🔍

CLF-C02 — questions

Page 30 of 36 · 719 total questions.

CLF-C02 Question 581

Single page →
Topic 1 · Question 581 · Select all that apply

Which of the following actions are controlled with AWS Identity and Access Management (IAM)? (Choose two.)

  • AControl access to AWS service APIs and to other specific resources. (correct answer)
  • BProvide intelligent threat detection and continuous monitoring.
  • CProtect the AWS environment using multi-factor authentication (MFA). (correct answer)
  • DGrant users access to AWS data centers.
  • EProvide firewall protection for applications from common web attacks.
Reveal answer & explanation
Correct answer: A, C

The correct answer is A, C. Option A: Control access to AWS service APIs and to other specific resources. Option C: Protect the AWS environment using multi-factor authentication (MFA).

CLF-C02 Question 582

Single page →
Topic 1 · Question 582

Why are AWS CloudFormation templates used?

  • ATo reduce provisioning time by using automation. (correct answer)
  • BTo transfer existing infrastructure to another company.
  • CTo reuse on-premises infrastructure in the AWS Cloud.
  • DTo deploy large infrastructure with no cost implications.
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: To reduce provisioning time by using automation.

CLF-C02 Question 583

Single page →
Topic 1 · Question 583

A company is using AWS Identity and Access Management (IAM). Who can manage the access keys of the AWS account root user?

  • AIAM users in the same account that have been granted permission
  • BIAM roles in any account that have been granted permission
  • CIAM users and roles that have been granted permission
  • DThe AWS account owner (correct answer)
Reveal answer & explanation
Correct answer: D

The correct answer is D. Option D: The AWS account owner.

CLF-C02 Question 584

Single page →
Topic 1 · Question 584

Which group shares responsibility with AWS for security and compliance of AWS accounts and resources?

  • AThird-party vendors
  • BCustomers (correct answer)
  • CReseller partners
  • DInternet providers
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Customers.

CLF-C02 Question 585

Single page →
Topic 1 · Question 585

A company needs an event history of which AWS resources the company has created. Which AWS service will provide this information?

  • AAmazon CloudWatch
  • BAWS CloudTrail (correct answer)
  • CAmazon Aurora
  • DAmazon EventBridge
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: AWS CloudTrail

Explanation

AWS CloudTrail records API activity for auditing and governance.

CLF-C02 Question 586

Single page →
Topic 1 · Question 586

A company wants to run relationship databases in the AWS Cloud. The company wants to use a managed service that will install the database and run regular software updates. Which AWS service will meet these requirements?

  • AAmazon S3
  • BAmazon RDS (correct answer)
  • CAmazon Elastic Block Store (Amazon EBS)
  • DAmazon DynamoDB
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Amazon RDS

Explanation

Amazon RDS is a managed relational database that handles patching, backups and failover.

CLF-C02 Question 587

Single page →
Topic 1 · Question 587

Which AWS service provides a fully managed graph database for highly connected datasets?

  • AAmazon DynamoDB
  • BAmazon RDS
  • CAmazon Neptune (correct answer)
  • DAmazon Aurora
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: Amazon Neptune

Explanation

Amazon Neptune is a managed graph database for highly connected data.

CLF-C02 Question 588

Single page →
Topic 1 · Question 588

A company's cloud environment includes Amazon EC2 instances and Application Load Balancers. The company wants to improve protections for its cloud resources against DDoS attacks. The company also wants to have real-time visibility into any DDoS attacks. Which AWS service will meet these requirements?

  • AAWS Shield Standard
  • BAWS Firewall Manager
  • CAWS Shield Advanced (correct answer)
  • DAmazon GuardDuty
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: AWS Shield Advanced

Explanation

AWS Shield provides managed DDoS protection. This option meets the real-time / low-latency performance requirement.

CLF-C02 Question 589

Single page →
Topic 1 · Question 589

A company wants to update its online data processing application by implementing container-based services that run for 4 hours at a time. The company does not want to provision or manage server instances. Which AWS service will meet these requirements?

  • AAWS Lambda
  • BAWS Fargate (correct answer)
  • CAmazon EC2
  • DAWS Elastic Beanstalk
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: AWS Fargate

Explanation

AWS Fargate runs containers serverlessly so there are no EC2 hosts to manage or patch.

CLF-C02 Question 590

Single page →
Topic 1 · Question 590

Which AWS service enables users to create copies of resources across AWS Regions?

  • AAmazon ElastiCache
  • BAWS CloudFormation (correct answer)
  • CAWS CloudTrail
  • DAWS Systems Manager
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: AWS CloudFormation

Explanation

AWS CloudFormation provisions infrastructure as code repeatably.

CLF-C02 Question 591

Single page →
Topic 1 · Question 591

Which task is the responsibility of AWS, according to the AWS shared responsibility model?

