0% found this document useful (0 votes)
135 views21 pages

clf-c02 2

The document provides a series of exam questions and answers for the AWS Certified Cloud Practitioner (CLF-C02) exam, including topics on AWS services, shared responsibility model, and security measures. It also promotes the purchase of exam dumps from SurePassExam, highlighting the availability of new questions. The content emphasizes understanding AWS services and their management responsibilities for certification success.

Uploaded by

jodypark201
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PDF, TXT or read online on Scribd
0% found this document useful (0 votes)
135 views21 pages

clf-c02 2

The document provides a series of exam questions and answers for the AWS Certified Cloud Practitioner (CLF-C02) exam, including topics on AWS services, shared responsibility model, and security measures. It also promotes the purchase of exam dumps from SurePassExam, highlighting the availability of new questions. The content emphasizes understanding AWS services and their management responsibilities for certification success.

Uploaded by

jodypark201
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PDF, TXT or read online on Scribd
You are on page 1/ 21

Recommend!!

Get the Full CLF-C02 dumps in VCE and PDF From SurePassExam
https://www.surepassexam.com/CLF-C02-exam-dumps.html (120 New Questions)

Amazon-Web-Services
Exam Questions CLF-C02
AWS Certified Cloud Practitioner

Passing Certification Exams Made Easy visit - https://www.surepassexam.com


Recommend!! Get the Full CLF-C02 dumps in VCE and PDF From SurePassExam
https://www.surepassexam.com/CLF-C02-exam-dumps.html (120 New Questions)

NEW QUESTION 1
- (Exam Topic 1)
A user has been granted permission to change their own IAM user password. Which AWS services can the user use to change the password? (Select TWO.)

A. AWS Command Line Interface (AWS CLI)


B. AWS Key Management Service (AWS KMS)
C. AWS Management Console
D. AWS Resource Access Manager (AWS RAM)
E. AWS Secrets Manager

Answer: AC

NEW QUESTION 2
- (Exam Topic 1)
A company wants to migrate its on-premises Microsoft SQL Server database server to the AWS Cloud. The company has decided to use Amazon EC2 instances
to run this database.
Which of the following is the company responsible for managing, according to the AWS shared responsibility model?

A. EC2 hypervisor
B. Security patching of the guest operating system
C. Network connectivity of the host server
D. Uptime service level agreement (SLA) for the EC2 instances

Answer: B

NEW QUESTION 3
- (Exam Topic 1)
Which controls are shared under the AWS shared responsibility model? (Select TWO.)

A. Awareness and training


B. Patching of Amazon RDS
C. Configuration management
D. Physical and environmental controls
E. Service and communications protection or security

Answer: AC

Explanation:
In the AWS shared security model, a shared control, AWS provides the requirements for the infrastructure and the customer must provide their own control
implementation within their use of AWS services.
Examples of shared controls include:
*Patch Management – AWS is responsible for patching and fixing flaws within the infrastructure, but customers are responsible for patching their guest OS and
applications.
*Configuration Management – AWS maintains the configuration of its infrastructure devices, but a customer is responsible for configuring their own guest operating
systems, databases, and applications.
*Awareness & Training – AWS trains AWS employees, but a customer must train their own employees. Customer Specific – Controls which are solely the
responsibility of the customer based on the application they are deploying within AWS services.
Examples of customer specific controls include:
*Service and Communications Protection or Zone Security which may require a customer to route or zone data within specific security environments.

NEW QUESTION 4
- (Exam Topic 1)
Which tasks require use of the AWS account root user? (Select TWO.)

A. Changing an AWS Support plan


B. Modifying an Amazon EC2 instance type
C. Grouping resources in AWS Systems Manager
D. Running applications in Amazon Elastic Kubernetes Service (Amazon EKS)
E. Closing an AWS account

Answer: AE

NEW QUESTION 5
- (Exam Topic 1)
A company needs to run an application on Amazon EC2 instances. The instances cannot be interrupted at any time. The company needs an instance purch asing
option that requires no long-term commitment or upfront payment. Which instance purchasing option will meet these requirements MOST cost-effectively ?

A. On-Demand Instances
B. Spot Instances
C. Dedicated Hosts
D. Reserved Instances

Answer: A

NEW QUESTION 6
- (Exam Topic 1)

Passing Certification Exams Made Easy visit - https://www.surepassexam.com


Recommend!! Get the Full CLF-C02 dumps in VCE and PDF From SurePassExam
https://www.surepassexam.com/CLF-C02-exam-dumps.html (120 New Questions)

Which AWS benefit enables users to deploy cloud infrastructure that consists of multiple geographic regions connected by a network with low latency, high
throughput, and redundancy?

A. Economies of scale
B. Security
C. Elasticity
D. Global reach

Answer: C

Explanation:
The AWS Global Cloud Infrastructure is the most secure, extensive, and reliable cloud platform, offering over 200 fully featured services from data centers globally.
Whether you need to deploy your application workloads across the globe in a single click, or you want to build and deploy specific applications closer to your end-
users with single-digit millisecond latency, AWS provides you the cloud infrastructure where and when you need it.

NEW QUESTION 7
- (Exam Topic 1)
According to the AWS shared responsibility model, which activities are the customer's responsibility for security in the AWS Cloud? (Select TWO.)

A. Hardware maintenance
B. Amazon EC2 operating system patching
C. API access control for AWS resources
D. Configuration management of infrastructure devices
E. Maintenance of an Availability Zone

Answer: BC

NEW QUESTION 8
- (Exam Topic 1)
Which Amazon S3 feature or storage class uses the AWS backbone network and edge locations to reduce latencies from the end user to Amazon S3?

A. S3 Cross-Region Replication
B. S3 Transfer Acceleration
C. S3 Event Notifications
D. S3 Standard-Infrequent Access (S3 Standard-IA)

Answer: B

Explanation:
S3TA improves transfer performance by routing traffic through Amazon CloudFront's globally distributed Edge Locations and over AWS backbone networks, and
by using network protocol optimizations.

NEW QUESTION 9
- (Exam Topic 1)
Which AWS service should a company use to create a NoSQL database?

A. Amazon Aurora
B. Amazon DynamoDB
C. Amazon Redshift
D. Amazon Neptune

Answer: B

NEW QUESTION 10
- (Exam Topic 1)
Which of the following are characteristics of AWS WAF? (Select TWO.)

