CLF-C02 practice questions 471–480

1. Question 471 · 712 in bank

   A company needs to host an application in a specific geographic area to comply with regulations. Which feature of the AWS global infrastructure will help the company meet this requirement?

   • AScalability
   • BGlobal footprint
   • CAvailability
   • DPerformance

   Show answer

   Answer: B

   Explanation

   B. Global footprint The AWS global footprint consists of multiple Regions and Availability Zones around the world. Each AWS Region is a separate geographic area that contains multiple, isolated locations known as Availability Zones. By choosing the appropriate AWS Region, the company can ensure that their application and data are hosted in a specific geographic location, thereby complying with regulatory requirements regarding data residency and locality.

   Source: Adapted from community discussion — MUTA

   Next question

2. Question 472 · 712 in bank

   Which AWS service is a cloud security posture management (CSPM) service that aggregates alerts from various AWS services and partner products in a standardized format?

   • AAWS Security Hub
   • BAWS Trusted Advisor
   • CAmazon EventBridge
   • DAmazon GuardDuty

   Show answer

   Answer: A

   Explanation

   AWS Security Hub: A cloud security posture management (CSPM) service that aggregates and prioritizes security findings from various AWS services and integrated partner products. It provides a centralized view of security alerts and compliance status, helping users to identify and remediate security issues. AWS Trusted Advisor: Provides recommendations for optimizing AWS resources for cost savings, performance, security, and fault tolerance. While it offers security-related checks, it is not specifically a CSPM service. Amazon EventBridge: An event bus service that enables event-driven architectures. It is not focused on CSPM or security alert aggregation. Amazon GuardDuty: A threat detection service that continuously monitors for malicious activity and unauthorized behavior in AWS accounts. It generates findings related to security threats, but is not a CSPM service for aggregating alerts in a standardized format.

   Source: Adapted from community discussion — TheFivePips

   References

   • AWS documentation

   Next question

3. Question 473 · 712 in bank

   Select 2

   An ecommerce company plans to move its data center workload to the AWS Cloud to support highly dynamic usage patterns. Which benefits make the AWS Cloud cost-effective for the migration of this type of workload? (Choose two.)

   • AReliability
   • BSecurity
   • CElasticity
   • DPay-as-you-go resource
   • EHigh availability

   Show answer

   Answer: CD

   Explanation

   C. Elasticity - allows company to scale resources up and down, supporting their highly dynamic usage patterns D. Pay-as-you-go resource - makes it cost-effective

   Source: Adapted from community discussion — ShaiTay

   Next question

4. Question 474 · 712 in bank

   When designing AWS workloads to be operational even when there are component failures, what is an AWS best practice?

   • APerform quarterly disaster recovery tests.
   • BPlace the main component on the us-east-1 Region.
   • CDesign for automatic failover to healthy resources.
   • DDesign workloads to fit on a single Amazon EC2 instance.

   Show answer

   Answer: C

   Next question

5. Question 475 · 712 in bank

   Which of the following can the AWS Pricing Calculator do?

   • AProject monthly AWS costs.
   • BCalculate historical AWS costs.
   • CProvide in-depth information about AWS pricing strategies.
   • DProvide users with access to their monthly bills.

   Show answer

   Answer: A

   Next question

6. Question 476 · 712 in bank

   Which AWS solution gives companies the ability to use protocols such as NFS to store and retrieve objects in Amazon S3?

   • AAmazon FSx for Lustre
   • BAWS Storage Gateway volume gateway
   • CAWS Storage Gateway file gateway
   • DAmazon Elastic File System (Amazon EFS)

   Show answer

   Answer: C

   Explanation

   While Amazon FSx for Lustre supports NFS and can integrate with Amazon S3 for high-performance workloads (such as caching data from S3), it is primarily intended for use cases requiring high-performance computing (HPC) and parallel data processing. Its purpose is to optimize compute-heavy tasks by providing a fast file system that can process large-scale data, not to serve as a storage gateway solution for seamlessly storing and retrieving data from S3 via NFS. The correct answer was C. AWS Storage Gateway file gateway, because AWS Storage Gateway file gateway is specifically designed to allow companies to use NFS (or SMB) protocols to store and retrieve data directly in S3. It acts as a bridge between on-premises environments and Amazon S3, enabling easy integration for businesses that want to store their files as objects in S3.

   Source: Adapted from community discussion — veljkosbbb

   Next question

7. Question 477 · 712 in bank

   Select 2

   A user has been granted permission to change their own IAM user password. Which AWS services can the user use to change the password? (Choose two.)

   • AAWS Command Line Interface (AWS CLI)
   • BAWS Key Management Sen/ice (AWS KMS)
   • CAWS Management Console
   • DAWS Resource Access Manager (AWS RAM)
   • EAWS Secrets Manager

   Show answer

   Answer: AC

   Next question

8. Question 478 · 712 in bank

   Which task is the customer's responsibility, according to the AWS shared responsibility model?

   • APatch a guest operating system that is deployed on an Amazon EC2 instance.
   • BControl physical access to an AWS data center.
   • CControl access to AWS underlying hardware.
   • DPatch a host operating system that is deployed on Amazon S3.

   Show answer

   Answer: A

   Next question

9. Question 479 · 712 in bank

   Which AWS service or feature provides a firewall at the subnet level within a VPC?

   • ASecurity group
   • BNetwork ACL
   • CElastic network interface
   • DAWS WAF

   Show answer

   Answer: B

   Next question

10. Question 480 · 712 in bank

    A company wants to use automated video analysis to identify employees that are accessing its offices. Which AWS service will meet this requirement?

    • AAmazon Rekognition
    • BAmazon Polly
    • CAmazon Cognito
    • DAWS Lambda

    Show answer

    Answer: A

    Explanation

    Amazon Rekognition is a cloud-based image and video analysis service that makes it easy to add advanced computer vision capabilities to your applications. The service is powered by proven deep learning technology and it requires no machine learning expertise to use. Amazon Rekognition includes a simple, easy-to-use API that can quickly analyze any image or video file that’s stored in Amazon S3. You can add features that detect objects, text, unsafe content, analyze images/videos, and compare faces to your application using Rekognition's APIs. With Amazon Rekognition's face recognition APIs, you can detect, analyze, and compare faces for a wide variety of use cases, including user verification, cataloging, people counting, and public safety. https://docs.aws.amazon.com/rekognition/latest/dg/what-is.html

    Source: Adapted from community discussion — blasdelezo

    References

    • AWS documentation

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

CLF-C02 practice, question 471. 712 questions available.