ExamGecko
Home Home / Amazon / CLF-C02

Amazon CLF-C02 Practice Test - Questions Answers, Page 17

Question list
Search
Search

List of questions

Search

Related questions











A company needs to identify the last time that a specific user accessed the AWS Management Console.

Which AWS service will provide this information?

A.
Amazon Cognito
A.
Amazon Cognito
Answers
B.
AWS CloudTrail
B.
AWS CloudTrail
Answers
C.
Amazon Inspector
C.
Amazon Inspector
Answers
D.
Amazon GuardDuty
D.
Amazon GuardDuty
Answers
Suggested answer: B

Explanation:

AWS CloudTrail is the service that will provide the information about the last time that a specific user accessed the AWS Management Console. AWS CloudTrail is a service that records the API calls and events made by or on behalf of your AWS account. You can use AWS CloudTrail to view, search, and download the history of AWS console sign-in events, which include the user name, date, time, source IP address, and other details of the sign-in activity. Amazon Cognito, Amazon Inspector, and Amazon GuardDuty are not services that will provide this information. Amazon Cognito is a service that provides user authentication and authorization for web and mobile applications. Amazon Inspector is a service that assesses the security and compliance of your applications running on AWS.

Amazon GuardDuty is a service that monitors your AWS account and workloads for malicious or unauthorized activity.

A company's application stores data in an Amazon S3 bucket. The company has an AWS Lambda function that processes data in the S3 bucket. The company needs to invoke the function once a day at a specific time.

Which AWS service should the company use to meet this requirement?

A.
AWS Managed Services (AMS)
A.
AWS Managed Services (AMS)
Answers
B.
AWS CodeStar
B.
AWS CodeStar
Answers
C.
Amazon EventBridge
C.
Amazon EventBridge
Answers
D.
AWS Step Functions
D.
AWS Step Functions
Answers
Suggested answer: C

Explanation:

Amazon EventBridge is the service that the company should use to meet the requirement of invoking the Lambda function once a day at a specific time. Amazon EventBridge is a serverless event bus service that allows you to easily connect your applications with data from AWS services, SaaS applications, and your own applications. You can use Amazon EventBridge to create rules that match events and route them to targets such as AWS Lambda functions, Amazon SNS topics, Amazon SQS queues, or other AWS services. You can also use Amazon EventBridge to create scheduled rules that trigger your targets at a specific time or interval, such as once a day. AWS Managed Services (AMS), AWS CodeStar, and AWS Step Functions are not services that the company should use to meet this requirement. AMS is a service that provides operational management for your AWS infrastructure and applications. AWS CodeStar is a service that provides a unified user interface for managing software development projects on AWS. AWS Step Functions is a service that coordinates multiple AWS services into serverless workflows.

A company uses Amazon Aurora as its database service. The company wants to encrypt its databases and database backups.

Which party manages the encryption of the database clusters and database snapshots, according to the AWS shared responsibility model?

A.
AWS
A.
AWS
Answers
B.
The company
B.
The company
Answers
C.
AWS Marketplace partners
C.
AWS Marketplace partners
Answers
D.
Third-party partners
D.
Third-party partners
Answers
Suggested answer: A

Explanation:

AWS manages the encryption of the database clusters and database snapshots for Amazon Aurora, as well as the encryption keys. This is part of the AWS shared responsibility model, where AWS is responsible for the security of the cloud, and the customer is responsible for the security in the cloud. Encryption is one of the security features that AWS provides to protect the data at rest and in transit. For more information, see Amazon Aurora FAQs and AWS Shared Responsibility Model.

Which AWS solution gives companies the ability to use protocols such as NFS to store and retrieve objects in Amazon S3?

A.
Amazon FSx for Lustre
A.
Amazon FSx for Lustre
Answers
B.
AWS Storage Gateway volume gateway
B.
AWS Storage Gateway volume gateway
Answers
C.
AWS Storage Gateway file gateway
C.
AWS Storage Gateway file gateway
Answers
D.
Amazon Elastic File System (Amazon EFS)
D.
Amazon Elastic File System (Amazon EFS)
Answers
Suggested answer: C

Explanation:

AWS Storage Gateway file gateway allows companies to use protocols such as NFS and SMB to store and retrieve objects in Amazon S3. File gateway provides a seamless integration between onpremises applications and Amazon S3, and enables low-latency access to data through local caching.

File gateway also supports encryption, compression, and lifecycle management of the objects in Amazon S3. For more information, see What is AWS Storage Gateway? and File Gateway.

A company is launching a new application in the AWS Cloud. The application will run on an Amazon EC2 instance. More EC2 instances will be needed when the workload increases.

Which AWS service or tool can the company use to launch the number of EC2 instances that will be needed to handle the workload?

