CLF-C02 practice questions 81–90

1. Question 81 · 712 in bank

   Which AWS service should users use to learn about AWS service availability and operations?

   • AAmazon EventBridge
   • BAWS Service Catalog
   • CAWS Control Tower
   • DAWS Health Dashboard

   Show answer

   Answer: D

   Explanation

   Amazon EventBridge (incorrect)is a serverless event bus that ingests data from your own apps. AWS Service Catalog(incorrect) enables organizations to create and manage catalogs of IT services that are approved for AWS. AWS Control Tower(incorrect) orchestrates multiple AWS services on your behalf while maintaining the security and compliance needs of your organization. AWS Health(correct) notifies you about service events, planned changes, and account notifications to help you manage and take actions

   Source: Adapted from community discussion — Rinkans

   References

   • AWS documentation
   • AWS documentation

   Next question

2. Question 82 · 712 in bank

   Which AWS service or tool can be used to capture information about inbound and outbound traffic in an Amazon VPC?

   • AVPC Flow Logs
   • BAmazon Inspector
   • CVPC endpoint services
   • DNAT gateway

   Show answer

   Answer: A

   References

   • AWS documentation

   Next question

3. Question 83 · 712 in bank

   What is the customer ALWAYS responsible for managing, according to the AWS shared responsibility model?

   • ASoftware licenses
   • BNetworking
   • CCustomer data
   • DEncryption keys

   Show answer

   Answer: C

   References

   • AWS documentation

   Next question

4. Question 84 · 712 in bank

   Which AWS service can be used to retrieve compliance reports on demand?

   • AAWS Secrets Manager
   • BAWS Artifact
   • CAWS Security Hub
   • DAWS Certificate Manager

   Show answer

   Answer: B

   Next question

5. Question 85 · 712 in bank

   Which AWS service enables users to check for vulnerabilities on Amazon EC2 instances by using predefined assessment templates?

   • AAWS WAF
   • BAWS Trusted Advisor
   • CAmazon Inspector
   • DAWS Shield

   Show answer

   Answer: C

   References

   • AWS documentation
   • AWS documentation

   Next question

6. Question 86 · 712 in bank

   A company plans to migrate to the AWS Cloud. The company is gathering information about its on-premises infrastructure and requires information such as the hostname, IP address, and MAC address. Which AWS service will meet these requirements?

   • AAWS DataSync
   • BAWS Application Migration Service
   • CAWS Application Discovery Service
   • DAWS Database Migration Service (AWS DMS)

   Show answer

   Answer: C

   Explanation

   AWS Application Discovery Service collects both server and database configuration information. Server information includes hostnames, IP addresses, MAC addresses, as well as the resource allocation and utilization details of key resources such as CPU, network, memory, and disk.

   Source: Adapted from community discussion — abbey0922

   References

   • AWS documentation
   • AWS documentation
   • AWS documentation
   • AWS documentation

   Next question

7. Question 87 · 712 in bank

   Which action will help increase security in the AWS Cloud?

   • AEnable programmatic access for all IAM users.
   • BUse IAM users instead of IAM roles to delegate permissions.
   • CRotate access keys on a reoccurring basis.
   • DUse inline policies instead of customer managed policies.

   Show answer

   Answer: C

   Explanation

   IAM access keys work as credentials for programmatic access. Credentials should be rotated or changed on a periodic time frame. For this reason it is considered a security best practice to rotate access keys.

   Source: Adapted from community discussion — petercorn

   Next question

8. Question 88 · 712 in bank

   A company is planning to migrate its application to the AWS Cloud. Which AWS tool or set of resources should the company use to analyze and assess its readiness for migration?

   • AAWS Cloud Adoption Framework (AWS CAF)
   • BAWS Pricing Calculator
   • CAWS Well-Architected Framework
   • DAWS Budgets

   Show answer

   Answer: A

   Explanation

   Why not A? We are talking about measuring the readiness to migrate (or adopt) to the cloud service. The CAF supports the fact to be prepared from some areas such as people, business, governance, operation, security, etc. I think this is the right answer guys, correct me if I'm wrong but the well-architected framework is focused on an operation that is already on the cloud that's why it looks for operational excellence, reliability, sustainability, etc.

   Source: Adapted from community discussion — db97

   References

   • AWS documentation

   Next question

9. Question 89 · 712 in bank

   Which of the following describes some of the core functionality of Amazon S3?

   • AAmazon S3 is a high-performance block storage service that is designed for use with Amazon EC2.
   • BAmazon S3 is an object storage service that provides high-level performance, security, scalability, and data availability.
   • CAmazon S3 is a fully managed, highly reliable, and scalable file storage system that is accessible over the industry-standard SMB protocol.
   • DAmazon S3 is a scalable, fully managed elastic NFS for use with AWS Cloud services and on-premises resources.

   Show answer

   Answer: B

   Explanation

   Amazon Simple Storage Service (Amazon S3) is an object storage service that offers industry-leading scalability, data availability, security, and performance.

   Source: Adapted from community discussion — Rinkans

   Next question

10. Question 90 · 712 in bank

    A company is storing sensitive customer data in an Amazon S3 bucket. The company wants to protect the data from accidental deletion or overwriting. Which S3 feature should the company use to meet these requirements?

    • AS3 Lifecycle rules
    • BS3 Versioning
    • CS3 bucket policies
    • DS3 server-side encryption

    Show answer

    Answer: B

    Explanation

    The Correct answer is B. Versioning in Amazon S3 is a means of keeping multiple variants of an object in the same bucket. You can use the S3 Versioning feature to preserve, retrieve, and restore every version of every object stored in your buckets. Versioning-enabled buckets can help you recover objects from accidental deletion or overwrite. For example, if you delete an object, Amazon S3 inserts a delete marker instead of removing the object permanently. https://docs.aws.amazon.com/AmazonS3/latest/userguide/Versioning.html

    Source: Adapted from community discussion — Anyio

    References

    • AWS documentation

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

CLF-C02 practice, question 81. 712 questions available.