Amazon CLF-C02 Online Practice Questions and Exam Preparation

Amazon CLF-C02 Online Questions & Answers

• Question 921:

  Which AWS service or feature can a user configure to limit network access at the subnet level?

  A. AWS Shield
  B. AWS WAF
  C. Network ACL
  D. Security group
  C. Network ACL

  ---

  Explanation

• Question 922:

  Which AWS service or feature allows users to securely store encrypted credentials and retrieve these credentials when required?

  A. AWS Encryption SDK
  B. AWS Security Hub
  C. AWS Secrets Manager
  D. AWS Artifact
  C. AWS Secrets Manager

  ---

  Explanation

  AWS Secrets Manager is a service designed to securely store and manage access to sensitive information such as API keys, passwords, and database credentials. It allows automatic rotation, secure storage, and fine-grained access control for these credentials, ensuring they are securely managed. The other options do not provide encrypted storage for credentials specifically.

• Question 923:

  A company needs to quickly and securely move files over long distances between its client and an Amazon S3 bucket. Which S3 feature will meet this requirement?

  A. S3 Versioning
  B. S3 Transfer Acceleration
  C. S3ACLs
  D. S3 Intelligent-Tiering
  B. S3 Transfer Acceleration

  ---

  Explanation

• Question 924:

  A company is connecting multiple VPCs and on-premises networks. The company needs to use an AWS service as a cloud router to simplify peering relationships.

  Which AWS service can the company use to meet this requirement?

  A. AWS Direct Connect
  B. AWS Transit Gateway
  C. Amazon Connect
  D. Amazon Route 53
  B. AWS Transit Gateway

  ---

  Explanation

  AWS Transit Gateway acts as a cloud router for connecting multiple VPCs and on-premises networks, simplifying network management by creating a hub-and-spoke model for routing traffic. Direct Connect provides a private connection to AWS but does not function as a central router. Amazon Connect is unrelated, and Route 53 is for DNS services, not VPC connectivity.

• Question 925:

  A company is migrating to the AWS Cloud to meet storage needs. The company wants to optimize costs based on the amount of storage that the company uses.

  Which AWS offering or benefit will meet these requirements MOST cost-effectively?

  A. Pay-as-you-go pricing
  B. Savings Plans
  C. AWS Free Tier
  D. Volume-based discounts
  D. Volume-based discounts

  ---

  Explanation

  Volume-based discounts are an AWS offering or benefit that can help the company optimize costs based on the amount of storage that the company uses. Volume- based discounts are discounts that AWS provides for some storage services, such as Amazon S3 and Amazon EBS, when the company stores a large amount of data. The more data the company stores, the lower the price per GB. For example, Amazon S3 offers six storage classes, each with a different price per GB. The price per GB decreases as the amount of data stored in each storage class increases

• Question 926:

  A company wants to provide access to Windows file shares in AWS from its on-premises workloads. The company does not want to provision any additional infrastructure or applications in its data center.

  Which AWS service will meet these requirements?

  A. Amazon FSx File Gateway
  B. AWS DataSync
  C. Amazon S3
  D. AWS Snow Family
  A. Amazon FSx File Gateway

  ---

  Explanation

• Question 927:

  A company needs to control inbound and outbound traffic for an Amazon EC2 instance.

  Which AWS service or feature can the company associate with the EC2 instance to meet this requirement?

  A. Network ACL
  B. Security group
  C. AWS WAF
  D. VPC route tables
  B. Security group

  ---

  Explanation

  A security group is a virtual firewall that can be associated with an Amazon EC2 instance to control the inbound and outbound traffic for the instance. You can specify which protocols, ports, and source or destination IP ranges are allowed or denied by the security group. A network ACL is a stateless filter that can be associated with a subnet to control the traffic to and from the subnet, but it is not associated with an EC2 instance. AWS WAF is a web application firewall that helps protect your web applications or APIs against common web exploits that may affect availability, compromise security, or consume excessive resources. VPC route tables are used to determine where network traffic is directed within a VPC or to an internet gateway, virtual private gateway, NAT device, VPC peering connection, or VPC endpoint.

• Question 928:

  Which AWS service provides managed DDoS protection?

  A. AWS Firewall Manager
  B. AWS Shield
  C. Amazon GuardDuty
  D. Amazon Inspector
  B. AWS Shield

  ---

  Explanation

• Question 929:

  Which AWS services can host PostgreSQL databases? (Choose two.)

  A. Amazon S3
  B. Amazon Aurora
  C. Amazon EC2
  D. Amazon OpenSearch Service
  E. Amazon Elastic File System (Amazon EFS)
  B. Amazon Aurora
  C. Amazon EC2

  ---

  Explanation

  Amazon Aurora (with PostgreSQL compatibility) and Amazon EC2 can both host PostgreSQL databases. Aurora is a managed database service that provides a fully compatible PostgreSQL environment with automated management. EC2 can also host PostgreSQL, but it requires more manual setup and maintenance. Amazon S3 and EFS do not host databases, and Amazon OpenSearch Service is intended for search and analytics, not relational databases.

• Question 930:

  Which option is an advantage of AWS Cloud computing that minimizes variable costs?

  A. High availability
  B. Economies of scale
  C. Global reach
  D. Agility
  B. Economies of scale

  ---

  Explanation

  One of the advantages of AWS Cloud computing is that it minimizes variable costs by leveraging economies of scale. This means that AWS can achieve lower costs per unit of computing resources by spreading the fixed costs of building and maintaining data centers over a large number of customers. As a result, AWS can offer lower and more predictable prices to its customers, who only pay for the resources they consume. Therefore, the correct answer is

  B. You can learn more about AWS pricing and economies of scale from this page.