ExamGecko
Home Home / Amazon / CLF-C02

Amazon CLF-C02 Practice Test - Questions Answers, Page 43

Question list
Search
Search

List of questions

Search

Related questions











Which AWS service provides encryption at rest for Amazon RDS and for Amazon Elastic Block Store (Amazon EBS) volumes?

A.
AWS Lambda
A.
AWS Lambda
Answers
B.
AWS Key Management Service (AWS KMS)
B.
AWS Key Management Service (AWS KMS)
Answers
C.
AWSWAF
C.
AWSWAF
Answers
D.
Amazon Rekognition
D.
Amazon Rekognition
Answers
Suggested answer: B

Explanation:

AWS Key Management Service (AWS KMS) is a managed service that enables you to easily encrypt your data. AWS KMS provides you with centralized control of the encryption keys used to protect your data. You can use AWS KMS to encrypt data in Amazon RDS and Amazon EBS volumes12

Which task can only an AWS account root user perform?

A.
Changing the AWS Support plan
A.
Changing the AWS Support plan
Answers
B.
Deleting AWS resources
B.
Deleting AWS resources
Answers
C.
Creating an Amazon EC2 instance key pair
C.
Creating an Amazon EC2 instance key pair
Answers
D.
Configuring AWS WAF
D.
Configuring AWS WAF
Answers
Suggested answer: A

Explanation:

The AWS account root user is the email address that you use to sign up for AWS. The root user has complete access to all AWS services and resources in the account. The root user can perform tasks that only the root user can do, such as changing the AWS Support plan, closing the account, and restoring IAM user permissions34

A company is considering migration to the AWS Cloud. The company wants a fully managed service or feature that can transfer streaming data from multiple sources to an Amazon S3 bucket.

Which AWS service or feature should the company use to meet these requirements?

A.
AWS DataSync
A.
AWS DataSync
Answers
B.
Amazon Kinesis Data Firehose
B.
Amazon Kinesis Data Firehose
Answers
C.
S3 Select
C.
S3 Select
Answers
D.
AWS Transfer Family
D.
AWS Transfer Family
Answers
Suggested answer: B

Explanation:

Amazon Kinesis Data Firehose is a fully managed service that delivers real-time streaming data to destinations such as Amazon S3, Amazon Redshift, Amazon Elasticsearch Service, and Splunk. You can use Amazon Kinesis Data Firehose to capture, transform, and load streaming data from multiple sources, such as web applications, mobile devices, IoT sensors, and social media.

Which Amazon S3 storage class is the MOST cost-effective for long-term storage?

A.
S3 Glacier Deep Archive
A.
S3 Glacier Deep Archive
Answers
B.
S3 Standard
B.
S3 Standard
Answers
C.
S3 Standard-Infrequent Access (S3 Standard-IA)
C.
S3 Standard-Infrequent Access (S3 Standard-IA)
Answers
D.
S3 One Zone-Infrequent Access (S3 One Zone-IA)
D.
S3 One Zone-Infrequent Access (S3 One Zone-IA)
Answers
Suggested answer: A

Explanation:

Amazon S3 Glacier Deep Archive is the lowest-cost storage class in the cloud. It is designed for longterm data archiving that is rarely accessed. It offers a retrieval time of 12 hours and a durability of 99.999999999% (11 9's). It is ideal for data that must be retained for 7 years or longer to meet regulatory compliance requirements.

A company is launching a mobile app. The company wants customers to be able to use the app without upgrading their mobile devices.

Which pillar of the AWS Well-Architected Framework does this goal represent?

A.
Security
A.
Security
Answers
B.
Reliability
B.
Reliability
Answers
C.
Cost optimization
C.
Cost optimization
Answers
D.
Sustainability
D.
Sustainability
Answers
Suggested answer: C

Explanation:

Cost optimization is one of the five pillars of the AWS Well-Architected Framework. It focuses on avoiding unnecessary costs, understanding and controlling where money is being spent, selecting the most appropriate and right number of resource types, analyzing spend over time, and scaling to meet business needs without overspending.

