Free preview mode
Enjoy the free questions and consider upgrading to gain full access!
AWS Certified Cloud Practitioner CLF-C02
Free trial
Verified
Question 126
Which AWS security service protects applications from distributed denial of service attacks with always-on detection and automatic inline mitigations?
- A: Amazon Inspector
- B: AWS Web Application Firewall (AWS WAF)
- C: Elastic Load Balancing (ELB)
- D: AWS Shield
Question 127
Which AWS service allows users to model and provision AWS resources using common programming languages?
- A: AWS CloudFormation
- B: AWS CodePipeline
- C: AWS Cloud Development Kit (AWS CDK)
- D: AWS Systems Manager
Question 128
Which Amazon EC2 instance pricing model can provide discounts of up to 90%?
- A: Reserved Instances
- B: On-Demand
- C: Dedicated Hosts
- D: Spot Instances
Question 129
Which of the following acts as an instance-level firewall to control inbound and outbound access?
- A: Network access control list
- B: Security groups
- C: AWS Trusted Advisor
- D: Virtual private gateways
Question 130
A company must be able to develop, test, and launch an application in the AWS Cloud quickly.
Which advantage of cloud computing will meet these requirements?
- A: Stop guessing capacity
- B: Trade fixed expense for variable expense
- C: Achieve economies of scale
- D: Increase speed and agility
Question 131
A company has teams that have different job roles and responsibilities. The company’s employees often change teams. The company needs to manage permissions for the employees so that the permissions are appropriate for the job responsibilities.
Which IAM resource should the company use to meet this requirement with the LEAST operational overhead?
- A: IAM user groups
- B: IAM roles
- C: IAM instance profiles
- D: IAM policies for individual users
Question 132
Which AWS service can a company use to securely store and encrypt passwords for a database?
- A: AWS Shield
- B: AWS Secrets Manager
- C: AWS Identity and Access Management (IAM)
- D: Amazon Cognito
Question 133
What can a cloud practitioner use to retrieve AWS security and compliance documents and submit them as evidence to an auditor or regulator?
- A: AWS Certificate Manager
- B: AWS Systems Manager
- C: AWS Artifact
- D: Amazon Inspector
Question 134
Which encryption types can be used to protect objects at rest in Amazon S3? (Choose two.)
- A: Server-side encryption with Amazon S3 managed encryption keys (SSE-S3)
- B: Server-side encryption with AWS KMS managed keys (SSE-KMS)
- C: TLS
- D: SSL
- E: Transparent Data Encryption (TDE)
Question 135
Which option is a physical location of the AWS global infrastructure?
- A: AWS DataSync
- B: AWS Region
- C: Amazon Connect
- D: AWS Organizations
Question 136
A company wants to integrate its online shopping website with social media login credentials.
Which AWS service can the company use to make this integration?
- A: AWS Directory Service
- B: AWS Identity and Access Management (IAM)
- C: Amazon Cognito
- D: AWS IAM Identity Center (AWS Single Sign-On)
Question 137
Which AWS service is used to track, record, and audit configuration changes made to AWS resources?
- A: AWS Shield
- B: AWS Config
- C: AWS IAM
- D: Amazon Inspector
Question 138
A customer runs an On-Demand Amazon Linux EC2 instance for 3 hours, 5 minutes, and 6 seconds.
For how much time will the customer be billed?
- A: 3 hours, 5 minutes
- B: 3 hours, 5 minutes, and 6 seconds
- C: 3 hours, 6 minutes
- D: 4 hours
Question 139
A company website is experiencing DDoS attacks.
Which AWS service can help protect the company website against these attacks?
- A: AWS Resource Access Manager
- B: AWS Amplify
- C: AWS Shield
- D: Amazon GuardDuty
Question 140
A company wants a customized assessment of its current on-premises environment. The company wants to understand its projected running costs in the AWS Cloud.
Which AWS service or tool will meet these requirements?
- A: AWS Trusted Advisor
- B: Amazon Inspector
- C: AWS Control Tower
- D: Migration Evaluator
Question 141
A company that has multiple business units wants to centrally manage and govern its AWS Cloud environments. The company wants to automate the creation of AWS accounts, apply service control policies (SCPs), and simplify billing processes.
Which AWS service or tool should the company use to meet these requirements?
- A: AWS Organizations
- B: Cost Explorer
- C: AWS Budgets
- D: AWS Trusted Advisor
Question 142
A company is hosting an application in the AWS Cloud. The company wants to verify that underlying AWS services and general AWS infrastructure are operating normally.
Which combination of AWS services can the company use to gather the required information? (Choose two.)
- A: AWS Personal Health Dashboard
- B: AWS Systems Manager
- C: AWS Trusted Advisor
- D: AWS Service Health Dashboard
- E: AWS Service Catalog
Question 143
A company needs to migrate a PostgreSQL database from on-premises to Amazon RDS.
Which AWS service or tool should the company use to meet this requirement?
- A: Cloud Adoption Readiness Tool
- B: AWS Migration Hub
- C: AWS Database Migration Service (AWS DMS)
- D: AWS Application Migration Service
Question 144
Which cloud concept is demonstrated by using AWS Compute Optimizer?
- A: Security validation
- B: Rightsizing
- C: Elasticity
- D: Global reach
That’s the end of your free questions
You’ve reached the preview limit for AWS Certified Cloud Practitioner CLF-C02Consider upgrading to gain full access!
Free preview mode
Enjoy the free questions and consider upgrading to gain full access!