A. Acts as a firewall that controls inbound and outbound traffic between Amazon EC2 instances
B. Acts as a firewall that controls inbound and outbound traffic between subnets
C. Gives users the ability to block traffic that has specific HTTP headers
D. Protects websites that are not hosted on AWS
E. Scans Amazon EC2 instances for common vulnerabilities

Answer: BC

Explanation:
AWS WAF lets you create rules to filter web traffic based on conditions that include IP addresses, HTTP headers and body, or custom URIs. This gives you an
additional layer of protection from web attacks that attempt to exploit vulnerabilities in custom or third party web applications. In addition, AWS WAF makes it easy
to create rules that block common web exploits like SQL injection and cross site scripting.
AWS WAF allows you to create a centralized set of rules that you can deploy across multiple websites. This means that in an environment with many websites and
web applications you can create a single set of rules that you can reuse across applications rather than recreating that rule on every application you want to
protect.

NEW QUESTION 10
- (Exam Topic 1)
A company requires an isolated environment within AWS for security purposes. Which action can be taken to accomplish this?

A. Create a separate Availability Zone to host the resources.

Passing Certification Exams Made Easy visit - https://www.surepassexam.com


Recommend!! Get the Full CLF-C02 dumps in VCE and PDF From SurePassExam
https://www.surepassexam.com/CLF-C02-exam-dumps.html (120 New Questions)

B. Create a separate VPC to host the resources.


C. Create a placement group to host the resources.
D. Create an AWS Direct Connect connection between the company and AWS.

Answer: B

Explanation:
Network isolation A virtual private cloud (VPC) is a virtual network in your own logically isolated area in the AWS Cloud. Use separate VPCs to isolate
infrastructure by workload or organizational entity. A subnet is a range of IP addresses in a VPC. When you launch an instance, you launch it into a subnet in your
VPC. Use subnets to isolate the tiers of your application (for example, web, application, and database) within a single VPC. Use private subnets for your instances
if they should not be accessed directly from the internet. To call the Amazon EC2 API from your VPC without sending traffic over the public internet, use AWS
PrivateLink. https://docs.aws.amazon.com/AWSEC2/latest/WindowsGuide/infrastructure-security.html

NEW QUESTION 13
- (Exam Topic 1)
A company wants to secure its consumer web application by using SSL/TLS to encrypt traffic. Which AWS service can the company use to meet this goal?

A. AWS WAF
B. AWS Shield
C. Amazon VPC
D. AWS Certificate Manager (ACM)

Answer: D

Explanation:
To enable HTTPS connections to your website or application in AWS, you need an SSL/TLS server certificate. For certificates in a Region supported by AWS
Certificate Manager (ACM), we recommend that you use ACM to provision, manage, and deploy your server certificates.

NEW QUESTION 16
- (Exam Topic 1)
Which AWS services provide high availability across multiple Availability Zones by default? (Select TWO.)

A. Amazon EC2
B. Amazon Elastic Block Store (Amazon EBS)
C. Amazon Elastic File System (Amazon EFS)
D. Amazon Redshift
E. Amazon S3

Answer: BD

NEW QUESTION 21
- (Exam Topic 1)
Which pillar of the AWS Well-Architected Framework includes the continual improvement of processes and procedures as a priority?

A. Cost optimization
B. Reliability
C. Performance efficiency
D. Operational excellence

Answer: C

NEW QUESTION 22
- (Exam Topic 1)
Which of the following is a way to use Amazon EC2 Auto Scaling groups to scale capacity in the AWS Cloud?

A. Scale the number of EC2 instances in or out automatically, based on demand.


B. Use serverless EC2 instances.
C. Scale the size of EC2 instances up or down automatically, based on demand.
D. Transfer unused CPU resources between EC2 instances.

Answer: A

NEW QUESTION 26
- (Exam Topic 1)
A company needs to audit its AWS resources. The company must document any changes that have been made to the resources. Which AWS service will meet
these requirements?

A. AWS Artifact
B. AWS Config
C. Amazon Inspector
D. Amazon CloudWatch

Answer: B

NEW QUESTION 28
- (Exam Topic 1)

Passing Certification Exams Made Easy visit - https://www.surepassexam.com


Recommend!! Get the Full CLF-C02 dumps in VCE and PDF From SurePassExam
https://www.surepassexam.com/CLF-C02-exam-dumps.html (120 New Questions)

How does consolidated billing help reduce costs for a company that has multiple AWS accounts?

A. It aggregates usage across accounts so that the company can reach volume discount thresholds sooner.
B. It offers an additional 5% discount on purchases of All Upfront Reserved Instances.
C. It provides a simplified billing invoice that the company can process more quickly than a standard invoice.
D. It gives AWS resellers the ability to bill their customers for usage.

Answer: A

Explanation:
Consolidated billing for AWS Organizations
You can use the consolidated billing feature in AWS Organizations to consolidate billing and payment for multiple AWS accounts or multiple Amazon Internet
Services Pvt. Ltd (AISPL) accounts. Every organization in AWS Organizations has a management account that pays the charges of all the member accounts. For
more information about organizations, see the AWS Organizations User Guide.
Consolidated billing has the following benefits:
*One bill – You get one bill for multiple accounts.
*Easy tracking – You can track the charges across multiple accounts and download the combined cost and usage data.
*Combined usage – You can combine the usage across all accounts in the organization to share the volume pricing discounts, Reserved Instance discounts, and
Savings Plans. This can result in a lower charge for your project, department, or company than with individual standalone accounts. For more information, see
Volume discounts.
*No extra fee – Consolidated billing is offered at no additional cost. Note:
The member account bills are for informational purpose only. The management account might reallocate the additional volume discounts, Reserved Instance, or
Savings Plans discounts that your account receives.
If you have access to the management account, you can see a combined view of the AWS charges that the member accounts incur. You also can get a cost report
for each member account.
AWS and AISPL accounts can't be consolidated together. If your contact address is in India, you can use AWS Organizations to consolidate AISPL accounts within
your organization.
Important
When a member account leaves an organization, the member account can no longer access Cost Explorer data that was generated when the account was in the
organization. The data isn't deleted, and the management account in the organization can still access the data. If the member account rejoins the organization, the
member account can access the data again.

NEW QUESTION 29
- (Exam Topic 1)
A company needs a centralized, secure way to create and manage cryptographic keys. The company will use the keys across a wide range of AWS services and
applications. The company needs to track and document when the keys are created, used, and deleted.
Which AWS service or feature will meet these requirements?

A. AWS Secrets Manager


B. AWS License Manager
C. AWS Systems Manager Parameter Store
D. AWS Key Management Service (AWS KMS)

Answer: D

Explanation:
AWS Key Management Service (AWS KMS) makes it easy for you to create and manage cryptographic keys and control their use across a wide range of AWS
services and in your applications. AWS KMS is a secure and resilient service that uses hardware security modules that have been validated under FIPS 140-2, or
are in the process of being validated, to protect your keys. AWS KMS is integrated with AWS CloudTrail to provide you with logs of all key usage to help meet your
regulatory and compliance needs.

NEW QUESTION 33
- (Exam Topic 1)
Which Reserved Instance (Rl) provides the HIGHEST average cost savings compared to an On-Demand Instance?

