CLF-C02 Question Bank · Latest 50 Questions Free Preview (Page 5/5)
Questions 41–50 of the latest 50 CLF-C02 questions (5 pages total), with answers and explanations, no login required. Practice all 2374 questions online.
Question 41 · No. 2365 · Single choice
Which AWS service can generate information that can be used by external auditors?
- A. Amazon Cognito
- B. Amazon FSx
- C. AWS Config
- D. Amazon Inspector
Answer: C
Explanation: The question asks about which AWS service can generate information that can be used by external auditors. AWS Config is a service that allows you to assess, audit, and manage the configurations of your AWS resources. It provides a detailed history of your AWS resource configurations and allows you to automate the evaluation of these configurations against rules that you define. This makes it useful for compliance and auditing purposes.
Question 42 · No. 2366 · Single choice
A company wants to monitor and block malicious HTTP and HTTPS requests that its Amazon CloudFront distributions receive. Which AWS service should the company use to meet these requirements?
- A. Amazon GuardDuty
- B. Amazon Inspector
- C. AWS WAF
- D. Amazon Detective
Answer: C
Explanation: The question asks which AWS service should be used to monitor and block malicious HTTP and HTTPS requests. AWS WAF (Web Application Firewall) is designed specifically for this purpose, allowing the configuration of rules to filter and block web traffic based on specific criteria.
Question 43 · No. 2367 · Single choice
A company is building AWS architecture to deliver real-time data feeds from an on-premises data center into an application that runs on AWS. The company needs a consistent network connection with minimal latency. What should the company use to connect the application and the data center to meet these requirements?
- A. AWS Direct Connect
- B. Public internet
- C. AWS VPN
- D. Amazon Connect
Answer: A
Explanation: The company needs a consistent network connection with minimal latency to deliver real-time data feeds from an on-premises data center into an application running on AWS. AWS Direct Connect provides a dedicated network connection from the on-premises data center directly to AWS, which offers a more stable and lower-latency connection compared to other options such as public internet or AWS VPN.
Question 44 · No. 2368 · Single choice
A company wants to use Amazon EC2 instances for a stable production workload that will run for 1 year. Which instance purchasing option meets these requirements MOST cost-effectively?
- A. Dedicated Hosts
- B. Reserved Instances
- C. On-Demand Instances
- D. Spot Instances
Answer: B
Explanation: B Reserved Instances is the most cost-effective option for a stable production workload that will run for a year because they offer significant discounts compared to On-Demand Instances, making them ideal for long-term workloads with predictable usage.
Question 45 · No. 2369 · Single choice
A company needs to create and publish interactive business intelligence dashboards. The dashboards require insights that are powered by machine learning. Which AWS service or tool will meet these requirements?
- A. AWS Glue Studio
- B. Amazon QuickSight
- C. Amazon Redshift
- D. Amazon Athena
Answer: B
Explanation: Amazon QuickSight 是一个完全托管的云上商业智能服务，可以用来创建和发布交互式的业务智能仪表板，并且它支持通过机器学习获得洞察。
Question 46 · No. 2370 · Single choice
Which action should a company take to improve security in its AWS account?
- A. Require multi-factor authentication (MFA) for privileged users.
- B. Remove the root user account.
- C. Create an access key for the AWS account root user.
- D. Create an access key for each privileged user.
Answer: A
Explanation: 选项 A '为特权用户要求多因素认证 (MFA)' 是正确的做法，因为多因素认证可以增加账户的安全性，特别是在管理特权用户的场景中。选项 B（删除根用户账户）不适用，因为根用户账户是必要的管理工具。选项 C 和 D （分别为根用户和特权用户创建访问密钥）通常不推荐，因为这会增加安全风险。
Question 47 · No. 2371 · Single choice
A company wants to organize its users so that the company can grant permissions to the users as a group. Which AWS service or tool can the company use to meet this requirement?
- A. Security groups
- B. AWS Identity and Access Management (IAM)
- C. Resource groups
- D. AWS Security Hub
Answer: B
Explanation: The company wants to organize its users for granting permissions as a group, and AWS Identity and Access Management (IAM) allows the creation of user groups where permissions can be assigned collectively to multiple users. Security groups are used more for controlling traffic to resources, Resource groups are used for organizing resources, and AWS Security Hub is used for security monitoring and management.
Question 48 · No. 2372 · Single choice
Which AWS compute service gives users the ability to securely and reliably run containers at scale?
- A. Amazon Elastic Container Service (Amazon ECS)
- B. Amazon Aurora
- C. Amazon Athena
- D. Amazon Polly
Answer: A
Explanation: Amazon Elastic Container Service (Amazon ECS) is specifically designed to run containers at scale. It provides a secure and reliable platform for deploying, managing, and scaling containerized applications using Docker containers. Amazon Aurora is a relational database service, Amazon Athena is a query service for analyzing data in S3, and Amazon Polly is a text-to-speech service, none of which are used for running containers.
Question 49 · No. 2373 · Single choice
A company wants to provide low latency to its users around the world. Which feature of the AWS Cloud meet this requirement?
- A. Global infrastructure
- B. Pay as-you-go pricing
- C. Managed services
- D. Economy of scale
Answer: A
Explanation: The feature of AWS Cloud that provides low latency to users around the world is its Global Infrastructure. AWS has data centers located in multiple regions globally, which helps in reducing latency by allowing data to be processed closer to the end users. Other options such as Pay-as-you-go pricing, Managed services, and Economy of scale are beneficial features but do not directly contribute to reducing latency.
Question 50 · No. 2374 · Multiple choice
Which of the following are advantages of moving to the AWS Cloud? (Choose two.)
- A. Users can implement all AWS services in seconds.
- B. AWS assumes all responsibility for the security of infrastructure and applications.
- C. Users experience increased speed and agility.
- D. Users benefit from massive economies of scale.
- E. Users can move hardware from their data center to the AWS Cloud.
Answer: C, D
Explanation: The question asks for two advantages of moving to the AWS Cloud. Option C is correct because AWS enables users to quickly deploy resources and innovate faster, which increases speed and agility. Option D is correct because AWS's large-scale infrastructure allows users to benefit from lower costs due to economies of scale. Option A is incorrect because not all AWS services can be implemented in seconds—it depends on complexity. Option B is incorrect because while AWS is responsible for the security of the cloud (infrastructure), customers are responsible for security in the cloud (their applications and data). Option E is incorrect because hardware cannot be physically moved into the AWS Cloud; instead, workloads are migrated virtually.