🔍

CLF-C02 — questions

Page 15 of 36 · 719 total questions.

CLF-C02 Question 281

Single page →
Topic 1 · Question 281

A company is migrating its on-premises server to an Amazon EC2 instance. The server must stay active at all times for the next 12 months. Which EC2 pricing option is the MOST cost-effective for the company's workload?

  • AOn-Demand
  • BDedicated Hosts
  • CSpot Instances
  • DReserved Instances (correct answer)
Reveal answer & explanation
Correct answer: D

The correct answer is D. Option D: Reserved Instances

Explanation

Reserved Instances lower cost for steady-state, predictable long-running workloads. This option delivers the requirement at the lowest cost.

CLF-C02 Question 282

Single page →
Topic 1 · Question 282 · Select all that apply

Which of the following is the customer's responsibility under the AWS shared responsibility model? (Choose two.)

  • AMaintain the configuration of infrastructure devices.
  • BMaintain patching and updates within the hardware infrastructure.
  • CMaintain the configuration of guest operating systems and applications. (correct answer)
  • DManage decisions involving encryption options. (correct answer)
  • EMaintain infrastructure hardware.
Reveal answer & explanation
Correct answer: C, D

The correct answer is C, D. Option C: Maintain the configuration of guest operating systems and applications. Option D: Manage decisions involving encryption options.

Explanation

AWS Config tracks resource configuration changes and evaluates compliance.

CLF-C02 Question 283

Single page →
Topic 1 · Question 283

A company wants to verify if multi-factor authentication (MFA) is enabled for all users within its AWS accounts. Which AWS service or resource will meet this requirement?

  • AAWS Cost and Usage Report
  • BIAM credential reports (correct answer)
  • CAWS Artifact
  • DAmazon CloudFront reports
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: IAM credential reports

Explanation

AWS IAM controls authenticated and authorized access to AWS resources with fine-grained policies.

CLF-C02 Question 284

Single page →
Topic 1 · Question 284

A company uses AWS security services and tools. The company needs a service to help manage the security alerts and must organize the alerts into a single dashboard. Which AWS service should the company use to meet these requirements?

  • AAmazon GuardDuty
  • BAmazon Inspector
  • CAmazon Macie
  • DAWS Security Hub (correct answer)
Reveal answer & explanation
Correct answer: D

The correct answer is D. Option D: AWS Security Hub

Explanation

AWS Security Hub centralizes security findings and compliance checks.

CLF-C02 Question 285

Single page →
Topic 1 · Question 285

A company wants to run its workloads in the AWS Cloud effectively, reduce management overhead, and improve processes. Which AWS Well-Architected Framework pillar represents these requirements?

  • AReliability
  • BOperational excellence (correct answer)
  • CPerformance efficiency
  • DCost optimization
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Operational excellence.

CLF-C02 Question 286

Single page →
Topic 1 · Question 286

A company uses Amazon S3 to store records that can contain personally identifiable information (PII). The company wants a solution that can monitor all S3 buckets for PII and immediately alert staff about vulnerabilities. Which AWS service will meet these requirements?

  • AAmazon GuardDuty
  • BAmazon Detective
  • CAmazon Macie (correct answer)
  • DAWS Shield
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: Amazon Macie

Explanation

Amazon Macie discovers and protects sensitive data such as PII in S3.

CLF-C02 Question 287

Single page →
Topic 1 · Question 287

Which AWS service allows users to download security and compliance reports about the AWS infrastructure on demand?

  • AAmazon GuardDuty
  • BAWS Security Hub
  • CAWS Artifact (correct answer)
  • DAWS Shield
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: AWS Artifact.

CLF-C02 Question 288

Single page →
Topic 1 · Question 288

An external auditor has requested that a company provide a list of all its IAM users, including the status of users' credentials and access keys. What is the SIMPLEST way to provide this information?

  • ACreate an IAM user account for the auditor, granting the auditor administrator permissions.
  • BTake a screenshot of each user's page in the AWS Management Console, then provide the screenshots to the auditor.
  • CDownload the IAM credential report, then provide the report to the auditor. (correct answer)
  • DDownload the AWS Trusted Advisor report, then provide the report to the auditor.
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: Download the IAM credential report, then provide the report to the auditor.

Explanation

AWS IAM controls authenticated and authorized access to AWS resources with fine-grained policies.

CLF-C02 Question 289

Single page →
Topic 1 · Question 289

Which task can a company perform by using security groups in the AWS Cloud?

  • AAllow access to an Amazon EC2 instance through only a specific port. (correct answer)
  • BDeny access to malicious IP addresses at a subnet level.
  • CProtect data that is cached by Amazon CloudFront.
  • DApply a stateless firewall to an Amazon EC2 instance.
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: Allow access to an Amazon EC2 instance through only a specific port.

Explanation

Amazon EC2 provides resizable virtual servers when you need full control of the operating system.

CLF-C02 Question 290

Single page →
Topic 1 · Question 290

A company plans to run a compute-intensive workload that uses graphics processing units (GPUs). Which Amazon EC2 instance type should the company use?