A. 1-yea
B. No Upfron
C. Standard Rl
D. 1-yea
E. All Upfron
F. Convertible Rl
G. 3-yea
H. All Upfront, Standard Rl
I. 3-yea
J. No Upfron
K. Convertible Rl

Answer: C

Explanation:
https://aws.amazon.com/ec2/pricing/reserved-instances/pricing/

NEW QUESTION 38
- (Exam Topic 1)
A company needs an AWS Support plan that provides programmatic case management through the AWS Support API.
Which support plan will meet this requirement MOST cost-effectively?

A. AWS Business Support


B. AWS Basic Support
C. AWS Developer Support

Passing Certification Exams Made Easy visit - https://www.surepassexam.com


Recommend!! Get the Full CLF-C02 dumps in VCE and PDF From SurePassExam
https://www.surepassexam.com/CLF-C02-exam-dumps.html (120 New Questions)

D. AWS Enterprise Support

Answer: B

NEW QUESTION 40
- (Exam Topic 1)
Which AWS services can use AWS WAF to protect against common web exploitations? (Select TWO.)

A. Amazon Route 53
B. Amazon CloudFront
C. AWS Transfer Family
D. AWS Site-to-Site VPN
E. Amazon API Gateway

Answer: BE

Explanation:
AWS WAF can be deployed on Amazon CloudFront, the Application Load Balancer (ALB), Amazon API Gateway, and AWS AppSync. As part of Amazon
CloudFront it can be part of your Content Distribution Network (CDN) protecting your resources and content at the Edge locations.

NEW QUESTION 45
- (Exam Topic 1)
Which AWS service keeps track of SSL/TLS certificates, creates new certificates, and processes renewals?

A. AWS Identity and Access Management (1AM)


B. AWS Certificate Manager (ACM)
C. AWS Config
D. AWS Trusted Advisor

Answer: B

Explanation:
AWS Certificate Manager helps manage the challenges of maintaining SSL/TLS certificates, including certificate renewals so you don't have to worry about
expiring certificates. Learn more about provisioning, managing, and deploying public and private SSL/TLS certificates.

NEW QUESTION 47
- (Exam Topic 1)
Which AWS service provides alerts when an AWS event may impact a company's AWS resources?

A. AWS Personal Health Dashboard


B. AWS Service Health Dashboard
C. AWS Trusted Advisor
D. AWS Infrastructure Event Management

Answer: C

NEW QUESTION 48
- (Exam Topic 1)
Which service is an AWS in-memory data store service?

A. Amazon Aurora
B. Amazon RDS
C. Amazon DynamoDB
D. Amazon ElastiCache

Answer: D

NEW QUESTION 49
- (Exam Topic 1)
A company is using Amazon RDS.
Which task is the company's responsibility, according to the AWS shared responsibility model?

A. Apply encryption options for the database.


B. Manage the underlying server hardware on which Amazon RDS runs.
C. Apply patches to the underlying operating system.
D. Apply minor patches to the database.

Answer: A

NEW QUESTION 51
- (Exam Topic 1)
A company wants to analyze streaming user data and respond to customer queries in real time. Which AWS service can meet these requirements?

A. Amazon QuickSight
B. Amazon Redshift
C. Amazon Kinesis Data Analytics

Passing Certification Exams Made Easy visit - https://www.surepassexam.com


Recommend!! Get the Full CLF-C02 dumps in VCE and PDF From SurePassExam
https://www.surepassexam.com/CLF-C02-exam-dumps.html (120 New Questions)

D. AWS Data Pipeline

Answer: C

Explanation:
Amazon Kinesis is the AWS service that makes it easy to collect, process, and analyze such real-time, streaming data with four different capabilities: Kinesis Data
Streams: Enables ingesting, buffering, and custom processing of your streaming data.

NEW QUESTION 55
- (Exam Topic 1)
Which of the following are AWS best practice recommendations for the use of AWS Identity and Access Management (IAM)? (Select TWO.)

A. Use the AWS account root user for daily access.


B. Use access keys and secret access keys on Amazon EC2.
C. Rotate credentials on a regular basis.
D. Create a shared set of access keys for system administrators.
E. Configure multi-factor authentication (MFA).

Answer: CE

Explanation:
If you do have an access key for your AWS account root user, delete it. If you must keep it, rotate (change) the access key regularly. To delete or rotate your root
user access keys, go to the My Security Credentials page in the AWS Management Console and sign in with your account's email address and password. You can
manage your access keys in the Access keys section. For more information about rotating access keys, see Rotating access keys.

NEW QUESTION 60
- (Exam Topic 1)
Which AWS service or feature enables users to block the incoming or outgoing traffic associated with specific IP addresses flowing through a VPC?

A. Network ACLs
B. Security groups
C. AWS Identity and Access Management (1AM)
D. AWS WAF

Answer: D

Explanation:
To allow or block specific IP addresses for your EC2 instances, usneeatwork Access Control List (ACL) or
security group rules in your VPC. Network ACLs and security group rules act as firewalls allowing or
blocking IP addresses from accessing your resources

NEW QUESTION 65
- (Exam Topic 1)
Which of the following describes some of the core functionality of Amazon S3?

A. Amazon S3 is a high-performance block storage service that is designed for use with Amazon EC2
B. Amazon S3 is an object storage service that provides high-level performance, security, scalability, and data availability.
C. Amazon S3 is a fully managed, highly reliable, and scalable file storage system that is accessible over the industry-standard SMB protocol.
D. Amazon S3 is a scalable, fully managed elastic NFS for use with AWS Cloud services and on-premises resources.

Answer: B

Explanation:
Amazon S3 is object storage built to store and retrieve any amount of data from anywhere. It’s a simple storage service that offers industry leading durability,
availability, performance, security, and virtually unlimited scalability at very low costs.

NEW QUESTION 66
- (Exam Topic 1)
What is a benefit of moving to the AWS Cloud in terms of improving time to market?

A. Decreased deployment speed


B. Increased application security
C. Increased business agility
D. Increased backup capabilities

Answer: C

NEW QUESTION 67
- (Exam Topic 1)
Who can create and manage access keys for an AWS account root user?

A. The AWS account owner


B. An IAM user that has administrator permissions
C. IAM users within a designated group
D. An IAM user that has the required role

Answer: A

Passing Certification Exams Made Easy visit - https://www.surepassexam.com


Recommend!! Get the Full CLF-C02 dumps in VCE and PDF From SurePassExam
https://www.surepassexam.com/CLF-C02-exam-dumps.html (120 New Questions)

Explanation:
Anyone who has root user credentials for your AWS account has unrestricted access to all the resources in your account, including billing information. When you
create access keys, you create the access key ID and secret access key as a set.

