Amazon Amazon Certifications CLF-C02 Questions & Answers

• Question 941:

  A company wants to secure its consumer web application by using SSL/TLS to encrypt traffic.

  Which AWS service can the company use to meet this goal?

  A. AWS WAF

  B. AWS Shield

  C. Amazon VPC

  D. AWS Certificate Manager (ACM)

  Correct Answer: D

  Explanation: To enable HTTPS connections to your website or application in AWS, you need an SSL/TLS server certificate. For certificates in a Region supported by AWS Certificate Manager (ACM), we recommend that you use ACM to provision, manage, and deploy your server certificates.

• Question 942:

  A developer is working on enhancing applications at AWS. The developer needs a service that can securely host GitHub-based code, repositories, and version controls. Which AWS service should the developer use?

  A. AWS CodeStar

  B. Amazon CodeGuru

  C. AWS CodeCommit

  D. AWS CodePipeline

  Correct Answer: C

• Question 943:

  A company is undergoing a security audit. The audit includes security validation and compliance validation of the AWS infrastructure and services that the company uses. The auditor needs to locate compliance-related information and must download AWS security and compliance documents. These documents include the System and Organization Control (SOC) reports.

  Which AWS service or group can provide these documents?

  A. AWS Abuse team

  B. AWS Artifact

  C. AWS Support

  D. AWS Config

  Correct Answer: B

  Explanation: ?Portal that provides customers with on-demand access to AWS compliance documentation and AWS agreements ?Artifact Reports - Allows you to download AWS security and compliance documents from third-party auditors, like AWS ISO certifications, Payment Card Industry (PCI), and System and Organization Control (SOC) reports ?Artifact Agreements - Allows you to review, accept, and track the status of AWS agreements such as the Business Associate Addendum (BAA) or the Health Insurance Portability and Accountability Act (HIPAA) for an individual account or in your organization ?Can be used to support internal audit or compliance

• Question 944:

  Which AWS service tool or feature helps companies reduce costs by identifying underutilized Amazon EC2 instances?

  A. Amazon Inspector

  B. AWS Trusted Advisor

  C. Consolidated billing

  D. Cost Explorer

  Correct Answer: D

• Question 945:

  Which of the following gives a company the ability to take advantage of tiered pricing for services across multiple AWS member accounts?

  A. AWS Organizations service control policies (SCPs)

  B. AWS Organizations consolidated billing

  C. All upfront Reserved Instances

  D. Cost Explorer utilization reports

  Correct Answer: B

• Question 946:

  A company needs steady and predictable performance from its Amazon EC2 instances at the lowest possible cost. The company also needs the ability to scale resources to ensure that it has the right resources available at the right time. Which AWS service or resource will meet these requirements?

  A. Amazon CloudWatch

  B. Application Load Balancer

  C. AWS Batch

  D. Amazon EC2 Auto Scaling

  Correct Answer: D

  Explanation: AWS Auto Scaling monitors your applications and automatically adjusts capacity to maintain steady, predictable performance at the lowest possible cost.

• Question 947:

  Which AWS service should a company use to decouple large monolithic applications into smaller microservices components?

  A. AWS Direct Connect

  B. Amazon Lightsail

  C. Amazon Simple Queue Service (Amazon SQS)

  D. Amazon CloudWatch

  Correct Answer: C

  Explanation: Amazon SQS is a fully managed message queuing service that makes it easy to decouple and scale microservices, distributed systems, and serverless applications

• Question 948:

  Who can create and manage access keys for an AWS account root user?

  A. The AWS account owner

  B. An IAM user that has administrator permissions

  C. IAM users within a designated group

  D. An IAM user that has the required role

  Correct Answer: A

  Explanation: Anyone who has root user credentials for your AWS account has unrestricted access to all the resources in your account, including billing information. When you create access keys, you create the access key ID and secret access key as a set.

• Question 949:

  A company needs to store code in a version control system. The company also needs to continually deploy updated code through a series of automated steps (build test package and deploy). Which combination of AWS services will meet these requirements? (Select TWO.)

  A. AWS CloudFormation

  B. AWS CodeCommit

  C. AWS Control Tower

  D. AWS Elastic Beanstalk

  E. AWS CodePipeline

  Correct Answer: BE

• Question 950:

  Which AWS services are delivered globally instead of regionally? (Select TWO.)

  A. Amazon EC2

  B. Amazon CloudFront

  C. Amazon Route 53

  D. Amazon VPC

  E. Amazon RDS

  Correct Answer: BC