A.
Elastic Load Balancing
A.
Elastic Load Balancing
Answers
B.
Amazon EC2 Auto Scaling
B.
Amazon EC2 Auto Scaling
Answers
C.
AWS App2Container (A2C)
C.
AWS App2Container (A2C)
Answers
D.
AWS Systems Manager
D.
AWS Systems Manager
Answers
Suggested answer: B

Explanation:

Amazon EC2 Auto Scaling is the AWS service or tool that can help the company launch the number of EC2 instances that will be needed to handle the workload. Amazon EC2 Auto Scaling automatically adjusts the capacity of the EC2 instances based on the demand and the predefined scaling policies.

Amazon EC2 Auto Scaling also helps to improve availability and reduce costs by scaling in and out as needed. For more information, see What is Amazon EC2 Auto Scaling? and [Getting Started with Amazon EC2 Auto Scaling].

Which design principle is achieved by following the reliability pillar of the AWS Well-Architected Framework?

A.
Vertical scaling
A.
Vertical scaling
Answers
B.
Manual failure recovery
B.
Manual failure recovery
Answers
C.
Testing recovery procedures
C.
Testing recovery procedures
Answers
D.
Changing infrastructure manually
D.
Changing infrastructure manually
Answers
Suggested answer: C

Explanation:

: Testing recovery procedures is the design principle that is achieved by following the reliability pillar of the AWS Well-Architected Framework. The reliability pillar focuses on the ability of a system to recover from failures and prevent disruptions. Testing recovery procedures helps to ensure that the system can handle different failure scenarios and restore normal operations as quickly as possible.

Testing recovery procedures also helps to identify and mitigate any risks or gaps in the system design and implementation. For more information, see [Reliability Pillar] and [Testing for Reliability].

What is a benefit of moving to the AWS Cloud in terms of improving time to market?

A.
Decreased deployment speed
A.
Decreased deployment speed
Answers
B.
Increased application security
B.
Increased application security
Answers
C.
Increased business agility
C.
Increased business agility
Answers
D.
Increased backup capabilities
D.
Increased backup capabilities
Answers
Suggested answer: C

Explanation:

Increased business agility is a benefit of moving to the AWS Cloud in terms of improving time to market. Business agility refers to the ability of a company to adapt to changing customer needs, market conditions, and competitive pressures. Moving to the AWS Cloud enables business agility by providing faster access to resources, lower upfront costs, and greater scalability and flexibility. By using the AWS Cloud, companies can launch new products and services, experiment with new ideas, and respond to customer feedback more quickly and efficiently. For more information, see [Benefits of Cloud Computing] and [Business Agility].

In which of the following AWS services should database credentials be stored for maximum security?

A.
AWS Identity and Access Management (1AM)
A.
AWS Identity and Access Management (1AM)
Answers
B.
AWS Secrets Manager
B.
AWS Secrets Manager
Answers
C.
Amazon S3
C.
Amazon S3
Answers
D.
AWS Key Management Service (AWS KMS)
D.
AWS Key Management Service (AWS KMS)
Answers
Suggested answer: B

Explanation:

AWS Secrets Manager is the AWS service where database credentials should be stored for maximum security. AWS Secrets Manager helps to protect the secrets, such as database credentials, passwords, API keys, and tokens, that are used to access applications, services, and resources. AWS Secrets Manager enables secure storage, encryption, rotation, and retrieval of the secrets. AWS Secrets Manager also integrates with other AWS services, such as AWS Identity and Access Management (IAM), AWS Key Management Service (AWS KMS), and AWS Lambda. For more information, see [What is AWS Secrets Manager?] and [Getting Started with AWS Secrets Manager].

A company needs to configure rules to identify threats and protect applications from malicious network access.

Which AWS service should the company use to meet these requirements?

A.
AWS Identity and Access Management (1AM)
A.
AWS Identity and Access Management (1AM)
Answers
B.
Amazon QuickSight
B.
Amazon QuickSight
Answers
C.
AWS WAF
C.
AWS WAF
Answers
D.
Amazon Detective
D.
Amazon Detective
Answers
Suggested answer: C

Explanation:

AWS WAF is the AWS service that the company should use to configure rules to identify threats and protect applications from malicious network access. AWS WAF is a web application firewall that helps to filter, monitor, and block malicious web requests based on customizable rules. AWS WAF can be integrated with other AWS services, such as Amazon CloudFront, Amazon API Gateway, and Application Load Balancer. For more information, see What is AWS WAF? and How AWS WAF Works.

Which option is an advantage of AWS Cloud computing that minimizes variable costs?

A.
High availability
A.
High availability
Answers
B.
Economies of scale
B.
Economies of scale
Answers
C.
Global reach
C.
Global reach
Answers
D.
Agility
D.
Agility
Answers
Suggested answer: B

Explanation:

Economies of scale is the advantage of AWS Cloud computing that minimizes variable costs.

Economies of scale refers to the reduction in the cost per unit as the output increases. AWS Cloud computing leverages economies of scale by providing a large pool of shared resources that can be accessed on demand and paid for as needed. AWS Cloud computing also passes the cost savings to the customers by offering lower prices and discounts. For more information, see Economies of Scale and AWS Pricing.

Total 789 questions
Go to page: of 79