NEW QUESTION 72
- (Exam Topic 1)
Which of the following is the customer responsible for updating and patching, according to the AWS shared responsibility model?

A. Amazon FSx for Windows File Server


B. Amazon Workspaces virtual Windows desktop
C. AWS Directory Service for Microsoft Active Directory
D. Amazon RDS for Microsoft SQL Server

Answer: B

NEW QUESTION 77
- (Exam Topic 2)
A system administrator notices that several Amazon EC2 instances nave been terminated. The system administrator needs to identity the user or AWS API call
that terminated these instances. Which AWS service should the system administrator use to meet this requirement?

A. AWS Trusted Advisor


B. AWS CloudTrail
C. Amazon Inspector
D. Amazon Detective

Answer: B

NEW QUESTION 81
- (Exam Topic 2)
Which component of the AWS global infrastructure does Amazon CloudFront use to deliver content to end users with low latency?

A. Edge locations
B. AWS Regions
C. Availability Zones
D. AWS Direct Connect connections

Answer: A

NEW QUESTION 84
- (Exam Topic 2)
A company has stopped all of its Amazon EC2 instances but monthly billing charges continue to occur. What could be causing this? (Select TWO.)

A. Amazon Elastic Block Store (Amazon EBS) storage charges


B. Operating system charges
C. Hardware charges
D. Elastic IP charges
E. Input/output (I/O) charges

Answer: AD

NEW QUESTION 88
- (Exam Topic 2)
What should a user do if the user loses an IAM secret access key?

A. Retrieve the secret access key by using the IAM console.


B. Create a new user with a new access key and a new secret access key.
C. Rotate the secret access key.
D. Request a new secret access key from AWS Support.

Answer: C

NEW QUESTION 92
- (Exam Topic 2)
Which AWS service can a company use to access compliance documentation and AWS agreements?

A. AWS Security Hub


B. AWS Identity and Access Management (1AM)
C. AWS Artifact
D. AWS Certificate Manager (ACM)

Answer: C

NEW QUESTION 97
- (Exam Topic 2)
A company wants to receive alerts when resources that are launched in the company's AWS account reach 80% of their service quotas. Which AWS service

Passing Certification Exams Made Easy visit - https://www.surepassexam.com


Recommend!! Get the Full CLF-C02 dumps in VCE and PDF From SurePassExam
https://www.surepassexam.com/CLF-C02-exam-dumps.html (120 New Questions)

should the company use to meet this requirement?

A. AWS CloudTrail
B. AWS Trusted Advisor
C. AWS Config
D. Amazon inspector

Answer: B

NEW QUESTION 99
- (Exam Topic 2)
A company has an on-premises Oracle database. The company spends a significant amount of time on database administration activities. The company is moving
the database to AWS and needs to minimize the time that is requited lot these administration activities
Which AWS service should the company use to meet this requirement?

A. Amazon ElastiCache
B. Amazon EC2
C. Amazon RDS
D. Amazon DynamoDB

Answer: C

NEW QUESTION 104


- (Exam Topic 2)
A company is designing an application. For the data persistence layer, the company wants to use a NoSQL database. Which AWS service should the company
use for the database?

A. Amazon Redshift
B. AWS DataSync
C. Amazon Athena
D. Amazon DynamoDB

Answer: D

NEW QUESTION 107


- (Exam Topic 2)
A company is running a regulated Linux-based application. The application must run every Ft day horn 8 AM until midnight. The application is critical and cannot
be interrupted Which Amazon EC2 instance purchasing option meets this requirement MOST cost-effectively?

A. On-Demand Capacity Reservation with Savings Plan


B. Spot instances
C. Regional Reserved Instances
D. Dedicated Hosts

Answer: A

NEW QUESTION 112


- (Exam Topic 2)
A company puns to move its on-premises servers to Amazon EC2 instances. The company has 50 different business units and wants to separate each billing lot
each unit. What should a cloud practitioner recommend?

A. Use separate AWS accounts for each business unit men filter by unit using the coverage report
B. Place each business unit in a different AWS Region then filter by unit in Cost Explorer.
C. Tag each business unit’s resources then filter by unit in Cost Explorer
D. Use a Afferent VPC for each business unit then Mar by unit using an AWS Cost and Usage Report

Answer: C

NEW QUESTION 115


- (Exam Topic 2)
Which of the following gives a company the ability to take advantage of tiered pricing for services across multiple AWS member accounts?

A. AWS Organizations service control policies (SCPs)


B. AWS Organizations consolidated billing
C. All upfront Reserved Instances
D. Cost Explorer utilization reports

Answer: B

NEW QUESTION 120


- (Exam Topic 2)
A user has an AWS account with a Business-level AWS Support plan and needs assistance with handling a production service disruption. Which action should the
user take?

A. Contact the dedicated AWS technical account manager (TAM).


B. Contact the dedicated AWS Concierge Support team.
C. Open a business-critical system down support case.

Passing Certification Exams Made Easy visit - https://www.surepassexam.com


Recommend!! Get the Full CLF-C02 dumps in VCE and PDF From SurePassExam
https://www.surepassexam.com/CLF-C02-exam-dumps.html (120 New Questions)

D. Open a production system down support case.

Answer: C

NEW QUESTION 124


- (Exam Topic 2)
Management at a large company wants to avoid long-term contracts and is interested in AWS to move from fixed costs to variable costs. What is the value
proposition of AWS for this company?

A. Economy of scale
B. Pay-as-you-go pricing
C. Volume discounts
D. Cost optimization

Answer: B

NEW QUESTION 129


- (Exam Topic 2)
Which of the following are benefits that a company receives when it moves an on-premises internet-lacing website to the AWS Cloud? (Select TWO.)

A. Data that is stored in the AWS Cloud is automatically encrypted.


B. Website capacity can expand or contract as website traffic changes.
C. AWS automatically provides the company with the lowest-cost pricing model.
D. The website shows up with higher priority in internet search engines
E. The company can take advantage of the pay-as-you-go pricing model

Answer: BE

NEW QUESTION 130


- (Exam Topic 2)
Which AWS services are delivered globally instead of regionally? (Select TWO.)

A. Amazon EC2
B. Amazon CloudFront
C. Amazon Route 53
D. Amazon VPC
E. Amazon RDS

Answer: BC

NEW QUESTION 135


- (Exam Topic 2)
Which AWS service tool or feature helps companies reduce costs by identifying underutilized Amazon EC2 instances?

A. Amazon Inspector
B. AWS Trusted Advisor
C. Consolidated billing
D. Cost Explorer

Answer: D

NEW QUESTION 139


- (Exam Topic 2)
What is the MOST secure way lo store passwords on AWS?

