πŸ”

CLF-C02 β€” questions

Page 11 of 36 Β· 719 total questions.

Topic 1 Β· Question 201

A company is storing data that will not be frequently accessed in the AWS Cloud. If the company needs to access the data, the data needs to be retrieved within 12 hours. The company wants a solution that is cost-effective for storage costs for each gigabyte. Which Amazon S3 storage class will meet these requirements?

  • AS3 Standard
  • BS3 Glacier Flexible Retrieval (correct answer)
  • CS3 One Zone-Infrequent Access (S3 One Zone-IA)
  • DS3 Standard-Infrequent Access (S3 Standard-IA)
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: S3 Glacier Flexible Retrieval

Explanation

Amazon S3 Glacier offers low-cost archival storage for infrequently accessed data. Amazon S3 provides durable, scalable object storage that is fully managed. This option delivers the requirement at the lowest cost.

Topic 1 Β· Question 202

Which AWS service or resource can be used to identify services that have been used by a user within a specified date range?

  • AAmazon S3 access control lists (ACLs)
  • BAWS Certificate Manager (ACM)
  • CNetwork Access Analyzer
  • DAWS Identity and Access Management Access Analyzer (correct answer)
Reveal answer & explanation
Correct answer: D

The correct answer is D. Option D: AWS Identity and Access Management Access Analyzer.

Topic 1 Β· Question 203

A company needs to engage third-party consultants to help maintain and support its AWS environment and the company’s business needs. Which AWS service or resource will meet these requirements?

  • AAWS Support
  • BAWS Organizations
  • CAWS Service Catalog
  • DAWS Partner Network (APN) (correct answer)
Reveal answer & explanation
Correct answer: D

The correct answer is D. Option D: AWS Partner Network (APN).

Topic 1 Β· Question 204

A company wants to create Amazon QuickSight dashboards every week by using its billing data. Which AWS feature or tool can the company use to meet these requirements?

  • AAWS Budgets
  • BAWS Cost Explorer
  • CAWS Cost and Usage Report (correct answer)
  • DAWS Cost Anomaly Detection
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: AWS Cost and Usage Report.

Topic 1 Β· Question 205

A company is planning to move data backups to the AWS Cloud. The company needs to replace on-premises storage with storage that is cloud-based but locally cached. Which AWS service meets these requirements?

  • AAWS Storage Gateway (correct answer)
  • BAWS Snowcone
  • CAWS Backup
  • DAmazon Elastic File System (Amazon EFS)
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: AWS Storage Gateway

Explanation

AWS Storage Gateway bridges on-premises apps to AWS storage with local caching.

Topic 1 Β· Question 206

A company needs to organize its resources and track AWS costs on a detailed level. The company needs to categorize costs by business department, environment, and application. Which solution will meet these requirements?

  • AAccess the AWS Cost Management console to organize resources, set an AWS budget, and receive notifications of unintentional usage.
  • BUse tags to organize the resources. Activate cost allocation tags to track AWS costs on a detailed level. (correct answer)
  • CCreate Amazon CloudWatch dashboards to visually organize and track costs individually.
  • DAccess the AWS Billing and Cost Management dashboard to organize and track resource consumption on a detailed level.
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Use tags to organize the resources. Activate cost allocation tags to track AWS costs on a detailed level.

Topic 1 Β· Question 207

A company needs to plan, schedule, and run hundreds of thousands of computing jobs on AWS. Which AWS service can the company use to meet this requirement?

  • AAWS Step Functions
  • BAWS Service Catalog
  • CAmazon Simple Queue Service (Amazon SQS)
  • DAWS Batch (correct answer)
Reveal answer & explanation
Correct answer: D

The correct answer is D. Option D: AWS Batch

Explanation

AWS Batch schedules and runs batch computing jobs at any scale without managing clusters.

Topic 1 Β· Question 208 Β· Select all that apply

Which AWS services or features provide high availability and low latency by enabling failover across different AWS Regions? (Choose two.)

  • AAmazon Route 53 (correct answer)
  • BNetwork Load Balancer
  • CAmazon S3 Transfer Acceleration
  • DAWS Global Accelerator (correct answer)
  • EApplication Load Balancer
Reveal answer & explanation
Correct answer: A, D

The correct answer is A, D. Option A: Amazon Route 53 Option D: AWS Global Accelerator

Explanation

AWS Global Accelerator routes users over the AWS backbone to the optimal endpoint for lower latency and fast failover. Amazon Route 53 provides DNS with health checks and routing policies for availability and latency. This option meets the real-time / low-latency performance requirement.

Topic 1 Β· Question 209

Which of the following is a way to use Amazon EC2 Auto Scaling groups to scale capacity in the AWS Cloud?

  • AScale the number of EC2 instances in or out automatically, based on demand. (correct answer)
  • BUse serverless EC2 instances.
  • CScale the size of EC2 instances up or down automatically, based on demand.
  • DTransfer unused CPU resources between EC2 instances.
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: Scale the number of EC2 instances in or out automatically, based on demand.

Explanation

Amazon EC2 provides resizable virtual servers when you need full control of the operating system.