Which AWS service can a company use to find security and compliance reports, including International Organization for Standardization (ISO) reports?

A.
AWS Artifact
A.
AWS Artifact
Answers
B.
Amazon CloudWatch
B.
Amazon CloudWatch
Answers
C.
AWS Config
C.
AWS Config
Answers
D.
AWS Audit Manager
D.
AWS Audit Manager
Answers
Suggested answer: A

Explanation:

AWS Artifact is a self-service portal that provides on-demand access to AWS security and compliance reports and select online agreements. You can use AWS Artifact to download AWS service audit reports, such as ISO, PCI, and SOC, and to accept and manage agreements with AWS, such as the Business Associate Addendum (BAA).

Which database engines does Amazon Aurora support? (Select TWO.)

A.
Oracle
A.
Oracle
Answers
B.
Microsoft SQL Server
B.
Microsoft SQL Server
Answers
C.
MySQL
C.
MySQL
Answers
D.
PostgreSQL
D.
PostgreSQL
Answers
E.
MongoDB
E.
MongoDB
Answers
Suggested answer: C, D

Explanation:

Amazon Aurora is a relational database service that is compatible with MySQL and PostgreSQL engines. It delivers up to five times the performance of MySQL and up to three times the performance of PostgreSQL. It also provides high availability, scalability, security, and durability1

A company's headquarters is located on a different continent from where the majority of the company's customers live. The company wants an AWS Cloud environment setup that will provide the lowest latency to the customers.

A company wants to automate the creation of new AWS accounts and automatically prevent all users from creating Amazon EC2 instances.

Which AWS service provides this functionality?

A.
AWS Service Catalog
A.
AWS Service Catalog
Answers
B.
AWS Organizations
B.
AWS Organizations
Answers
C.
EC2 Image Builder
C.
EC2 Image Builder
Answers
D.
AWS Systems Manager
D.
AWS Systems Manager
Answers
Suggested answer: B

Explanation:

AWS Organizations is a service that enables you to create and manage multiple AWS accounts centrally. You can use AWS Organizations to automate account creation, apply policies to control access and permissions, and consolidate billing across your accounts. You can also use AWS Organizations to prevent users from creating Amazon EC2 instances in certain regions or with certain configurations2

A company needs to set up user authentication for a new application. Users must be able to sign in directly with a user name and password, or through a third-party provider.

Which AWS service should the company use to meet these requirements?

A.
AWS 1AM Identity Center (AWS Single Sign-On)
A.
AWS 1AM Identity Center (AWS Single Sign-On)
Answers
B.
AWS Signer
B.
AWS Signer
Answers
C.
Amazon Cognito
C.
Amazon Cognito
Answers
D.
AWS Directory Service
D.
AWS Directory Service
Answers
Suggested answer: C

Explanation:

Amazon Cognito is a service that provides user authentication and authorization for web and mobile applications. You can use Amazon Cognito to enable users to sign in directly with a user name and password, or through a third-party provider, such as Facebook, Google, or Amazon. You can also use Amazon Cognito to manage user profiles, preferences, and security settings3

Which abilities are benefits of the AWS Cloud? (Select TWO.)

A.
Trade variable expenses for capital expenses.
A.
Trade variable expenses for capital expenses.
Answers
B.
Deploy globally in minutes.
B.
Deploy globally in minutes.
Answers
C.
Plan capacity in advance of deployments.
C.
Plan capacity in advance of deployments.
Answers
D.
Take advantage of economies of scale.
D.
Take advantage of economies of scale.
Answers
E.
Reduce dependencies on network connectivity.
E.
Reduce dependencies on network connectivity.
Answers
Suggested answer: A, B

Explanation:

The AWS Cloud offers many benefits, such as:

Trade variable expenses for capital expenses: You can pay only for the resources you use, instead of investing in fixed costs upfront. This reduces the risk and complexity of planning and managing your IT infrastructure4 Deploy globally in minutes: You can leverage the global infrastructure of AWS to deploy your applications and data in multiple regions and availability zones. This enables you to reach your customers faster, improve performance, and increase reliability5

Total 789 questions
Go to page: of 79