AWS Certified Cloud Practitioner CLF-C02 證照考古題大全 20241003

AWS Certified Cloud Practitioner CLF-C02

AWS 雲端從業人員證照考古題彙整 20241003

Amazon Web Service（AWS 亞馬遜）全系列考古題，2024年最新題庫，持續更新，全網最完整。AWS 證照含金量高，自我進修、跨足雲端產業必備近期版本更新，隨時追蹤最新趨勢變化。

QUESTION 281

A customer runs an On-Demand Amazon Linux EC2 instance for 3 hours, 5 minutes, and 6 seconds. For how much time will the customer be billed?

A. 3 hours, 5 minutes

B. 3 hours, 5 minutes, and 6 seconds

C. 3 hours, 6 minutes

D. 4 hours

Correct Answer: B

Section: (none)

QUESTION 282

A company website is experiencing DDoS attacks.

Which AWS service can help protect the company website against these attacks?

A. AWS Resource Access Manager

B. AWS Amplify

C. AWS Shield

D. Amazon GuardDuty

Correct Answer: C

Section: (none)

QUESTION 283

A company wants a customized assessment of its current on-premises environment. The company wants to understand its projected running costs in the AWS Cloud.

Which AWS service or tool will meet these requirements?

A. AWS Trusted Advisor

B. Amazon Inspector

C. AWS Control Tower

D. Migration Evaluator

Correct Answer: D

Section: (none)

QUESTION 284

A company that has multiple business units wants to centrally manage and govern its AWS Cloud environments. The company wants to automate the creation of AWS accounts, apply service control policies (SCPs), and simplify billing processes.

Which AWS service or tool should the company use to meet these requirements?

A. AWS Organizations

B. Cost Explorer

C. AWS Budgets

D. AWS Trusted Advisor

Correct Answer: A

Section: (none)

QUESTION 285

A company is hosting an application in the AWS Cloud. The company wants to verify that underlying AWS services and general AWS infrastructure are operating normally.

Which combination of AWS services can the company use to gather the required information? (Choose two.)

A. AWS Personal Health Dashboard

B. AWS Systems Manager

C. AWS Trusted Advisor

D. AWS Service Health Dashboard

E. AWS Service Catalog

Correct Answer: AD

Section: (none)

探索小豬科技的全新服務，了解更多 讓我們助您站上雲端！

QUESTION 286

A company needs to migrate a PostgreSQL database from on-premises to Amazon RDS. Which AWS service or tool should the company use to meet this requirement?

A. Cloud Adoption Readiness Tool

B. AWS Migration Hub

C. AWS Database Migration Service (AWS DMS)

D. AWS Application Migration Service

Correct Answer: C

Section: (none)

QUESTION 287

Which cloud concept is demonstrated by using AWS Compute Optimizer?

A. Security validation

B. Rightsizing

C. Elasticity

D. Global reach

Correct Answer: B

Section: (none)

QUESTION 288

A company hosts a large amount of data in AWS. The company wants to identify if any of the data should be considered sensitive.

Which AWS service will meet the requirement?

A. Amazon Inspector

B. Amazon Macie

C. AWS Identity and Access Management (IAM)

D. Amazon CloudWatch

Correct Answer: B

Section: (none)

QUESTION 289

A user has a stateful workload that will run on Amazon EC2 for the next 3 years. What is the MOST cost-effective pricing model for this workload?

A. On-Demand Instances

B. Reserved Instances

C. Dedicated Instances

D. Spot Instances

Correct Answer: B

Section: (none)

QUESTION 290

Who enables encryption of data at rest for Amazon Elastic Block Store (Amazon EBS)?

A. AWS Support

B. AWS customers

C. AWS Key Management Service (AWS KMS)

D. AWS Trusted Advisor

Correct Answer: C

Section: (none)

想要提升您的雲端運營效率？點擊這裡 了解小豬科技的專業方案。

QUESTION 291

What can a user accomplish using AWS CloudTrail?

A. Generate an IAM user credentials report.

B. Record API calls made to AWS services.

C. Assess the compliance of AWS resource configurations with policies and guidelines.

D. Ensure that Amazon EC2 instances are patched with the latest security updates.

Correct Answer: B

Section: (none)

QUESTION 292

A company is planning to host its workloads on AWS.

Which AWS service requires the company to update and patch the guest operating system?

A. Amazon DynamoDB

B. Amazon S3

C. Amazon EC2

D. Amazon Aurora

Correct Answer: C

Section: (none)

QUESTION 293

Which AWS service or feature will search for and identify AWS resources that are shared externally?

A. Amazon OpenSearch Service

B. AWS Control Tower

C. AWS IAM Access Analyzer

D. AWS Fargate

Correct Answer: C

Section: (none)

QUESTION 294

A company is migrating its workloads to the AWS Cloud. The company must retain full control of patch management for the guest operating systems that host its applications.

Which AWS service should the company use to meet these requirements?

A. Amazon DynamoDB

B. Amazon EC2

C. AWS Lambda

D. Amazon RDS

Correct Answer: B

Section: (none)

聯絡小豬科技專員，立即獲取 專屬雲端解決方案。

QUESTION 295

At what support level do users receive access to a support concierge?

A. Basic Support

B. Developer Support

C. Business Support

D. Enterprise Support

Correct Answer: D

Section: (none)

QUESTION 296

Which AWS service can a company use to visually design and build serverless applications?

A. AWS Lambda

B. AWS Batch

C. AWS Application Composer

D. AWS App Runner

Correct Answer: C

Section: (none)

QUESTION 297

A company wants to migrate to AWS and use the same security software it uses on premises. The security software vendor offers its security software as a service on AWS.

Where can the company purchase the security solution?