A. Store passwords in an Amazon S3 bucket


B. Store passwords as AWS CloudFormation parameters
C. Store passwords in AWS Storage Gateway
D. Store passwords in AWS Secrets Manager

Answer: D

NEW QUESTION 143


- (Exam Topic 2)
A company moves a workload to AWS lo run on Amazon EC2 instances. The company needs to run the workload in the most cost-effective way.
What can the company do lo meet this requirement?

A. Use AWS Key Management Sen/ice (AWS KMS)


B. Use multiple AWS accounts and consolidated billing.
C. Use AWS CloudFormation to deploy the infrastructure.
D. Rightsize all the EC2 instances that are used in the deployment

Answer: D

NEW QUESTION 144

Passing Certification Exams Made Easy visit - https://www.surepassexam.com


Recommend!! Get the Full CLF-C02 dumps in VCE and PDF From SurePassExam
https://www.surepassexam.com/CLF-C02-exam-dumps.html (120 New Questions)

- (Exam Topic 2)
A company plans to migrate complex legacy systems to AWS. The company will use several operating systems multiple databases and multiple programming
languages. Which benefit of the AWS Cloud does this scenario represent?

A. Scalability
B. Flexibility
C. Reliability
D. Security

Answer: B

NEW QUESTION 146


- (Exam Topic 2)
A company wants to offer direct phone and chat channels for customer service. The company needs a pay-as-you-go solution that remote customer service agents
can use to create and manage voice and chat contact flows.
Which AWS service will meet these requirements?

A. Amazon EventBridge (Amazon CloudWatch Events)


B. Amazon Connect
C. Amazon Cognito
D. AWS Direct Connect

Answer: B

NEW QUESTION 147


- (Exam Topic 2)
A company wants to accelerate migration from its data center to the AWS Cloud.
Which combination of AWS services should the company use to meet this requirement? (Select TWO.)

A. Amazon Connect
B. AWS Direct Connect
C. AWS Server Migration Service (AWS SMS)
D. Amazon Route 53
E. AWS Organizations

Answer: BC

NEW QUESTION 151


- (Exam Topic 2)
Wh.cn of lite following is advantages of the AWS Cloud? (Select TWO.)

A. Trade variable expenses tor capital expenses


B. High economies of scale
C. Launch globally in minutes
D. Focus on managing hardware infrastructure
E. Overprovision to ensure capacity

Answer: CE

NEW QUESTION 154


- (Exam Topic 2)
A company needs a data warehouse for analytical workloads. The data warehouse must support standard SQL queries.
Which AWS service meets these requirements?

A. Amazon EMR
B. Amazon Athena
C. Amazon Redshift
D. Amazon HDS

Answer: C

NEW QUESTION 157


- (Exam Topic 2)
A user needs the ability to access as many resources as are needed. The user also needs the ability to scale up and scale down with only a few minutes of notice.
Which benefit of the AWS Cloud describes these abilities?

A. Ratability
B. Economy of scale
C. Elasticity
D. Pay-as-you-go pricing

Answer: C

NEW QUESTION 159


- (Exam Topic 2)
A company is considering implementing a new workload m the AWS Cloud However, the company first wants to forecast the potential cost.
Which tool should the company use to estimate the cost of the workload?

Passing Certification Exams Made Easy visit - https://www.surepassexam.com


Recommend!! Get the Full CLF-C02 dumps in VCE and PDF From SurePassExam
https://www.surepassexam.com/CLF-C02-exam-dumps.html (120 New Questions)

A. Cost Explorer
B. AWS Pricing Calculator
C. AWS Billing and Cost Management dashboard
D. AWS Cost and Usage Report

Answer: B

NEW QUESTION 160


- (Exam Topic 2)
A company needs a central user portal so that users can log in to third-party business applications that support Security Assertion Markup Language (SAML) 2.0.
Which AWS service will meet this requirement?

A. AWS Identity and Access Management (IAM)


B. Amazon Cognito
C. AWS Single Sign-On
D. AWS CL

Answer: B

NEW QUESTION 164


- (Exam Topic 2)
Which AWS service or feature will search for and identify AWS resources that are stared externally?

A. Amazon OpenSearch Service (Amazon Elasticsearch Service)


B. AWS Control Tower
C. AWS IAM Access Analyzer
D. AWS Fargate

Answer: C

NEW QUESTION 167


- (Exam Topic 3)
A company wants the ability to accommodate peak application usage without purchasing equipment for on-premises data centers.
Which AWS Cloud benefit is the company seeking?

A. High availability
B. Security
C. Reliability
D. Elasticity

Answer: D

NEW QUESTION 168


- (Exam Topic 3)
Which AWS service or feature can a company use to determine which business unit is using specific AWS resources?

A. Cost allocation tags


B. Key pairs
C. Amazon Inspector
D. AWS Trusted Advisor

Answer: A

NEW QUESTION 171


- (Exam Topic 3)
A company is developing a new web application. The company must give users the ability to log in to the application through social identity providers.
Which AWS service will meet these requirements?

A. AWS Directory Service


B. Amazon Cognito
C. AWS identity and Access management (IAM)
D. AWS Single Sign-On

Answer: D

NEW QUESTION 172


- (Exam Topic 3)
Which of the following are advantages of moving from on premises to the AWS Cloud? (Select TWO)

A. Trade variable expenses for capital expenses


B. Eliminate costs related to running and maintaining data centers.
C. Benefit from massive economies of scale.
D. Eliminate the need to train IT staff.
E. Gain the ability to reserve capacity for 7 years or more

Answer: AC

Passing Certification Exams Made Easy visit - https://www.surepassexam.com


Recommend!! Get the Full CLF-C02 dumps in VCE and PDF From SurePassExam
https://www.surepassexam.com/CLF-C02-exam-dumps.html (120 New Questions)

NEW QUESTION 174


- (Exam Topic 3)
Which of the following are economic benefits of using the AWS Cloud? (Select TWO.)

A. Consumption-based pricing
B. Perpetual licenses
C. Economies of scale
D. AWS Enterprise Support at no additional cost
E. Bring-your-own-hardware model

Answer: AC

NEW QUESTION 175


- (Exam Topic 3)
What is the MOST secure way to store passwords on AWS?

A. Store passwords in an Amazon S3 bucket.


B. Store passwords as AWS Cloud Formation parameters.
C. Store passwords in AWS Storage Gateway.
D. Store passwords in AWS Secrets Manager.

Answer: D

NEW QUESTION 179


- (Exam Topic 3)
A company wants its Amazon EC2 instance to share the same geographic area but use redundant underlying power sources.
Which solution will meet these requirements?

A. Use EC2 instance across multiple Availability Zones in the same AWS Region.
B. Use Amazon CloudFront as the database for the EC2 instances.
C. Use EC2 instances in the same edge location and the same Availability Zone.
D. Use EC2 instances in AWS OpsWorks stacks in different AWS Regions.

