CLF-C02 practice questions 21–30

1. Question 21 · 712 in bank

   A company wants an automated process to continuously scan its Amazon EC2 instances for software vulnerabilities. Which AWS service will meet these requirements?

   • AAmazon GuardDuty
   • BAmazon Inspector
   • CAmazon Detective
   • DAmazon Cognito

   Show answer

   Answer: B

   Explanation

   "Amazon Inspector is an automated vulnerability management service that continually scans Amazon Elastic Compute Cloud (EC2), AWS Lambda functions, and container workloads for software vulnerabilities and unintended network exposure." Reference: https://aws.amazon.com/inspector/faqs/

   Source: Adapted from community discussion — isaphiltrick

   References

   • AWS documentation

   Next question

2. Question 22 · 712 in bank

   A company needs to perform data processing once a week that typically takes about 5 hours to complete. Which AWS service should the company use for this workload?

   • AAWS Lambda
   • BAmazon EC2
   • CAWS CodeDeploy
   • DAWS Wavelength

   Show answer

   Answer: B

   Explanation

   The best AWS service for a workload that needs to be processed once a week for about 5 hours is Amazon EC2. AWS Lambda is a serverless computing service that runs your code without provisioning or managing servers. However, Lambda functions have a maximum execution time of 15 minutes. Therefore, Lambda is not suitable for workloads that need to run for longer than 15 minutes. Amazon EC2 is a scalable computing service that provides instances with varying capabilities and pricing options. You can choose an EC2 instance that is right for your data processing job and then terminate the instance when the job is complete. This will help you to save money on your AWS bill.

   Source: Adapted from community discussion — geloNSE

   References

   • AWS documentation

   Next question

3. Question 23 · 712 in bank

   Which AWS service or feature provides log information of the inbound and outbound traffic on network interfaces in a VPC?

   • AAmazon CloudWatch Logs
   • BAWS CloudTrail
   • CVPC Flow Logs
   • DAWS Identity and Access Management (IAM)

   Show answer

   Answer: C

   Explanation

   The correct answer is C. VPC flow logs is a feature that enables you to capture information about the IP traffic going to and from network interfaces in your VPC. Flow logs data can be published to either Amazon CloudWatch Logs or Amazon S3. You can monitor your VPC flow logs to gain operational visibility about your network dependencies and traffic patterns, detect anomalies and prevent data leakage, or troubleshoot network connectivity and configuration issues. https://aws.amazon.com/vpc/faqs/#:~:text=VPC%20flow%20logs%20is%20a,network%20interfaces%20in%20your%20VPC.

   Source: Adapted from community discussion — Anyio

   References

   • AWS documentation

   Next question

4. Question 24 · 712 in bank

   A company wants to manage deployed IT services and govern its infrastructure as code (IaC) templates. Which AWS service will meet this requirement?

   • AAWS Resource Explorer
   • BAWS Service Catalog
   • CAWS Organizations
   • DAWS Systems Manager

   Show answer

   Answer: B

   Explanation

   The answer is B. AWS Service Catalog lets you centrally manage your cloud resources to achieve governance at scale of your infrastructure as code (IaC) templates, written in CloudFormation or Terraform configurations. With AWS Service Catalog, you can meet your compliance requirements while making sure your customers can quickly deploy the cloud resources they need. https://aws.amazon.com/servicecatalog/

   Source: Adapted from community discussion — Anyio

   References

   • AWS documentation
   • AWS documentation
   • AWS documentation

   Next question

5. Question 25 · 712 in bank

   A company wants to design a centralized storage system to manage the configuration data and passwords for its critical business applications. Which AWS service or capability will meet these requirements MOST cost-effectively?

   • AAWS Systems Manager Parameter Store
   • BAWS Secrets Manager
   • CAWS Config
   • DAmazon S3

   Show answer

   Answer: A

   Explanation

   both are correct but the question here is the MOST cost effective and that is Parameter Store that is free while Secret Manager is $1 per secret

   Source: Adapted from community discussion — Ruffyit

   References

   • AWS documentation
   • AWS documentation

   Next question

6. Question 26 · 712 in bank

   A company plans to deploy containers on AWS. The company wants full control of the compute resources that host the containers. Which AWS service will meet these requirements?

