  D. Amazon CloudWatch

  Correct Answer: B