A company needs to continuously monitor its environment to analyze network and account activity and identify potential security threats.Which AWS service should the company use to meet these requirements?

AWS Identity and Access Management (1AM)

A company is using AWS Lambda functions to build an application.Which tasks are the company's responsibility, according to the AWS shared responsibility model?(Select TWO.)

Establish the 1AM permissions that define who can run the Lambda functions.

Write the code for the Lambda functions to define the application logic.

Patch the servers where the Lambda functions are deployed.

Establish the 1AM permissions that define who can run the Lambda functions.

Write the code for the Lambda functions to define the application logic.

Deploy Amazon EC2 instances to support the Lambda functions.

Scale out the Lambda functions when the load increases.

Which services can be used to deploy applications on AWS? (Select TWO.)

AWS Application Discovery Service

Which statement describes a characteristic of the AWS global infrastructure?

Availability Zones contain multiple data centers.

Edge locations contain multiple AWS Regions.

AWS Regions contain multiple Regional edge caches.

Availability Zones contain multiple data centers.

Each data center contains multiple edge locations.

Which of the following is available to a company that has an AWS Business Support plan?

AWS technical account manager (TAM)

What is an Availability Zone?

One or more discrete data centers with redundant power, networking, and connectivity

A location where users can deploy compute, storage, database, and other select AWS services where no AWS Region currently exists

One or more discrete data centers with redundant power, networking, and connectivity

One or more clusters of servers where new workloads can be deployed

A fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to users globally

Which of the following is a cloud benefit that AWS offers to its users?

The ability to deploy to AWS on a global scale

The ability to configure AWS data center hypervisors

The ability to purchase hardware in advance of increased traffic

The ability to deploy to AWS on a global scale

Compliance audits for user IT environments

A company wants to minimize network latency between its Amazon EC2 instances. The EC2 instances do not need to be highly available.Which solution meets these requirements?

Use EC2 instances in a single Availability Zone.

Use Amazon CloudFront as the database for the EC2 instances.

Use EC2 instances in the same edge location and the same Availability Zone.

Use EC2 instances in the same edge location and the same AWS Region.

Which of the following are customer responsibilities under the AWS shared responsibility model?(Select TWO.)

Configuration of security groups

Encryption of customer data on AWS

Physical security of AWS facilities

Configuration of security groups

Encryption of customer data on AWS

Management of AWS Lambda infrastructure

Management of network throughput of each AWS Region

How can an AWS user conduct security assessments of Amazon EC2 instances, NAT gateways, and Elastic Load Balancers in a way that is approved by AWS?

Use the AWS Service Health Dashboard.

Which activity is a customer responsibility in the AWS Cloud according to the AWS shared responsibility model?

Ensuring Amazon EBS volumes are backed up

Ensuring network connectivity from AWS to the internet

Patching and fixing flaws within the AWS Cloud infrastructure

Ensuring the physical security of cloud data centers

Ensuring Amazon EBS volumes are backed up

A company wants to use the AWS Cloud as an offsite backup location for its on-premises infrastructure.Which AWS service will meet this requirement MOST cost-effectively?

Amazon Elastic File System (Amazon EFS)

Amazon Elastic Block Store (Amazon EBS)

A company is building a serverless architecture that connects application data from multiple data sources. The company needs a solution that does not require additional code.Which AWS service meets these requirements?

Amazon Simple Queue Service (Amazon SQS)

A company's information security manager is supervising a move to AWS and wants to ensure that AWS best practices are followed. The manager has concerns about the potential misuse of AWS account root user credentials.Which of the following is an AWS best practice for using the AWS account root user credentials?

Use the account root user credentials only when they alone must be used to perform a required function.

Allow only the manager to use the account root user credentials for normal activities.

Use the account root user credentials only for Amazon EC2 instances from the AWS Free Tier.

Use the account root user credentials only when they alone must be used to perform a required function.

Use the account root user credentials only for the creation of private VPC subnets.

A company needs to store data across multiple Availability Zones in an AWS Region. The data will not be accessed regularly but must be immediately retrievable.Which Amazon Elastic File System (Amazon EFS) storage class meets these requirements MOST cost effectively?

EFS Standard-Infrequent Access(EFS Standard-IA)

EFS One Zone-Infrequent Access (EFS One Zone-IA)

A company wants to establish a security layer in its VPC that will act as a firewall to control subnet traffic.Which AWS service or feature will meet this requirement?

Network access control lists (network ACLs)

A newly created 1AM user has no 1AM policy attached.What will happen when the user logs in and attempts to view the AWS resources in the account?

Access to all AWS resources will be denied.

All AWS services will be read-only access by default.

Access to all AWS resources will be denied.

Access to the AWS billing services will be allowed.

Access to AWS resources will be allowed through the AWS CLL

Which duties are the responsibility of a company that is using AWS Lambda? (Select TWO.)

Security of underlying infrastructure

Which AWS services and features are provided to all customers at no charge? (Select TWO.)

AWS Identity and Access Management (1AM)

Amazon CLF-C02 Practice Test 4 - Free Online Exam Questions 121-160

Question 1 / 40

Which of the following is an AWS value proposition that describes a user's ability to scale infrastructure based on demand?

Speed of innovation

Resource elasticity

Decoupled architecture

Global deployment

Comment (0)

Amazon CLF-C02 Practice Test 4

Question

Amazon CLF-C02 Practice Tests

Practice Tests