Amazon Amazon Certifications CLF-C02 Questions & Answers

• Question 21:

  Which abilities are benefits of the AWS Cloud? (Choose two.)

  A. Trade variable expenses for capital expenses.

  B. Deploy globally in minutes.

  C. Plan capacity in advance of deployments.

  D. Take advantage of economies of scale.

  E. Reduce dependencies on network connectivity.

  Correct Answer: BD

• Question 22:

  Which AWS security service protects applications from distributed denial of service attacks with always-on detection and automatic inline mitigations?

  A. Amazon Inspector

  B. AWS Web Application Firewall (AWS WAF)

  C. Elastic Load Balancing (ELB)

  D. AWS Shield

  Correct Answer: D

• Question 23:

  A company needs to plan, schedule, and run hundreds of thousands of computing jobs on AWS. Which AWS service can the company use to meet this requirement?

  A. AWS Step Functions

  B. AWS Service Catalog

  C. Amazon Simple Queue Service (Amazon SQS)

  D. AWS Batch

  Correct Answer: D

• Question 24:

  Which AWS services or features provide high availability and low latency by enabling failover across different AWS Regions? (Choose two.)

  A. Amazon Route 53

  B. Network Load Balancer

  C. Amazon S3 Transfer Acceleration

  D. AWS Global Accelerator

  E. Application Load Balancer

  Correct Answer: AD

• Question 25:

  Which of the following is a way to use Amazon EC2 Auto Scaling groups to scale capacity in the AWS Cloud?

  A. Scale the number of EC2 instances in or out automatically, based on demand.

  B. Use serverless EC2 instances.

  C. Scale the size of EC2 instances up or down automatically, based on demand.

  D. Transfer unused CPU resources between EC2 instances.

  Correct Answer: A

• Question 26:

  Which task is a responsibility of AWS, according to the AWS shared responsibility model?

  A. Configure identity and access management for applications.

  B. Manage encryption options for data that is stored on AWS.

  C. Configure security groups for Amazon EC2 instances.

  D. Maintain the physical hardware of the infrastructure.

  Correct Answer: D

• Question 27:

  A company has an Amazon EC2 instance in a private subnet. The company wants to initiate a connection to the internet to pull operating system updates while preventing traffic from the internet from accessing the EC2 instance. Which AWS managed service allows this?

  A. VPC endpoint

  B. NAT gateway

  C. Amazon PrivateLink

  D. VPC peering

  Correct Answer: B

• Question 28:

  Which actions are the responsibility of AWS, according to the AWS shared responsibility model? (Choose two.)

  A. Securing the virtualization layer

  B. Patching the operating system on Amazon EC2 instances

  C. Enforcing a strict password policy for IAM users

  D. Patching the operating system on Amazon RDS instances

  E. Configuring security groups and network ACLs

  Correct Answer: AD

• Question 29:

  A company is storing data that will not be frequently accessed in the AWS Cloud. If the company needs to access the data, the data needs to be retrieved within 12 hours. The company wants a solution that is cost-effective for storage costs

  for each gigabyte.

  Which Amazon S3 storage class will meet these requirements?

  A. S3 Standard

  B. S3 Glacier Flexible Retrieval

  C. S3 One Zone-Infrequent Access (S3 One Zone-IA)

  D. S3 Standard-Infrequent Access (S3 Standard-IA)

  Correct Answer: B

• Question 30:

  Which AWS service or resource can be used to identify services that have been used by a user within a specified date range?

  A. Amazon S3 access control lists (ACLs)

  B. AWS Certificate Manager (ACM)

  C. Network Access Analyzer

  D. AWS Identity and Access Management Access Analyzer

  Correct Answer: D