CLF-C02 practice questions 111–120

1. Question 111 · 712 in bank

   A company has deployed applications on Amazon EC2 instances. The company needs to assess application vulnerabilities and must identify infrastructure deployments that do not meet best practices. Which AWS service can the company use to meet these requirements?

   • AAWS Trusted Advisor
   • BAmazon Inspector
   • CAWS Config
   • DAmazon GuardDuty

   Show answer

   Answer: B

   Explanation

   Inspector is all about security assessments of AWS based applications and their configurations against known vulnerabilities. GuardDuty is all about continuously and automatically process different foundational data sources such as CloudTrail event logs, VPC flow logs and DNS logs to find potential security threat over an entire AWS account not just only with applications and it also uses threat intelligence feeds, such as lists of malicious IP addresses and domains, and machine learning to identify unexpected, potentially unauthorized, and malicious activity within AWS environment. So as far as assessment is concerned Inspector is the right answer.

   Source: Adapted from community discussion — BShelat

   References

   • AWS documentation

   Next question

2. Question 112 · 712 in bank

   An online gaming company needs to choose a purchasing option to run its Amazon EC2 instances for 1 year. The web traffic is consistent, and any increases in traffic are predictable. The EC2 instances must be online and available without any disruption. Which EC2 instance purchasing option will meet these requirements MOST cost-effectively?

   • AOn-Demand Instances
   • BReserved Instances
   • CSpot Instances
   • DSpot Fleet

   Show answer

   Answer: B

   Explanation

   The Correct answer is B. Amazon EC2 Reserved Instances (RI) provide a significant discount (up to 72%) compared to On-Demand pricing and provide a capacity reservation when used in a specific Availability Zone. Terms (avg. discount off On-Demand) - 1yr (40%), 3yr (60%) https://aws.amazon.com/ec2/pricing/reserved-instances/

   Source: Adapted from community discussion — Anyio

   References

   • AWS documentation

   Next question

3. Question 113 · 712 in bank

   Select 2

   Which actions are the responsibility of AWS, according to the AWS shared responsibility model? (Choose two.)

   • ASecuring the virtualization layer
   • BPatching the operating system on Amazon EC2 instances
   • CEnforcing a strict password policy for IAM users
   • DPatching the operating system on Amazon RDS instances
   • EConfiguring security groups and network ACLs

   Show answer

   Answer: AD

   Explanation

   D is correct. The trick is they are talking about Amazon RDS - the database service. They are responsible for the hardware, database engine and any O/S patching. There is an article here : https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_UpgradeDBInstance.Maintenance.html

   Source: Adapted from community discussion — GriffXX

   References

   • AWS documentation
   • AWS documentation

   Next question

4. Question 114 · 712 in bank

   A company is storing data that will not be frequently accessed in the AWS Cloud. If the company needs to access the data, the data needs to be retrieved within 12 hours. The company wants a solution that is cost-effective for storage costs for each gigabyte. Which Amazon S3 storage class will meet these requirements?

   • AS3 Standard
   • BS3 Glacier Flexible Retrieval
   • CS3 One Zone-Infrequent Access (S3 One Zone-IA)
   • DS3 Standard-Infrequent Access (S3 Standard-IA)

   Show answer

   Answer: B

   Explanation

   The Correct Answer is B: S3 One Zone-IA (Infrequent Access) costs $0.01/GB whereas S3 Glacier Flexible costs $0.0036/GB. See: https://aws.amazon.com/s3/pricing/?nc=sn&loc=4

   Source: Adapted from community discussion — BigMF

   References

   • AWS documentation
   • AWS documentation

   Next question

5. Question 115 · 712 in bank

   Which AWS service or resource can be used to identify services that have been used by a user within a specified date range?

   • AAmazon S3 access control lists (ACLs)
   • BAWS Certificate Manager (ACM)
   • CNetwork Access Analyzer
   • DAWS Identity and Access Management Access Analyzer

   Show answer

   Answer: D

   Explanation

   IAM Access Analyzer is integrated with AWS CloudTrail, a service that provides a record of actions taken by a user, role, or an AWS service in IAM Access Analyzer. https://docs.aws.amazon.com/IAM/latest/UserGuide/logging-using-cloudtrail.html

   Source: Adapted from community discussion — petercorn

   References

   • AWS documentation

   Next question

6. Question 116 · 712 in bank

   A company needs to engage third-party consultants to help maintain and support its AWS environment and the company’s business needs. Which AWS service or resource will meet these requirements?