  • AApply guest operating system patches to Amazon EC2 instances.
  • BProvide monitoring of human resources information management (HRIM) systems.
  • CPerform automated backups of Amazon RDS instances. (correct answer)
  • DOptimize the costs of running AWS services.
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: Perform automated backups of Amazon RDS instances.

Explanation

AWS Backup centrally automates and manages backups across AWS services. Amazon RDS is a managed relational database that handles patching, backups and failover.

CLF-C02 Question 592

Single page →
Topic 1 · Question 592

A user needs to perform a one-time backup of an Amazon Elastic Block Store (Amazon EBS) volume that is attached to an Amazon EC2 instance. What is the MOST operationally efficient way to perform this backup?

  • AAttach another EBS volume to the EC2 instance, and copy the contents.
  • BCopy the EBS volume to a server that is running outside AWS and is connected with AWS Direct Connect.
  • CCreate an EBS snapshot of the volume. (correct answer)
  • DCreate a custom script to copy the EBS file contents to Amazon S3.
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: Create an EBS snapshot of the volume.

Explanation

Amazon EBS provides block storage attached to a single EC2 instance.

CLF-C02 Question 593

Single page →
Topic 1 · Question 593

A developer who has no AWS Cloud experience wants to use AWS technology to build a web application. Which AWS service should the developer use to start building the application?

  • AAmazon SageMaker
  • BAWS Lambda
  • CAmazon Lightsail (correct answer)
  • DAmazon Elastic Container Service (Amazon ECS)
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: Amazon Lightsail

Explanation

Amazon Lightsail offers simple, low-cost virtual private servers for small workloads.

CLF-C02 Question 594

Single page →
Topic 1 · Question 594

A company wants to manage access and permissions for its third-party software as a service (SaaS) applications. The company wants to use a portal where end users can access assigned AWS accounts and AWS Cloud applications. Which AWS service should the company use to meet these requirements?

  • AAmazon Cognito
  • BAWS IAM Identity Center (AWS Single Sign-On) (correct answer)
  • CAWS Identity and Access Management (IAM)
  • DAWS Directory Service for Microsoft Active Directory
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: AWS IAM Identity Center (AWS Single Sign-On)

Explanation

AWS IAM controls authenticated and authorized access to AWS resources with fine-grained policies. AWS IAM Identity Center (SSO) centrally manages workforce access to multiple accounts and apps.

CLF-C02 Question 595

Single page →
Topic 1 · Question 595

Which AWS service is designed for users running workloads that include a NoSQL database?

  • AAmazon RDS
  • BAmazon S3
  • CAmazon Redshift
  • DAmazon DynamoDB (correct answer)
Reveal answer & explanation
Correct answer: D

The correct answer is D. Option D: Amazon DynamoDB

Explanation

Amazon DynamoDB is a fully managed, serverless NoSQL database with single-digit millisecond latency and automatic scaling.

CLF-C02 Question 596

Single page →
Topic 1 · Question 596

A company has a website on AWS. The company wants to deliver the website to a worldwide audience and provide low-latency response times for global users. Which AWS service will meet these requirements?

  • AAWS CloudFormation
  • BAmazon CloudFront (correct answer)
  • CAmazon ElastiCache
  • DAmazon DynamoDB
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Amazon CloudFront

Explanation

Amazon CloudFront caches content at edge locations to reduce latency and offload origins. This option meets the real-time / low-latency performance requirement.

CLF-C02 Question 597

Single page →
Topic 1 · Question 597

A company wants to add a conversational chatbot to its website. Which AWS service can the company use to meet this requirement?

  • AAmazon Textract
  • BAmazon Lex (correct answer)
  • CAWS Glue
  • DAmazon Rekognition
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Amazon Lex.

CLF-C02 Question 598

Single page →
Topic 1 · Question 598

Which AWS service or feature can be used to monitor for potential disk write spikes on a system that is running on Amazon EC2?

  • AAWS CloudTrail
  • BAWS Health Dashboard
  • CAWS Trusted Advisor
  • DAmazon CloudWatch (correct answer)
Reveal answer & explanation
Correct answer: D

The correct answer is D. Option D: Amazon CloudWatch

Explanation

Amazon CloudWatch collects metrics, logs and alarms to monitor and react to operational health. This option decouples the components so they scale independently and absorb load spikes.

CLF-C02 Question 599

Single page →
Topic 1 · Question 599

A company has applications that control on-premises factory equipment. Which AWS service should the company use to run these applications with the LEAST latency?

  • AAWS Outposts (correct answer)
  • BAmazon EC2
  • CAWS Lambda
  • DAWS Fargate
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: AWS Outposts

Explanation

AWS Outposts extends AWS infrastructure on premises for low-latency or data-residency needs.

CLF-C02 Question 600

Single page →
Topic 1 · Question 600

Which AWS Cloud Adoption Framework (AWS CAF) perspective focuses on organizing an inventory of data products in a data catalog?

  • AOperations
  • BGovernance (correct answer)
  • CBusiness
  • DPlatform
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Governance.

Showing questions 581–600 of 719 · Page 30 of 36