Answer: A

NEW QUESTION 183


- (Exam Topic 3)
Which of the following is an architectural design principle of the AWS WeII-Architected Framework?

A. Loosely couple components


B. Build monolithic systems
C. Scale vertically, not horizontally
D. Use third-party software

Answer: A

NEW QUESTION 184


- (Exam Topic 3)
What is the recommended use case for Amazon EC2 On-Demand Instances?

A. A steady-state workload that requires a particular EC2 instance configuration for a long period of time
B. A workload that can be interrupted for a project that requires the lowest possible cost
C. An unpredictable workload that does not require a long-team commitment
D. A workload that is expected to run for longer than 1 year

Answer: B

NEW QUESTION 187


- (Exam Topic 3)
Which of the following is an architectural design principle of the AWS Well-Architected Framework?

A. Loosely couple components


B. Build monolithic systems
C. Scale vertically, not horizontally
D. Use third-party software

Answer: A

NEW QUESTION 190


- (Exam Topic 3)
Which of the following will help a user determine if they need to request a VPC service limit increase?

A. AWS Personal Health Dashboard


B. AWS Trusted Advisor
C. AWS Cost and Usage Report
D. AWS Service Catalog

Passing Certification Exams Made Easy visit - https://www.surepassexam.com


Recommend!! Get the Full CLF-C02 dumps in VCE and PDF From SurePassExam
https://www.surepassexam.com/CLF-C02-exam-dumps.html (120 New Questions)

Answer: A

NEW QUESTION 192


- (Exam Topic 3)
A company needs to use a serverless interactive query service to analyze data in Amazon S3. The query service must support standard SQL.
Which AWS service will meet these requirements?

A. Amazon Redshift
B. AWS Glue
C. Amazon Athena
D. Amazon Kinesis Data Streams

Answer: C

NEW QUESTION 195


- (Exam Topic 3)
When AWS tool acts as a firewall to control traffic in and out of subnets within a VPC?

A. Security group
B. Route table
C. VPC endpoint
D. Network access control list (ACL)

Answer: D

NEW QUESTION 199


- (Exam Topic 3)
Which AWS service can convert taxi 10 lifelike speech?

A. Amazon Policy
B. Amazon Textract
C. Amazon Transcribe
D. Amazon Comprehend

Answer: C

NEW QUESTION 203


- (Exam Topic 3)
An ecommerce company plans move its data center workload to the AWS Cloud to support highly dynamic usage patterns.
Which benefit make the AWS Cloud cost-effective for the migration of this type of workload? (Select TWO.)

A. Reliability
B. Security
C. Elasticity
D. Pay-as-you-go resource pricing
E. High availability

Answer: CD

NEW QUESTION 206


- (Exam Topic 3)
A company needs to transfer 60 TB of data to the AWS Cloud in a secure manner. Which of the following should the company use to meet these requirements?

A. AWS Snowball Edge device


B. Amazon Elastic Block Store (Amazon EBS)
C. Amazon Elastic File System (Amazon EFS)
D. Amazon S3

Answer: A

Explanation:
https://aws.amazon.com/blogs/storage/migrating-hundreds-of-tb-of-data-to-amazon-s3-with-aws-datasync/

NEW QUESTION 210


- (Exam Topic 3)
Which AWS service is a cloud security posture management (CSPM) service that aggregates alerts from various AWS services and partner products in a
standardized format?

A. AWS Security Hub


B. AWS Trusted Advisor
C. Amazon EventBridge
D. Amazon GuardDuty

Answer: A

Explanation:

Passing Certification Exams Made Easy visit - https://www.surepassexam.com


Recommend!! Get the Full CLF-C02 dumps in VCE and PDF From SurePassExam
https://www.surepassexam.com/CLF-C02-exam-dumps.html (120 New Questions)

Use AWS Security Hub to automate security best practice checks, aggregate security alerts into a single place and format, and understand your overall security
posture across all of your AWS accounts.

NEW QUESTION 214


- (Exam Topic 3)
An ecommerce company has migrated its IT infrastructure from an on-premises data center to the AWS Cloud. Which cost is the company's direct responsibility?

A. Cost of application software licenses


B. Cost of the hardware infrastructure on AWS
C. Cost of power for the AWS servers
D. Cost of physical security for the AWS data center

Answer: A

NEW QUESTION 219


- (Exam Topic 3)
Which action will help increase security in the AWS Cloud?

A. Enable programmatic access for all IAM users.


B. Use IAM users instead of IAM roles to delegate permissions.
C. Rotate access keys on a reoccurring basis.
D. Use inline policies instead of customer managed policies.

Answer: C

Explanation:
https://docs.aws.amazon.com/IAM/latest/UserGuide/best-practices.html
Where possible, we recommend relying on temporary credentials instead of creating long-term credentials such as access keys. However, for scenarios in which
you need IAM users with programmatic access and long-term credentials, we recommend that you rotate access keys. Regularly rotating long-term credentials
helps you familiarize yourself with the process. This is useful in case you are ever in a situation where you must rotate credentials, such as when an employee
leaves your company. We recommend that you use IAM access last used information to rotate and remove access keys safely.

NEW QUESTION 222


- (Exam Topic 3)
A company needs to organize its resources and track AWS costs on a detailed level. The company needs to categorize costs by business department,
environment, and application.
Which solution will meet these requirements?

A. Access the AWS Cost Management console to organize resources, set an AWS budget, and receive notifications of unintentional usage.
B. Use tags to organize the resource
C. Activate cost allocation tags to track AWS costs on a detailed level.
D. Create Amazon CloudWatch dashboards to visually organize and track costs individually.
E. Access the AWS Billing and Cost Management dashboard to organize and track resource consumption on a detailed level.

Answer: A

NEW QUESTION 226


- (Exam Topic 3)
Which AWS service should a company use to check for 1AM access keys that have not been rotated recently?

A. AWSWAF
B. AWS Trusted Advisor
C. Amazon Inspector
D. AWS Certificate Manager (ACM)

Answer: B

Explanation:
Service quotas are the maximum number of resources that you can create in an AWS account. AWS implements quotas to provide highly available and reliable
service to all customers, and protects you from unintentional spend. Trusted Advisor will notify you once you reach more than 80% of a service quota. You can
then follow recommendations to delete resources or request a quota increase.

NEW QUESTION 230


- (Exam Topic 3)
A company does not want to rely on elaborate forecasting to determine its usage of compute resources. Instead, the company wants to pay only for the resources
that it uses. The company also needs the ability to increase or decrease its resource usage to meet business requirements.
Which pillar of the AWS Well-Architected Framework aligns with these requirements?