   • AAmazon Elastic Kubernetes Service (Amazon EKS)
   • BAWS Fargate
   • CAmazon EC2
   • DAmazon Elastic Container Service (Amazon ECS)

   Show answer

   Answer: C

   Explanation

   C. Amazon EC2 Amazon EC2 (Elastic Compute Cloud) provides resizable compute capacity and allows you to have full control over the underlying infrastructure. With EC2, you can launch instances and deploy containers on them using container orchestration tools like Docker or Kubernetes while retaining control over the configuration, scaling, and management of the underlying virtual servers. This option provides the flexibility and control needed for managing compute resources directly.

   Source: Adapted from community discussion — chalaka

   References

   • AWS documentation
   • AWS documentation

   Next question

7. Question 27 · 712 in bank

   Which AWS service or feature allows users to create new AWS accounts, group multiple accounts to organize workflows, and apply policies to groups of accounts?

   • AAWS Identity and Access Management (IAM)
   • BAWS Trusted Advisor
   • CAWS CloudFormation
   • DAWS Organizations

   Show answer

   Answer: D

   Explanation

   ChatGPT: The AWS service that allows users to create new AWS accounts, group multiple accounts to organize workflows, and apply policies to groups of accounts is AWS Organizations. AWS Organizations enables you to consolidate multiple AWS accounts into an organization that you create and centrally manage. This helps you to better manage billing and cost allocation, apply policies across your accounts, and simplify resource sharing between accounts. With AWS Organizations, you can create organizational units (OUs) to group accounts based on your organizational structure. You can also apply Service Control Policies (SCPs) to control permissions at the root, OU, or account level. This allows you to enforce security and compliance requirements across your entire organization. In summary, AWS Organizations is the service that provides the features you mentioned for managing multiple AWS accounts within an organization.

   Source: Adapted from community discussion — Jason3354

   References

   • AWS documentation
   • AWS documentation
   • AWS documentation

   Next question

8. Question 28 · 712 in bank

   A company wants to store and retrieve files in Amazon S3 for its existing on-premises applications by using industry-standard file system protocols. Which AWS service will meet these requirements?

   • AAWS DataSync
   • BAWS Snowball Edge
   • CAmazon S3 File Gateway
   • DAWS Transfer Family

   Show answer

   Answer: C

   Explanation

   C. Amazon S3 File Gateway A S3 File Gateway simplifies file storage in Amazon S3, integrates to existing applications through industry-standard file system protocols, and provides a cost-effective alternative to on-premises storage. It also provides low-latency access to data through transparent local caching. A S3 File Gateway manages data transfer to and from AWS, buffers applications from network congestion, optimizes and streams data in parallel, and manages bandwidth consumption. https://docs.aws.amazon.com/filegateway/latest/files3/what-is-file-s3.html

   Source: Adapted from community discussion — SimonBird

   References

   • AWS documentation
   • AWS documentation
   • AWS documentation

   Next question

9. Question 29 · 712 in bank

   A company wants to block SQL injection attacks. Which AWS service or feature should the company use to meet this requirement?

   • AAWS WAF
   • BNetwork ACLs
   • CSecurity groups
   • DAWS Certificate Manager (ACM)

   Show answer

   Answer: A

   References

   • AWS documentation

   Next question

10. Question 30 · 712 in bank

    A company wants a unified tool to provide a consistent method to interact with AWS services. Which AWS service or tool will meet this requirement?

    • AAWS CLI
    • BAmazon Elastic Container Service (Amazon ECS)
    • CAWS Cloud9
    • DAWS Virtual Private Network (AWS VPN)

    Show answer

    Answer: A

    Explanation

    "The AWS Command Line Interface (AWS CLI) is a unified tool to manage your AWS services. With just one tool to download and configure, you can control multiple AWS services from the command line and automate them through scripts." Reference: https://aws.amazon.com/cli/

    Source: Adapted from community discussion — isaphiltrick

    References

    • AWS documentation

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

CLF-C02 practice, question 21. 712 questions available.