Topic 1 Β· Question 210 Β· Select all that apply

Which abilities are benefits of the AWS Cloud? (Choose two.)

  • ATrade variable expenses for capital expenses.
  • BDeploy globally in minutes. (correct answer)
  • CPlan capacity in advance of deployments.
  • DTake advantage of economies of scale. (correct answer)
  • EReduce dependencies on network connectivity.
Reveal answer & explanation
Correct answer: B, D

The correct answer is B, D. Option B: Deploy globally in minutes. Option D: Take advantage of economies of scale.

Topic 1 Β· Question 211

Which AWS security service protects applications from distributed denial of service attacks with always-on detection and automatic inline mitigations?

  • AAmazon Inspector
  • BAWS Web Application Firewall (AWS WAF)
  • CElastic Load Balancing (ELB)
  • DAWS Shield (correct answer)
Reveal answer & explanation
Correct answer: D

The correct answer is D. Option D: AWS Shield

Explanation

AWS Shield provides managed DDoS protection.

Topic 1 Β· Question 212

Which AWS service allows users to model and provision AWS resources using common programming languages?

  • AAWS CloudFormation
  • BAWS CodePipeline
  • CAWS Cloud Development Kit (AWS CDK) (correct answer)
  • DAWS Systems Manager
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: AWS Cloud Development Kit (AWS CDK)

Explanation

The AWS CDK defines cloud infrastructure as code using familiar programming languages.

Topic 1 Β· Question 213

Which Amazon EC2 instance pricing model can provide discounts of up to 90%?

  • AReserved Instances
  • BOn-Demand
  • CDedicated Hosts
  • DSpot Instances (correct answer)
Reveal answer & explanation
Correct answer: D

The correct answer is D. Option D: Spot Instances

Explanation

Spot Instances use spare capacity at a large discount, ideal for fault-tolerant or interruptible workloads.

Topic 1 Β· Question 214

Which of the following acts as an instance-level firewall to control inbound and outbound access?

  • ANetwork access control list
  • BSecurity groups (correct answer)
  • CAWS Trusted Advisor
  • DVirtual private gateways
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Security groups.

Topic 1 Β· Question 215

A company must be able to develop, test, and launch an application in the AWS Cloud quickly. Which advantage of cloud computing will meet these requirements?

  • AStop guessing capacity
  • BTrade fixed expense for variable expense
  • CAchieve economies of scale
  • DIncrease speed and agility (correct answer)
Reveal answer & explanation
Correct answer: D

The correct answer is D. Option D: Increase speed and agility.

Topic 1 Β· Question 216

A company has teams that have different job roles and responsibilities. The company’s employees often change teams. The company needs to manage permissions for the employees so that the permissions are appropriate for the job responsibilities. Which IAM resource should the company use to meet this requirement with the LEAST operational overhead?

  • AIAM user groups
  • BIAM roles (correct answer)
  • CIAM instance profiles
  • DIAM policies for individual users
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: IAM roles

Explanation

An IAM role grants temporary, least-privilege permissions to AWS resources without long-term credentials. AWS IAM controls authenticated and authorized access to AWS resources with fine-grained policies.

Topic 1 Β· Question 217

Which AWS service can a company use to securely store and encrypt passwords for a database?

  • AAWS Shield
  • BAWS Secrets Manager (correct answer)
  • CAWS Identity and Access Management (IAM)
  • DAmazon Cognito
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: AWS Secrets Manager

Explanation

AWS Secrets Manager stores and automatically rotates secrets such as database credentials.

Topic 1 Β· Question 218

What can a cloud practitioner use to retrieve AWS security and compliance documents and submit them as evidence to an auditor or regulator?

  • AAWS Certificate Manager
  • BAWS Systems Manager
  • CAWS Artifact (correct answer)
  • DAmazon Inspector
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: AWS Artifact.

Topic 1 Β· Question 219 Β· Select all that apply

Which encryption types can be used to protect objects at rest in Amazon S3? (Choose two.)

  • AServer-side encryption with Amazon S3 managed encryption keys (SSE-S3) (correct answer)
  • BServer-side encryption with AWS KMS managed keys (SSE-KMS) (correct answer)
  • CTLS
  • DSSL
  • ETransparent Data Encryption (TDE)
Reveal answer & explanation
Correct answer: A, B

The correct answer is A, B. Option A: Server-side encryption with Amazon S3 managed encryption keys (SSE-S3) Option B: Server-side encryption with AWS KMS managed keys (SSE-KMS)

Explanation

Amazon S3 provides durable, scalable object storage that is fully managed. AWS KMS manages encryption keys and integrates with most AWS services for encryption at rest.

Topic 1 Β· Question 220

A company wants to integrate its online shopping website with social media login credentials. Which AWS service can the company use to make this integration?

  • AAWS Directory Service
  • BAWS Identity and Access Management (IAM)
  • CAmazon Cognito (correct answer)
  • DAWS IAM Identity Center (AWS Single Sign-On)
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: Amazon Cognito

Explanation

Amazon Cognito manages user sign-up, sign-in and federated identity for applications.

Showing questions 201–220 of 719 Β· Page 11 of 36