🔍

CLF-C02 — questions

Page 9 of 36 · 719 total questions.

CLF-C02 Question 161

Single page →
Topic 1 · Question 161

A company is running a critical workload on an Amazon RDS DB instance. The company needs the DB instance to be highly available with a recovery time of less than 5 minutes. Which solution will meet these requirements?

  • ACreate a read replica of the DB instance.
  • BCreate a template of the DB instance by using AWS CloudFormation.
  • CTake frequent snapshots of the DB instance. Store the snapshots in Amazon S3.
  • DModify the DB instance to be a Multi-AZ deployment. (correct answer)
Reveal answer & explanation
Correct answer: D

The correct answer is D. Option D: Modify the DB instance to be a Multi-AZ deployment. By spanning multiple Availability Zones / adding redundancy, this option provides the high availability and resilience required.

CLF-C02 Question 162

Single page →
Topic 1 · Question 162

A company plans to migrate its application to AWS and run the application on Amazon EC2 instances. The application will have continuous usage for 1 year. Which EC2 instance purchasing option will meet these requirements MOST cost-effectively?

  • AReserved Instances (correct answer)
  • BSpot Instances
  • COn-Demand Instances
  • DDedicated Hosts
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: Reserved Instances

Explanation

Reserved Instances lower cost for steady-state, predictable long-running workloads. This option delivers the requirement at the lowest cost.

CLF-C02 Question 163

Single page →
Topic 1 · Question 163

A company needs to transfer data between an Amazon S3 bucket and an on-premises application. Who is responsible for the security of this data, according to the AWS shared responsibility model?

  • AThe company (correct answer)
  • BAWS
  • CFirewall vendor
  • DAWS Marketplace partner
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: The company.

CLF-C02 Question 164

Single page →
Topic 1 · Question 164

Which pillar of the AWS Well-Architected Framework refers to the ability of a system to recover from infrastructure or service disruptions and dynamically acquire computing resources to meet demand?

  • ASecurity
  • BReliability (correct answer)
  • CPerformance efficiency
  • DCost optimization
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Reliability.

CLF-C02 Question 165

Single page →
Topic 1 · Question 165

A company wants to identify Amazon S3 buckets that are shared with another AWS account. Which AWS service or feature will meet these requirements?

  • AAWS Lake Formation
  • BIAM credential report
  • CAmazon CloudWatch
  • DIAM Access Analyzer (correct answer)
Reveal answer & explanation
Correct answer: D

The correct answer is D. Option D: IAM Access Analyzer

Explanation

AWS IAM controls authenticated and authorized access to AWS resources with fine-grained policies.

CLF-C02 Question 166

Single page →
Topic 1 · Question 166

Which AWS service gives users the ability to build interactive business intelligence dashboards that include machine learning insights?

  • AAmazon Athena
  • BAmazon Kendra
  • CAmazon QuickSight (correct answer)
  • DAmazon Redshift
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: Amazon QuickSight

Explanation

Amazon QuickSight is a serverless business-intelligence and dashboard service.

CLF-C02 Question 167

Single page →
Topic 1 · Question 167

Which of the following is an AWS value proposition that describes a user’s ability to scale infrastructure based on demand?

  • ASpeed of innovation
  • BResource elasticity (correct answer)
  • CDecoupled architecture
  • DGlobal deployment
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Resource elasticity.

CLF-C02 Question 168

Single page →
Topic 1 · Question 168

Which action is a security best practice for access to sensitive data that is stored in an Amazon S3 bucket?

  • AEnable S3 Cross-Region Replication (CRR) on the S3 bucket.
  • BUse IAM roles for applications that require access to the S3 bucket. (correct answer)
  • CConfigure AWS WAF to prevent unauthorized access to the S3 bucket.
  • DConfigure Amazon GuardDuty to prevent unauthorized access to the S3 bucket.
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Use IAM roles for applications that require access to the S3 bucket.

Explanation

Amazon S3 provides durable, scalable object storage that is fully managed. An IAM role grants temporary, least-privilege permissions to AWS resources without long-term credentials. AWS IAM controls authenticated and authorized access to AWS resources with fine-grained policies.

CLF-C02 Question 169

Single page →
Topic 1 · Question 169

A company wants to know more about the benefits offered by cloud computing. The company wants to understand the operational advantage of agility. How does AWS provide agility for users?

  • AThe ability the ensure high availability by deploying workloads to multiple regions
  • BA pay-as-you-go model for many services and resources
  • CThe ability to transfer infrastructure management to the AWS Cloud
  • DThe ability to provision and deprovision resources quickly with minimal effort (correct answer)
Reveal answer & explanation
Correct answer: D

The correct answer is D. Option D: The ability to provision and deprovision resources quickly with minimal effort.