A. Operational excellence
B. Security
C. Reliability
D. Cost optimization

Answer: D

Explanation:
Reliability Scale horizontally to increase aggregate workload availability: Replace one large resource with multiple small resources to reduce the impact of a single
failure on the overall workload. Distribute requests across multiple, smaller resources to ensure that they don’t share a common point of failure. Stop guessing

Passing Certification Exams Made Easy visit - https://www.surepassexam.com


Recommend!! Get the Full CLF-C02 dumps in VCE and PDF From SurePassExam
https://www.surepassexam.com/CLF-C02-exam-dumps.html (120 New Questions)

capacity: A common cause of failure in on-premises workloads is resource saturation, when the demands placed on a workload exceed the capacity of that
workload (this is often the objective of denial of service attacks).

NEW QUESTION 232


- (Exam Topic 3)
Which AWS services can a company use to achieve a loosely coupled architecture? (Select TWO.)

A. Amazon Workspaces
B. Amazon Simple Queue Service (Amazon SQS.)
C. Amazon Connect
D. AWS Trusted Advisor
E. AWS Step Functions

Answer: BE

NEW QUESTION 235


- (Exam Topic 3)
Which AWS service can a company use to analyze and debug performance issues of an AWS Lambda function?

A. Amazon Inspector
B. Amazon Detective
C. AWS CodeStar
D. AWS X-Ray

Answer: D

Explanation:
https://docs.aws.amazon.com/lambda/latest/operatorguide/general-approach.html

NEW QUESTION 237


- (Exam Topic 3)
A company wants to reconfigure its ecommerce application to automatically scale to meet customer demands. The company wants the operating system that the
application runs on to be automatically updated.
Which AWS service will meet these requirements?

A. Amazon Lightsail
B. Amazon EC2
C. AWS Lambda
D. Amazon EC2 Auto Scaling

Answer: C

NEW QUESTION 241


- (Exam Topic 3)
A company wants to migrate its main application to Amazon EC2. The application must provide low latency to users residing in two different geographic locations.
The architecture of the Application must have disaster recovery capabilities.
How can these requirements be met?

A. Deploy the application on an EC2 instance and set up EC2 automatic recovery.
B. Deploy the application on multiple EC2 instances running in one Availability Zone.
C. Deploy the application on EC2 instances in Multi-AZs in a single AWS Region.
D. Deploy the application on EC2 instances in multiple AWS Regions.

Answer: D

NEW QUESTION 245


- (Exam Topic 3)
Which AWS service or feature can a company use to estimate AWS costs before provisioning workloads?

A. AWS Pricing Calculator


B. AWS Cost and Usage Report
C. Cost Explorer
D. AWS Budgets

Answer: A

NEW QUESTION 247


- (Exam Topic 3)
A company wants to build an application that consists entirely of microservices. Which AWS Cloud architecture design principle supports this goal?

A. Think parallel.
B. Implement elasticity.
C. Stop guessing capacity.
D. Decouple components

Answer: D

Passing Certification Exams Made Easy visit - https://www.surepassexam.com


Recommend!! Get the Full CLF-C02 dumps in VCE and PDF From SurePassExam
https://www.surepassexam.com/CLF-C02-exam-dumps.html (120 New Questions)

NEW QUESTION 251


- (Exam Topic 3)
A company needs to track the relationships among AWS resources. The company also needs to review resource dependencies before the company makes any
changes to the resources.
Which AWS service can the company use to meet these requirements?

A. AWS Trusted Advisor


B. AWS Confit
C. AWS Resource Access Manager (AWS RAM)
D. AWS System Manager

Answer: B

NEW QUESTION 255


- (Exam Topic 3)
What is a benefit of using AWS serverless computing?

A. Application deployment and management are not required.


B. Application security will be fully managed by AWS.
C. Monitoring and logging are not needed.
D. Management of infrastructure is offloaded to AWS.

Answer: A

NEW QUESTION 256


- (Exam Topic 3)
A company needs to generate reports that can break down cloud costs by product, by company-defined tags, and by hour. day. and month.
Which AWS tool should the company use to meet these requirements?

A. Reserved Instance utilization and coverage reports


B. Savings Plans utilization reports
C. AWS Budgets reports
D. AWS Cost and Usage Reports

Answer: D

NEW QUESTION 259


- (Exam Topic 3)
Which AWS compute service automatically scales resources up or down to meet application workload demands?

A. Amazon Simple Queue Service (Amazon SQS)


B. Amazon EC2
C. Amazon Aurora
D. AWS Lambda

Answer: C

NEW QUESTION 261


- (Exam Topic 3)
Which tasks responsibilities of the customer, according to the AWS shared responsibility model? (Select TWO.)

A. Secure the virtualization layer.


B. Encrypt data and maintain data integrity.
C. Patch the Amazon RDS operating system.
D. Maintain identity and access management controls.
E. Secure Availability Zones.

Answer: BD

NEW QUESTION 266


- (Exam Topic 3)
A company wants to continuously improve processes and procedures to deliver business value. Which pillar of the AWS Well-Architected Framework does this
goal represent?

A. Performance efficiency
B. Operational excellence
C. Reliability
D. Sustainability

Answer: B

Explanation:
https://aws.amazon.com/blogs/apn/the-6-pillars-of-the-aws-well-architected-framework/#:~:text=1.-,Operational

NEW QUESTION 269


- (Exam Topic 3)

Passing Certification Exams Made Easy visit - https://www.surepassexam.com


Recommend!! Get the Full CLF-C02 dumps in VCE and PDF From SurePassExam
https://www.surepassexam.com/CLF-C02-exam-dumps.html (120 New Questions)

A company needs to set up user authentication for a new application. Users must be able to sign in directly with a user name and password, or through a third-
party provider.
Which AWS service should the company use to meet these requirements?

A. AWS 1AM Identity Center (AWS Single Sign-On)


B. AWS Signer
C. Amazon Cognito
D. AWS Directory Service

Answer: C

NEW QUESTION 270


- (Exam Topic 3)
Which AWS service or feature provides high availability and low latency within an AWS Region?

A. Edge locations
B. Availability Zones
C. AWS Outposts
D. Amazon Route 53

Answer: B

NEW QUESTION 275


- (Exam Topic 3)
Which AWS service should a company use to provision, manage, and deploy SSL/TLS certificates?

A. AWS Secrets Manager


B. Amazon Inspector
C. AWS CodeDeploy
D. AWS Certificate Manager (ACM)

Answer: D

NEW QUESTION 278


- (Exam Topic 3)
A company wants to query its server logs to gain insights about its customers’ experiences. Which AWS service will store this data MOST cost-effectively?

A. Amazon Aurora
B. Amazon Elastic File System (Amazon EFS)
C. Amazon Elastic Block Store (amazon EBS)
D. Amazon S3

Answer: C

NEW QUESTION 282


- (Exam Topic 3)
After selecting an Amazon EC2 Dedicated Host reservation, which pricing option would provide the largest discount?