   • AAWS Support
   • BAWS Organizations
   • CAWS Service Catalog
   • DAWS Partner Network (APN)

   Show answer

   Answer: D

   Explanation

   D. AWS Partner Network (APN) The AWS Partner Network (APN) is designed to help companies find qualified third-party consultants, software vendors, and managed service providers who are specialized in working with AWS services. APN Partners offer various levels of support and expertise to assist with maintaining and optimizing AWS environments based on specific business needs.

   Source: Adapted from community discussion — azhrhsn

   References

   • AWS documentation

   Next question

7. Question 117 · 712 in bank

   A company wants to create Amazon QuickSight dashboards every week by using its billing data. Which AWS feature or tool can the company use to meet these requirements?

   • AAWS Budgets
   • BAWS Cost Explorer
   • CAWS Cost and Usage Report
   • DAWS Cost Anomaly Detection

   Show answer

   Answer: C

   Explanation

   How Cost and Usage Reports work After you create a Cost and Usage Report, AWS sends your report to the Amazon S3 bucket that you specify. AWS updates your report at least once a day until your charges are finalized. Your report files consist of a .csv file or a collection of .csv files and a manifest file. You can choose to configure your report data for integration with Amazon Athena, Amazon Redshift, or Amazon QuickSight. https://docs.aws.amazon.com/cur/latest/userguide/what-is-cur.html

   Source: Adapted from community discussion — petercorn

   References

   • AWS documentation

   Next question

8. Question 118 · 712 in bank

   A company is planning to move data backups to the AWS Cloud. The company needs to replace on-premises storage with storage that is cloud-based but locally cached. Which AWS service meets these requirements?

   • AAWS Storage Gateway
   • BAWS Snowcone
   • CAWS Backup
   • DAmazon Elastic File System (Amazon EFS)

   Show answer

   Answer: A

   Explanation

   The correct answer is A. AWS Storage Gateway. AWS Storage Gateway is a service that connects on-premises storage systems to AWS Cloud Storage Systems. It offers several deployment options, including an option that provides locally cached Cloud Storage.

   Source: Adapted from community discussion — VikJo1978

   References

   • AWS documentation
   • AWS documentation

   Next question

9. Question 119 · 712 in bank

   A company needs to organize its resources and track AWS costs on a detailed level. The company needs to categorize costs by business department, environment, and application. Which solution will meet these requirements?

   • AAccess the AWS Cost Management console to organize resources, set an AWS budget, and receive notifications of unintentional usage.
   • BUse tags to organize the resources. Activate cost allocation tags to track AWS costs on a detailed level.
   • CCreate Amazon CloudWatch dashboards to visually organize and track costs individually.
   • DAccess the AWS Billing and Cost Management dashboard to organize and track resource consumption on a detailed level.

   Show answer

   Answer: B

   Explanation

   Per Robot: To effectively organize resources and track AWS costs based on business department, environment, and application, the most suitable solution is B. Use tags to organize the resources and activate cost allocation tags. Here’s why: Tags for Cost Allocation: Tags allow you to label your AWS resources with metadata. By assigning relevant tags (such as department, environment, or application) to your resources, you can categorize them effectively. Cost allocation tags specifically help you track costs at a detailed level by associating costs with specific tags. For example, you can tag resources with labels like “Marketing,” “Development,” “Production,” etc. AWS then aggregates costs based on these tags, providing granular insights into spending patterns. This approach allows you to allocate costs accurately and understand which departments, projects, or applications are consuming resources and incurring costs.

   Source: Adapted from community discussion — Lomtom

   References

   • AWS documentation

   Next question

10. Question 120 · 712 in bank

    A company needs to plan, schedule, and run hundreds of thousands of computing jobs on AWS. Which AWS service can the company use to meet this requirement?

    • AAWS Step Functions
    • BAWS Service Catalog
    • CAmazon Simple Queue Service (Amazon SQS)
    • DAWS Batch

    Show answer

    Answer: D

    Explanation

    D is correct "AWS Batch Fully managed batch processing at any scale • Efficiently run 100,000s of computing batch jobs on AWS • A “batch” job is a job with a start and an end (opposed to continuous) • Batch will dynamically launch EC2 instances or Spot Instances • AWS Batch provisions the right amount of compute / memory"

    Source: Adapted from community discussion — asdfcdsxdfc

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

CLF-C02 practice, question 111. 712 questions available.