CLF-C02 practice questions 211–220

1. Question 211 · 712 in bank

   Select 2

   Which tasks are customer responsibilities, according to the AWS shared responsibility model? (Choose two.)

   • AConfigure the AWS provided security group firewall.
   • BClassify company assets in the AWS Cloud.
   • CDetermine which Availability Zones to use for Amazon S3 buckets.
   • DPatch or upgrade Amazon DynamoDB.
   • ESelect Amazon EC2 instances to run AWS Lambda on.

   Show answer

   Answer: AB

   Explanation

   A. Configure the AWS provided security group firewall: Customers are responsible for configuring and managing security group firewalls to control inbound and outbound traffic to their AWS resources. B. Classify company assets in the AWS Cloud: Asset classification is typically a customer responsibility as part of their data governance and security practices. The other options are not accurate in the context of customer responsibilities: C. Determine which Availability Zones to use for Amazon S3 buckets: This is more of a design decision and falls under the AWS management responsibilities. D. Patch or upgrade Amazon DynamoDB: Patching or upgrading services like Amazon DynamoDB is managed by AWS. Customers are not responsible for patching or upgrading the underlying infrastructure or services provided by AWS. E. Select Amazon EC2 instances to run AWS Lambda on: The selection of underlying infrastructure for serverless services like AWS Lambda is managed by AWS. Customers focus on writing and deploying functions without managing the underlying instances.

   Source: Adapted from community discussion — TheFivePips

   References

   • AWS documentation
   • AWS documentation

   Next question

2. Question 212 · 712 in bank

   A company plans to run a compute-intensive workload that uses graphics processing units (GPUs). Which Amazon EC2 instance type should the company use?

   • AAccelerated computing
   • BCompute optimized
   • CStorage optimized
   • DGeneral purpose

   Show answer

   Answer: A

   Explanation

   Accelerated computing instances (such as those from the P, G, and F instance families) use GPU units to improve performance in workloads such as graphics and data processing.

   Source: Adapted from community discussion — Tony_99_08

   References

   • AWS documentation
   • AWS documentation

   Next question

3. Question 213 · 712 in bank

   Select 2

   Which of the following are features of network ACLs as they are used in the AWS Cloud? (Choose two.)

   • AThey are stateless.
   • BThey are stateful.
   • CThey evaluate all rules before allowing traffic.
   • DThey process rules in order, starting with the lowest numbered rule, when deciding whether to allow traffic.
   • EThey operate at the instance level.

   Show answer

   Answer: AD

   Explanation

   Rule number. Rules are evaluated starting with the lowest numbered rule. As soon as a rule matches traffic, it's applied regardless of any higher-numbered rule that might contradict it. NACLs are stateless, which means that information about previously sent or received traffic is not saved. https://docs.aws.amazon.com/vpc/latest/userguide/vpc-network-acls.html

   Source: Adapted from community discussion — petercorn

   References

   • AWS documentation

   Next question

4. Question 214 · 712 in bank

   Select 2

   Which capabilities are in the platform perspective of the AWS Cloud Adoption Framework (AWS CAF)? (Choose two.)

   • APerformance and capacity management
   • BData engineering
   • CContinuous integration and continuous delivery (CI/CD)
   • DInfrastructure protection
   • EChange and release management

   Show answer

   Answer: BC

   Explanation

   B. Data engineering: This capability focuses on managing data pipelines, data storage, and data processing workflows to enable efficient data management and analytics in the cloud. C. Continuous integration and continuous delivery (CI/CD): This capability involves implementing automated processes for building, testing, and deploying software applications in a continuous manner, ensuring faster delivery cycles and improved software quality. https://docs.aws.amazon.com/prescriptive-guidance/latest/aws-caf-platform-perspective/welcome.html

   Source: Adapted from community discussion — chalaka

   References

   • AWS documentation
   • AWS documentation
   • AWS documentation

   Next question

5. Question 215 · 712 in bank

   According to the AWS shared responsibility model, the customer is responsible for applying the latest security updates and patches for which of the following?

   • AAmazon DynamoDB
   • BAmazon EC2 instances
   • CAmazon RDS instances
   • DAmazon S3

   Show answer

   Answer: B

   Next question

6. Question 216 · 712 in bank

   Which Amazon S3 storage class is MOST cost-effective for unknown access patterns?

   • AS3 Standard
   • BS3 Standard-Infrequent Access (S3 Standard-IA)
   • CS3 One Zone-Infrequent Access (S3 One Zone-IA)
   • DS3 Intelligent-Tiering

   Show answer

   Answer: D

   Explanation

   D. S3 Intelligent-Tiering S3 Intelligent-Tiering is the most cost-effective option for unknown access patterns. It automatically moves objects between two access tiers (frequent and infrequent access) based on changing access patterns. This helps optimize costs for data with unknown or changing access patterns.

   Source: Adapted from community discussion — Mike1987

   References

   • AWS documentation

   Next question

7. Question 217 · 712 in bank

   A company has a managed IAM policy that does not grant the necessary permissions for users to accomplish required tasks. How can this be resolved?

   • AEnable AWS Shield Advanced.
   • BCreate a custom IAM policy.
   • CUse a third-party web application firewall (WAF) managed rule from the AWS Marketplace.
   • DUse AWS Key Management Service (AWS KMS) to create a customer-managed key.

   Show answer

   Answer: B

   Explanation

   B. Create a custom IAM policy. If the existing managed IAM policy does not provide the necessary permissions, you can create a custom IAM policy tailored to the specific permissions required by the users. This allows you to define and grant the permissions needed for the tasks.

   Source: Adapted from community discussion — Mike1987

   References

   • AWS documentation
   • AWS documentation

   Next question

8. Question 218 · 712 in bank

   Who is responsible for managing IAM user access and secret keys according to the AWS shared responsibility model?

   • AIAM access and secret keys are static, so there is no need to rotate them.
   • BThe customer is responsible for rotating keys.
   • CAWS will rotate the keys whenever required.
   • DThe AWS Support team will rotate keys when requested by the customer.

   Show answer

   Answer: B

   Next question

9. Question 219 · 712 in bank

   A company needs to run a pre-installed third-party firewall on an Amazon EC2 instance. Which AWS service or feature can provide this solution?

   • ANetwork ACLs
   • BSecurity groups
   • CAWS Marketplace
   • DAWS Trusted Advisor

   Show answer

   Answer: C

   Explanation

   AWS Marketplace allows you to find, purchase, and deploy a wide range of pre-configured third-party software, including firewall solutions, on your Amazon EC2 instances.

   Source: Adapted from community discussion — Sandy1254

   Next question

10. Question 220 · 712 in bank

    Which AWS Cloud benefit gives a company the ability to quickly deploy cloud resources to access compute, storage, and database infrastructures in a matter of minutes?

    • AElasticity
    • BCost savings
    • CAgility
    • DReliability

    Show answer

    Answer: C

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

CLF-C02 practice, question 211. 712 questions available.