AWS Certified Cloud Practitioner CLF-C02 - #2

Which of the following statement is correct for a Security Group and a Network Access Control List (Network ACL)?

Security Group acts as a firewall at the instance level whereas Network Access Control List (Network ACL) acts as a firewall at the subnet level

An e-commerce company wants to store data from a recommendation engine in a database. As a Cloud Practioner, which AWS service would you recommend to provide this functionality with the LEAST operational overhead for any scale?

Amazon DynamoDB

Which of the following AWS services allows a database to have flexible schema and supports document data models?

Amazon DynamoDB

An e-commerce company wants to assess its applications deployed on Amazon Elastic Compute Cloud (Amazon EC2) instances for vulnerabilities and deviations from AWS best practices. Which AWS service can be used to facilitate this?

Amazon Inspector

A company is using a message broker service on its on-premises application and wants to move this messaging functionality to AWS Cloud. Which of the following AWS services is the right choice to move the existing functionality easily?

Amazon MQ

According to the AWS Shared Responsibility Model, which of the following are responsibilities of the customer for Amazon RDS?

Database encryption

As per the AWS Shared Responsibility Model, which of the following is a responsibility of AWS from a security and compliance point of view?

Edge Location Management

The AWS Cloud Adoption Framework (AWS CAF) recommends four iterative and incremental cloud transformation phases. Which cloud transformation journey phase of the AWS Cloud Adoption Framework (AWS CAF) focuses on demonstrating how the cloud will help accelerate your business outcomes?

Envision The Envision phase of the AWS Cloud Adoption Framework (AWS CAF) focuses on demonstrating how the cloud will help accelerate your business outcomes.

What foundational capability under the operations perspective is part of the AWS Cloud Adoption Framework (AWS CAF)?

Performance and capacity management

Which of the following use-cases is NOT supported by Amazon Rekognition?

Quickly resize photos to create thumbnails

The AWS Well-Architected Framework provides guidance on building cloud based applications using AWS best practices. Which of the following options are the pillars mentioned in the AWS Well-Architected Framework? (Select two)

Reliability Cost Optimization

Which of the following statements is INCORRECT about AWS Auto Scaling?

You can automatically deploy AWS Shield when a DDoS attack is detected

An organization has a complex IT architecture involving a lot of system dependencies and it wants to track the history of changes to each resource. Which AWS service will help the organization track the history of configuration changes for all the resources?

AWS Config

Which of the following statements are true about AWS Lambda? (Select two)

AWS Lambda lets you run code without provisioning or managing servers You pay for the compute time you consume for AWS Lambda

A gaming company is looking at a technology/service that can deliver a consistent low-latency gameplay to ensure a great user experience for end-users in various locations. Which AWS technology/service will provide the necessary low-latency access to the end-users?

AWS Local Zones

Which of the following options can be used to access and manage all AWS services (Select three)?

AWS Management Console SDK CLI

A data analytics company stores its data on Amazon Simple Storage Service (Amazon S3) and wants to do SQL based analysis on this data with minimum effort. As a Cloud Practitioner, which of the following AWS services will you suggest for this use case?

Amazon Athena

Which policy describes prohibited uses of the web services offered by Amazon Web Services?

AWS Acceptable Use Policy

A startup is looking for 24x7 phone based technical support for its AWS account. Which of the following is the MOST cost-effective AWS support plan for this use-case?

AWS Business Support

Due to regulatory and compliance reasons, an organization is supposed to use a hardware device for any data encryption operations in the cloud. Which AWS service can be used to meet this compliance requirement?

AWS CloudHSM

Which AWS service helps with global application availability and performance using the AWS global network?

AWS Global Accelerator

Which service gives a personalized view of the status of the AWS services that are part of your Cloud architecture so that you can quickly assess the impact on your business when AWS service(s) are experiencing issues?

AWS Health - Your Account Health Dashboard

Which AWS service publishes up-to-the-minute information on the general status and availability of all AWS services in all the Regions of AWS Cloud?

AWS Health Dashboard - service health

Which of the following AWS services are global in scope? (Select two)

AWS Identity and Access Management (AWS IAM) Amazon CloudFront

An organization is planning to move its infrastructure from the on-premises datacenter to AWS Cloud. As a Cloud Practioner, which options would you recommend so that the organization can identify the right AWS services to build solutions on AWS Cloud (Select two)?

AWS Service Catalog AWS Partner Network (APN)

Which of the following AWS services can be used to prevent Distributed Denial-of-Service (DDoS) attack? (Select three)

AWS Shield AWS Web Application Firewall (AWS WAF) Amazon CloudFront with Amazon Route 53

A company's flagship application runs on a fleet of Amazon Elastic Compute Cloud (Amazon EC2) instances. As per the new policies, the system administrators are looking for the best way to provide secure shell access to Amazon Elastic Compute Cloud (Amazon EC2) instances without opening new ports or using public IP addresses.' Which tool/service will help you achieve this requirement?

AWS Systems Manager Session Manager

Which tool will help you review your workloads against current AWS best practices for cost optimization, security, and performance improvement and then obtain advice to architect them better?

AWS Trusted Advisor

An online gaming company wants to block users from certain geographies from accessing its content. Which AWS service can be used to accomplish this task?

AWS Web Application Firewall (AWS WAF)

Which AWS service should be used when you want to run container applications, but want to avoid the operational overhead of scaling, patching, securing, and managing servers?

Amazon Elastic Container Service (Amazon ECS) - Fargate launch type

Which of the following is the correct statement regarding the AWS Storage services?

Amazon Simple Storage Service (Amazon S3) is object based storage, Amazon Elastic Block Store (Amazon EBS) is block based storage and Amazon Elastic File System (Amazon EFS) is file based storage

A customer has created a VPC and a subnet within AWS Cloud. Which of the following statements is correct?

An Amazon Virtual Private Cloud (Amazon VPC) spans all of the Availability Zones (AZ) in the Region whereas a subnet spans only one Availability Zone (AZ) in the Region

Access Key ID and Secret Access Key are tied to which of the following AWS Identity and Access Management (AWS IAM) entities?

IAM User

Which of the following statement is correct regarding the AWS pricing policy for data transfer charges into or out of an AWS Region?

Only outbound data transfer is charged

A photo sharing web application wants to store thumbnails of user-uploaded images on Amazon Simple Storage Service (Amazon S3). The thumbnails are rarely used but need to be immediately accessible from the web application. The thumbnails can be regenerated easily if they are lost. Which is the most cost-effective way to store these thumbnails on Amazon Simple Storage Service (Amazon S3)?

Use Amazon S3 One Zone-Infrequent Access (S3 One Zone-IA) to store the thumbnails