Which AWS solution gives companies the ability to use protocols such as NFS to store and retrieve objects in Amazon S3?

AWS Storage Gateway file gateway

AWS Storage Gateway volume gateway

AWS Storage Gateway file gateway

Amazon Elastic File System (Amazon EFS)

Which design principle is achieved by following the reliability pillar of the AWS Well-Architected Framework?

Changing infrastructure manually

In which of the following AWS services should database credentials be stored for maximum security?

AWS Identity and Access Management (1AM)

AWS Key Management Service (AWS KMS)

A company needs to configure rules to identify threats and protect applications from malicious network access.Which AWS service should the company use to meet these requirements?

AWS Identity and Access Management (1AM)

A company moves its infrastructure from on premises to the AWS Cloud. The company can now provision additional Amazon EC2 instances whenever the instances are required. With this ability, the company can launch new marketing campaigns in 3 days instead of 3 weeks.Which benefit of the AWS Cloud does this scenario demonstrate?

Improved operational resilience

A retail company is migrating its IT infrastructure applications from on premises to the AWS Cloud.Which costs will the company eliminate with this migration? (Select TWO.)

Cost of physical server hardware

A company hosts an application on an Amazon EC2 instance. The EC2 instance needs to access several AWS resources, including Amazon S3 and Amazon DynamoDB.What is the MOST operationally efficient solution to delegate permissions?

Create an 1AM role with the required permissions. Attach the role to the EC2 instance.

Create an IAM user and use its access key and secret access key in the application.

Create an 1AM user and use its access key and secret access key to create a CLI profile in the EC2 instance.

Create an 1AM role with the required permissions. Attach the role to the administrative1AM user.

Which encryption types can be used to protect objects at rest in Amazon S3? (Select TWO.)

Server-side encryption with AmazonS3 managed encryption keys (SSE-S3)

Server-side encryption with AWS KMSmanaged keys (SSE-KMS)

Server-side encryption with AmazonS3 managed encryption keys (SSE-S3)

Server-side encryption with AWS KMSmanaged keys (SSE-KMS)

Transparent Data Encryption (TDE)

A company is building an application that will receive millions of database queries each second. The company needs the data store for the application to scale to meet these needs.Which AWS service will meet this requirement?

Amazon ElastiCache for Memcached

Which of the following is entirely the responsibility of AWS, according to the AWS shared responsibility model?

Physical and environmental controls

Security awareness and training

Development of an 1AM password policy

Patching of the guest operating system

Physical and environmental controls

A company wants to migrate its Microsoft SQL Server database management system from on premises to the AWS Cloud.Which AWS service should the company use to reduce management overhead for this environment?

Amazon Elastic Container Service (Amazon ECS)

A company moves a workload to AWS to run on Amazon EC2 instances. The company needs to run the workload in the most cost-effective way.What can the company do to meet this requirement?

Rightsized all the EC2 instances that are used in the deployment.

Use AWS Key Management Service (AWS KMS).

Use multiple AWS accounts and consolidated billing.

Use AWS CloudFormation to deploy the infrastructure.

Rightsized all the EC2 instances that are used in the deployment.

A company needs to launch an Amazon EC2 instance.Which of the following can the company use during the launch process to configure the root volume of the EC2 instance?

Amazon Data Lifecycle Manager (Amazon DLM)

Amazon Elastic Block Store (Amazon EBS) volume

A company wants an in-memory data store that is compatible with open source in the cloud.Which AWS service should the company use?

Amazon Elastic Block Store (Amazon EBS)

A company wants to improve its security and audit posture by limiting Amazon EC2 inbound access.According to the AWS shared responsibility model, which task is the responsibility of the customer?

Configure logical access controls for resources, and protect account credentials.

Protect the global infrastructure that runs all of the services offered in the AWS Cloud.

Configure logical access controls for resources, and protect account credentials.

Configure the security used by managed services.

Patch and back up Amazon Aurora.

Which task is the responsibility of AWS when using AWS services?

Maintenance of physical and environmental controls

Management of 1AM user permissions

Creation of security group rules for outbound access

Maintenance of physical and environmental controls

Application of Amazon EC2 operating system patches

Which task can a company perform by using security groups in the AWS Cloud?

Allow access to an Amazon EC2 instance through only a specific port.

Deny access to malicious IP addresses at a subnet level.

Protect data that is cached by Amazon CloudFront.

Apply a stateless firewall to an Amazon EC2 instance.

A company wants its Amazon EC2 instances to share the same geographic area but use redundant underlying power sources.Which solution will meet these requirements?

Use EC2 instances across multiple Availability Zones in the same AWS Region.

Use Amazon CloudFront as the database for the EC2 instances.

Use EC2 instances in the same edge location and the same Availability Zone.

Use EC2 instances in AWS OpsWorks stacks in different AWS Regions.

What does "security of the cloud" refer to in the AWS shared responsibility model?

Security of the cloud infrastructure that runs all the AWS services

Availability of AWS services such as Amazon EC2

Security of the cloud infrastructure that runs all the AWS services

Implementation of password policies for 1AM users

Security of customer environments by using AWS Network Firewall partners

Which AWS service is always free of charge for users?

AWS Identity and Access Management (1AM)

Amazon CLF-C02 Practice Test 5 - Free Online Exam Questions 161-200

A company needs to identify the last time that a specific user accessed the AWS Management Console.

Which AWS service will provide this information?

Become a Premium Member for full access

Unlock Premium Member

Amazon CLF-C02 Practice Test 5

Question

Amazon CLF-C02 Practice Tests

Practice Tests