Which aspect of security is the customer's responsibility, according to the AWS shared responsibility model?

Patch and configuration management

Service and communications protection or zone security

Physical and environmental controls

A company wants to store data with high availability, encrypt the data at rest, and have direct access to the data over the internet.Which AWS service will meet these requirements MOST cost-effectively?

Amazon Elastic File System (Amazon EFS)

Amazon Elastic Block Store (AmazonEBS)

Amazon Elastic File System (Amazon EFS)

An auditor is preparing for an annual security audit. The auditor requests certification details for a company's AWS hosted resources across multiple Availability Zones in the us-east-1 Region.How should the company respond to the auditor's request?

Use AWS Artifact to download the applicable report for AWS security controls. Provide the report to the auditor.

Open an AWS Support ticket to request that the AWS technical account manager (TAM) respond and help the auditor.

Open an AWS Support ticket to request that the auditor receive approval to conduct an onsite assessment of the AWS data centers in which the company operates.

Explain to the auditor that AWS does not need to be audited because the company's application is hosted in multiple Availability Zones.

Use AWS Artifact to download the applicable report for AWS security controls. Provide the report to the auditor.

Which benefits can customers gain by using AWS Marketplace? (Select TWO.)

Ability to pay with credit cards

No requirement for product licenses for any products

Free use of all services for the first hour

According to the AWS shared responsibility model, which task is the customer's responsibility?

Updating the guest operating system on Amazon EC2 instances

Maintaining the infrastructure needed to run AWS Lambda

Updating the operating system of Amazon DynamoDB instances

Maintaining Amazon S3 infrastructure

Updating the guest operating system on Amazon EC2 instances

Which of the following actions are controlled with AWS Identity and Access Management (1AM)?(Select TWO.)

Control access to AWS service APIs and to other specific resources.

Protect the AWS environment using multi-factor authentication (MFA).

Control access to AWS service APIs and to other specific resources.

Provide intelligent threat detection and continuous monitoring.

Protect the AWS environment using multi-factor authentication (MFA).

Grant users access to AWS data centers.

Provide firewall protection for applications from common web attacks.

A company needs to securely store important credentials that an application uses to connect users to a database.Which AWS service can meet this requirement with the MINIMAL amount of operational overhead?

AWS Key Management Service (AWS KMS)

Which task does AWS perform automatically?

Encrypt data that is stored in Amazon DynamoDB.

Create TLS certificates for users' websites.

In the AWS shared responsibility model, which tasks are the responsibility of AWS? (Select TWO.)

Monitor the health of an Availability Zone.

Protect the infrastructure that runs Amazon EC2 instances.

Patch an Amazon EC2 instance operating system.

Monitor the health of an Availability Zone.

Protect the infrastructure that runs Amazon EC2 instances.

Manage access to the data in an Amazon S3 bucket

A company's IT team is managing MySQL database server clusters. The IT team has to patch the database and take backup snapshots of the data in the clusters. The company wants to move this workload to AWS so that these tasks will be completed automatically.What should the company do to meet these requirements?

Use Amazon RDS with a MySQL database.

Deploy MySQL database server clusters on Amazon EC2 instances.

Use Amazon RDS with a MySQL database.

Use an AWS CloudFormation template to deploy MySQL database servers on Amazon EC2 instances.

Migrate all the MySQL database data to Amazon S3.

A company wants to use the latest technologies and wants to minimize its capital investment.Instead of upgrading on-premises infrastructure, the company wants to move to the AWS Cloud.Which AWS Cloud benefit does this scenario describe?

The trade of infrastructure expenses for operating expenses

The ability to go global in minutes

A company wants to migrate its server-based applications to the AWS Cloud. The company wants to determine the total cost of ownership for its compute resources that will be hosted on the AWS Cloud.Which combination of AWS services or tools will meet these requirements?

AWS Application Discovery Service

AWS Database Migration Service (AWS DMS)

A company is planning to migrate to the AWS Cloud and wants to become more responsive to customer inquiries and feedback. The company wants to focus on organizational transformation.A company wants to give its customers the ability to view specific data that is hosted in Amazon S3 buckets. The company wants to keep control over the full datasets that the company shares with the customers.Which S3 feature will meet these requirements?

S3 Cross-Region Replication (CRR)

S3 Versioning D.S3 Access Points

Which AWS services can limit manual errors by consistently provisioning AWS resources in multiple envirom

AWS Cloud Development Kit (AWS CDK)

A company is preparing to launch a redesigned website on AWS. Users from around the world will download digital handbooks from the website.Which AWS solution should the company use to provide these static files securely?

Amazon CloudFront with Amazon S3

Amazon EC2 instances with an Application Load Balancer

Amazon Elastic File System (Amazon EFS)

Which AWS service or tool offers consolidated billing?

AWS Trusted Advisor A company wants to limit its employees' AWS access to a portfolio of predefined AWS resources.

Which AWS solution should the company use to meet this requirement?

AWS software development kits (SDKs)

Which tasks are customer responsibilities, according to the AWS shared responsibility model? (Select TWO.)

Configure the AWS provided security group firewall.

Classify company assets in the AWS Cloud.

Configure the AWS provided security group firewall.

Classify company assets in the AWS Cloud.

Determine which Availability Zones to use for Amazon S3 buckets.

Patch or upgrade Amazon DynamoDB.

Select Amazon EC2 instances to run AWS Lambda on.

A company is running an Amazon EC2 instance in a VPC.An ecommerce company is using Amazon EC2 Auto Scaling groups to manage a fleet of web servers running on Amazon EC2.This architecture follows which AWS Well-Architected Framework best practice?

Decouple infrastructure components

Which tasks are the responsibility of the customer, according to the AWS shared responsibility model? (Select TWO.)

Grant least privilege access to 1AM users.

Patch the Amazon RDS operating system.

Upgrade the firmware of the network infrastructure.

Maintain physical access control in an AWS Region.

Grant least privilege access to 1AM users.

Amazon CLF-C02 Practice Test 8 - Free Online Exam Questions 281-320

A company has an Amazon S3 bucket containing images of scanned financial invoices. The company is building an artificial intelligence (Al)-based application on AWS. The company wants the application to identify and read total balance amounts on the invoices.

Which AWS service will meet these requirements?

Become a Premium Member for full access

Unlock Premium Member

Amazon CLF-C02 Practice Test 8

Question

Amazon CLF-C02 Practice Tests

Practice Tests