A. No upfront payment
B. Hourly on-demand payment
C. Partial upfront payment
D. All upfront payment

Answer: D

NEW QUESTION 283


- (Exam Topic 3)
What is a customer responsibility under the AWS shared responsibility model when using AWS Lambda?

A. Maintenance of the underlying Lambda hardware.


B. Maintenance of the Lambda networking infrastructure.
C. The code and libraries that run in the lambda function.
D. The Lambda server software.

Answer: C

NEW QUESTION 286


- (Exam Topic 3)
A company needs help with a specific question that is related to a planned AWS deployment of a business application. The company has only the AWS Basic
Support plan. The company wants to have the question answered immediately by an expert who has adequate skills and experience.
Which action should the company take to meet these requirements?

A. Submit the question to AWS Support by phone or live chat.


B. Submit the question in AWS re:Post
C. Connect with other AWS customers by using AWS Connect
D. Connect with an AWS professional by using AWS IQ.

Passing Certification Exams Made Easy visit - https://www.surepassexam.com


Recommend!! Get the Full CLF-C02 dumps in VCE and PDF From SurePassExam
https://www.surepassexam.com/CLF-C02-exam-dumps.html (120 New Questions)

Answer: A

NEW QUESTION 287


- (Exam Topic 3)
A company is designing a web application that will run on Amazon EC2 instances.
Which AWS services and features will improve availability and reduce the impact of failures for this application? (Choose two.)

A. Amazon EC2 Auto Scaling for the EC2 instances


B. VPC subnet ACLs to check the health of a service
C. Resources that are distributed across multiple Availability Zones
D. Configuration of AWS Server Migration Service (AWS SMS) to move the EC2 instances to a different AWS Region
E. Resources that are distributed across multiple AWS points of presence

Answer: AC

NEW QUESTION 289


- (Exam Topic 3)
How does the AWS Cloud help companies build agility into their processes and cloud infrastructure?

A. Companies can avoid provisioning too much capacity when they do not know how much capacity is required.
B. Companies can expand into new geographic regions.
C. Companies can access a range of technologies to experiment and innovate quickly.
D. Companies can pay for IT resources only when they use the resources.

Answer: C

NEW QUESTION 290


- (Exam Topic 3)
A company is defining its AWS multi-account strategy. The company needs to control access to AWS services and needs to consolidate billing across accounts.
Which AWS service should the company use to meet these requirements?

A. AWS Organizations
B. AWS Identity and Access Management (IAM)
C. AWS Billing and Cost Management
D. Amazon Cognito

Answer: A

NEW QUESTION 293


- (Exam Topic 3)
A company is choosing an AWS Support plan. The company needs the ability to contact cloud support engineers by phone, email, and chat 24 hours a day, 7 days
a week.
What is the LEAST expensive AWS Support plan that meets these requirements?

A. AWS Basic Support


B. AWS Developer Support
C. AWS Business Support
D. AWS Enterprise Support

Answer: C

Explanation:
https://aws.amazon.com/premiumsupport/plans/

NEW QUESTION 297


- (Exam Topic 3)
A company uses Amazon EC2 instances to run its web application. The company uses On-demand instances and Spot instances. The company needs to visualize
its monthly spending on both types of instances.
Which AWS service or feature will meet this requirement?

A. AWS Cost Explorer


B. AWS Budgets
C. Amazon CloudWatch
D. AWS Cost Categories

Answer: A

NEW QUESTION 301


- (Exam Topic 3)
A company is using Amazon EC2 instances.
Which tasks are the company's responsibility, according to the AWS shared responsibility model? (Select TWO.)

A. Choose the initial root password of new Linux instances.


B. Identify which users can access the EC2 instances, and manage their permissions in the operating system
C. Apply the updates of the hypervisor where the EC2 instances are running.
D. Choose between a Wi-Fi connection and an Ethernet connection for the global internet access.
E. Identify and manage the users who are allowed to create or delete EC2 instances.

Passing Certification Exams Made Easy visit - https://www.surepassexam.com


Recommend!! Get the Full CLF-C02 dumps in VCE and PDF From SurePassExam
https://www.surepassexam.com/CLF-C02-exam-dumps.html (120 New Questions)

Answer: BE

NEW QUESTION 302


- (Exam Topic 3)
Which AWS service helps users audit API activity across their AWS account?

A. AWS CloudTrail
B. Amazon Inspector
C. AWSWAF
D. AWS Config

Answer: A

NEW QUESTION 304


- (Exam Topic 3)
What is the total volume of data that can be stored in Amazon S3?

A. 10 PB
B. 50 PB
C. 100 PB
D. Virtually unlimited

Answer: D

NEW QUESTION 309


- (Exam Topic 3)
Which design principles are enabled by the AWS Cloud to improve the operation of workloads? (Choose two.)

A. Minimize upfront design


B. Loose coupling
C. Disposable resources
D. Server design and concurrency
E. Minimal viable product

Answer: BD

NEW QUESTION 312


- (Exam Topic 3)
A company wants its Amazon EC2 instances to provide a low-latency static website to global users. What should the company do to meet this requirement?

A. Use the EC2 instances in multiple edge locations.


B. Use an Application Load Balancer with the EC2 instances configured as the target.
C. Use the EC2 instances in the same Availability Zone but in different AWS Regions.
D. Use Amazon CloudFront with the EC2 instances configured as the source.

Answer: C

NEW QUESTION 317


- (Exam Topic 3)
A company has an application that stores a high volume of unstructured data and session history. The company needs to scale the application reliably to millions
of concurrent users while ensuring consistent low latency.
Which AWS service meets these requirements?

A. Amazon RDS for MariaDB


B. Amazon DynamoDB
C. Amazon RDS for SQL Server
D. Amazon Redshift

Answer: B

NEW QUESTION 318


......

Passing Certification Exams Made Easy visit - https://www.surepassexam.com


Recommend!! Get the Full CLF-C02 dumps in VCE and PDF From SurePassExam
https://www.surepassexam.com/CLF-C02-exam-dumps.html (120 New Questions)

Thank You for Trying Our Product

We offer two products:

1st - We have Practice Tests Software with Actual Exam Questions

2nd - Questons and Answers in PDF Format

CLF-C02 Practice Exam Features:

* CLF-C02 Questions and Answers Updated Frequently

* CLF-C02 Practice Questions Verified by Expert Senior Certified Staff

* CLF-C02 Most Realistic Questions that Guarantee you a Pass on Your FirstTry

* CLF-C02 Practice Test Questions in Multiple Choice Formats and Updatesfor 1 Year

100% Actual & Verified — Instant Download, Please Click


Order The CLF-C02 Practice Test Here

Passing Certification Exams Made Easy visit - https://www.surepassexam.com


Powered by TCPDF (www.tcpdf.org)

You might also like