CLF-C02 Question 170

Single page →
Topic 1 · Question 170

A company needs a central user portal so that users can log in to third-party business applications that support Security Assertion Markup Language (SAML) 2.0. Which AWS service will meet this requirement?

  • AAWS Identity and Access Management (IAM)
  • BAmazon Cognito
  • CAWS IAM Identity Center (AWS Single Sign-On) (correct answer)
  • DAWS CLI
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: AWS IAM Identity Center (AWS Single Sign-On)

Explanation

AWS IAM controls authenticated and authorized access to AWS resources with fine-grained policies. AWS IAM Identity Center (SSO) centrally manages workforce access to multiple accounts and apps.

CLF-C02 Question 171

Single page →
Topic 1 · Question 171

Which AWS service should users use to learn about AWS service availability and operations?

  • AAmazon EventBridge
  • BAWS Service Catalog
  • CAWS Control Tower
  • DAWS Health Dashboard (correct answer)
Reveal answer & explanation
Correct answer: D

The correct answer is D. Option D: AWS Health Dashboard.

CLF-C02 Question 172

Single page →
Topic 1 · Question 172

Which AWS service or tool can be used to capture information about inbound and outbound traffic in an Amazon VPC?

  • AVPC Flow Logs (correct answer)
  • BAmazon Inspector
  • CVPC endpoint services
  • DNAT gateway
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: VPC Flow Logs.

CLF-C02 Question 173

Single page →
Topic 1 · Question 173

What is the customer ALWAYS responsible for managing, according to the AWS shared responsibility model?

  • ASoftware licenses
  • BNetworking
  • CCustomer data (correct answer)
  • DEncryption keys
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: Customer data.

CLF-C02 Question 174

Single page →
Topic 1 · Question 174

Which AWS service can be used to retrieve compliance reports on demand?

  • AAWS Secrets Manager
  • BAWS Artifact (correct answer)
  • CAWS Security Hub
  • DAWS Certificate Manager
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: AWS Artifact.

CLF-C02 Question 175

Single page →
Topic 1 · Question 175

Which AWS service enables users to check for vulnerabilities on Amazon EC2 instances by using predefined assessment templates?

  • AAWS WAF
  • BAWS Trusted Advisor
  • CAmazon Inspector (correct answer)
  • DAWS Shield
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: Amazon Inspector

Explanation

Amazon Inspector automatically scans workloads for software vulnerabilities.

CLF-C02 Question 176

Single page →
Topic 1 · Question 176

A company plans to migrate to the AWS Cloud. The company is gathering information about its on-premises infrastructure and requires information such as the hostname, IP address, and MAC address. Which AWS service will meet these requirements?

  • AAWS DataSync
  • BAWS Application Migration Service
  • CAWS Application Discovery Service (correct answer)
  • DAWS Database Migration Service (AWS DMS)
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: AWS Application Discovery Service.

CLF-C02 Question 177

Single page →
Topic 1 · Question 177

Which action will help increase security in the AWS Cloud?

  • AEnable programmatic access for all IAM users.
  • BUse IAM users instead of IAM roles to delegate permissions.
  • CRotate access keys on a reoccurring basis. (correct answer)
  • DUse inline policies instead of customer managed policies.
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: Rotate access keys on a reoccurring basis.

CLF-C02 Question 178

Single page →
Topic 1 · Question 178

A company is planning to migrate its application to the AWS Cloud. Which AWS tool or set of resources should the company use to analyze and assess its readiness for migration?

  • AAWS Cloud Adoption Framework (AWS CAF) (correct answer)
  • BAWS Pricing Calculator
  • CAWS Well-Architected Framework
  • DAWS Budgets
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: AWS Cloud Adoption Framework (AWS CAF).

CLF-C02 Question 179

Single page →
Topic 1 · Question 179

Which of the following describes some of the core functionality of Amazon S3?

  • AAmazon S3 is a high-performance block storage service that is designed for use with Amazon EC2.
  • BAmazon S3 is an object storage service that provides high-level performance, security, scalability, and data availability. (correct answer)
  • CAmazon S3 is a fully managed, highly reliable, and scalable file storage system that is accessible over the industry-standard SMB protocol.
  • DAmazon S3 is a scalable, fully managed elastic NFS for use with AWS Cloud services and on-premises resources.
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Amazon S3 is an object storage service that provides high-level performance, security, scalability, and data availability.

Explanation

Amazon S3 provides durable, scalable object storage that is fully managed.

CLF-C02 Question 180

Single page →
Topic 1 · Question 180

Which AWS benefit is demonstrated by on-demand technology services that enable companies to replace upfront fixed expenses with variable expenses?

  • AHigh availability
  • BEconomies of scale
  • CPay-as-you-go pricing (correct answer)
  • DGlobal reach
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: Pay-as-you-go pricing.

Showing questions 161–180 of 719 · Page 9 of 36