  • AAccelerated computing (correct answer)
  • BCompute optimized
  • CStorage optimized
  • DGeneral purpose
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: Accelerated computing.

CLF-C02 Question 291

Single page →
Topic 1 · Question 291 · Select all that apply

Which of the following are features of network ACLs as they are used in the AWS Cloud? (Choose two.)

  • AThey are stateless. (correct answer)
  • BThey are stateful.
  • CThey evaluate all rules before allowing traffic.
  • DThey process rules in order, starting with the lowest numbered rule, when deciding whether to allow traffic. (correct answer)
  • EThey operate at the instance level.
Reveal answer & explanation
Correct answer: A, D

The correct answer is A, D. Option A: They are stateless. Option D: They process rules in order, starting with the lowest numbered rule, when deciding whether to allow traffic.

CLF-C02 Question 292

Single page →
Topic 1 · Question 292 · Select all that apply

Which capabilities are in the platform perspective of the AWS Cloud Adoption Framework (AWS CAF)? (Choose two.)

  • APerformance and capacity management
  • BData engineering (correct answer)
  • CContinuous integration and continuous delivery (CI/CD) (correct answer)
  • DInfrastructure protection
  • EChange and release management
Reveal answer & explanation
Correct answer: B, C

The correct answer is B, C. Option B: Data engineering Option C: Continuous integration and continuous delivery (CI/CD).

CLF-C02 Question 293

Single page →
Topic 1 · Question 293

According to the AWS shared responsibility model, the customer is responsible for applying the latest security updates and patches for which of the following?

  • AAmazon DynamoDB
  • BAmazon EC2 instances (correct answer)
  • CAmazon RDS instances
  • DAmazon S3
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Amazon EC2 instances

Explanation

Amazon EC2 provides resizable virtual servers when you need full control of the operating system.

CLF-C02 Question 294

Single page →
Topic 1 · Question 294

Which Amazon S3 storage class is MOST cost-effective for unknown access patterns?

  • AS3 Standard
  • BS3 Standard-Infrequent Access (S3 Standard-IA)
  • CS3 One Zone-Infrequent Access (S3 One Zone-IA)
  • DS3 Intelligent-Tiering (correct answer)
Reveal answer & explanation
Correct answer: D

The correct answer is D. Option D: S3 Intelligent-Tiering

Explanation

S3 Intelligent-Tiering automatically moves objects between tiers to optimize cost with no operational effort. Amazon S3 provides durable, scalable object storage that is fully managed. This option delivers the requirement at the lowest cost.

CLF-C02 Question 295

Single page →
Topic 1 · Question 295 · Select all that apply

Which options are AWS Cloud Adoption Framework (AWS CAF) security perspective capabilities? (Choose two.)

  • AObservability
  • BIncident and problem management
  • CIncident response (correct answer)
  • DInfrastructure protection (correct answer)
  • EAvailability and continuity
Reveal answer & explanation
Correct answer: C, D

The correct answer is C, D. Option C: Incident response Option D: Infrastructure protection.

CLF-C02 Question 296

Single page →
Topic 1 · Question 296

A company has a managed IAM policy that does not grant the necessary permissions for users to accomplish required tasks. How can this be resolved?

  • AEnable AWS Shield Advanced.
  • BCreate a custom IAM policy. (correct answer)
  • CUse a third-party web application firewall (WAF) managed rule from the AWS Marketplace.
  • DUse AWS Key Management Service (AWS KMS) to create a customer-managed key.
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Create a custom IAM policy.

Explanation

AWS IAM controls authenticated and authorized access to AWS resources with fine-grained policies.

CLF-C02 Question 297

Single page →
Topic 1 · Question 297

Who is responsible for managing IAM user access and secret keys according to the AWS shared responsibility model?

  • AIAM access and secret keys are static, so there is no need to rotate them.
  • BThe customer is responsible for rotating keys. (correct answer)
  • CAWS will rotate the keys whenever required.
  • DThe AWS Support team will rotate keys when requested by the customer.
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: The customer is responsible for rotating keys.

CLF-C02 Question 298

Single page →
Topic 1 · Question 298

A company needs to run a pre-installed third-party firewall on an Amazon EC2 instance. Which AWS service or feature can provide this solution?

  • ANetwork ACLs
  • BSecurity groups
  • CAWS Marketplace (correct answer)
  • DAWS Trusted Advisor
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: AWS Marketplace.

CLF-C02 Question 299

Single page →
Topic 1 · Question 299

Which AWS Cloud benefit gives a company the ability to quickly deploy cloud resources to access compute, storage, and database infrastructures in a matter of minutes?

  • AElasticity
  • BCost savings
  • CAgility (correct answer)
  • DReliability
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: Agility.

CLF-C02 Question 300

Single page →
Topic 1 · Question 300

Which of the following is entirely the responsibility of AWS, according to the AWS shared responsibility model?

  • ASecurity awareness and training
  • BDevelopment of an IAM password policy
  • CPatching of the guest operating system
  • DPhysical and environmental controls (correct answer)
Reveal answer & explanation
Correct answer: D

The correct answer is D. Option D: Physical and environmental controls.

Showing questions 281–300 of 719 · Page 15 of 36