A. AWS Partner Solutions Finder

B. AWS Support Center

C. AWS Management Console

D. AWS Marketplace

Correct Answer: D

Section: (none)

QUESTION 298

A company wants to migrate its PostgreSQL database to AWS. The company does not use the database frequently.

Which AWS service or resource will meet these requirements with the LEAST management overhead?

A. PostgreSQL on Amazon EC2

B. Amazon RDS for PostgreSQL

C. Amazon Aurora PostgreSQL-Compatible Edition

D. Amazon Aurora Serverless

Correct Answer: B

Section: (none)

QUESTION 299

A company is using Amazon DynamoDB for its application database.

Which tasks are the responsibility of AWS, according to the AWS shared responsibility model? (Choose two.)

A. Classify data.

B. Configure access permissions.

C. Manage encryption options.

D. Provide public endpoints to store and retrieve data.

E. Manage the infrastructure layer and the operating system.

Correct Answer: DE

Section: (none)

QUESTION 300

A company wants to create a globally accessible ecommerce platform for its customers. The company wants to use a highly available and scalable DNS web service to connect users to the platform.

Which AWS service will meet these requirements?

AWS Certified Solutions Architect Professional is the top AWS certification, which is difficult for non- technical personnel. Each question is like an ancient text, which consumes a lot of time and energy when reading, thus affecting their own work. If the non-technical staff have a need for exam shortcuts contact wechat customer service: ANYPASS, we will help you easily pass, of course, if the technical staff has needs, you can also contact, I wish you a smooth work will pass the exam!!

A. Amazon EC2

B. Amazon VPC

C. Amazon Route 53

D. Amazon RDS

Correct Answer: C

Section: (none)

了解小豬科技如何助您在數位化時代脫穎而出，點擊這裡!

QUESTION 301

Which maintenance task is the customer responsibility, according to the AWS shared responsibility model?

A. Physical connectivity among Availability Zones

B. Network switch maintenance

C. Hardware updates and firmware patches

D. Amazon EC2 updates and security patches

Correct Answer: D

Section: (none)

QUESTION 302

A company wants to improve its security posture by reviewing user activity through API calls. Which AWS service will meet this requirement?

A. AWS WAF

B. Amazon Detective

C. Amazon CloudWatch

D. AWS CloudTrail

Correct Answer: D

Section: (none)

QUESTION 303

A company is migrating to the AWS Cloud and plans to run experimental workloads for 3 to 6 months on AWS.

Which pricing model will meet these requirements?

A. Use Savings Plans for a 3-year term.

B. Use Dedicated Hosts.

C. Buy Reserved Instances.

D. Use On-Demand Instances.

Correct Answer: D

Section: (none)

QUESTION 304

A company that has AWS Enterprise Support is launching a new version of a popular product in 2 months. The company expects a large increase in traffic to its website. The website is hosted on Amazon EC2 instances.

Which action should the company take to assess its readiness to scale for this launch?

A. Replace the EC2 instances with AWS Lambda functions.

B. Use AWS Infrastructure Event Management (IEM) support.

C. Submit a request on AWS Marketplace to monitor the event.

D. Review the coverage reports in the AWS Cost Management console.

Correct Answer: B

Section: (none)

QUESTION 305

A company wants to launch multiple workloads on AWS. Each workload is related to a different business unit. The company wants to separate and track costs for each business unit.

Which solution will meet these requirements with the LEAST operational overhead?

A. Use AWS Organizations and create one account for each business unit.

B. Use a spreadsheet to control the owners and cost of each resource.

C. Use an Amazon DynamoDB table to record costs for each business unit.

D. Use the AWS Billing console to assign owners to resources and track costs.

Correct Answer: A

Section: (none)

享受一流的雲端支持，馬上註冊小豬科技！

QUESTION 306

Which option is a shared control between AWS and the customer, according to the AWS shared responsibility model?

A. Configuration management

B. Physical and environmental controls

C. Data integrity authentication

D. Identity and access management

Correct Answer: A

Section: (none)

QUESTION 307

A company often does not use all of its current Amazon EC2 capacity to run stateless workloads. The company wants to optimize its EC2 costs.

Which EC2 instance type will meet these requirements?

A. Spot Instances

B. Dedicated Instances

C. Reserved Instances

D. On-Demand Instances

Correct Answer: A

Section: (none)

QUESTION 308

A company wants to store data in Amazon S3. The company rarely access the data, and the data can be regenerated if necessary. The company wants to store the data in the most cost-effective storage class.

Which S3 storage class will meet this requirement?

A. S3 Standard

B. S3 Intelligent-Tiering

C. S3 Standard-Infrequent Access (S3 Standard-IA)

D. S3 One Zone-Infrequent Access (S3 One Zone-IA)

Correct Answer: D

Section: (none)

QUESTION 309

A company has migrated its workloads to AWS. The company wants to adopt AWS at scale and operate more efficiently and securely. Which AWS service or framework should the company use for operational support?

A. AWS Support

B. AWS Cloud Adoption Framework (AWS CAF)

C. AWS Managed Services (AMS)

D. AWS Well-Architected Framework

Correct Answer: D

Section: (none)

QUESTION 310

Which AWS service allows users to download security and compliance reports about the AWS infrastructure on demand?

A. Amazon GuardDuty.

B. AWS Security Hub.

C. AWS Artifact.

D. AWS Shield.

Correct Answer: C

Section: (none)

探索小豬科技的全新服務，了解更多讓我們助您站上雲端！

QUESTION 311

A company has a managed IAM policy that does not grant the necessary permissions for users to accomplish required tasks.

How can this be resolved?

A. Enable AWS Shield Advanced.

B. Create a custom IAM policy.

C. Use a third- party web application firewall (WAF) managed rule from the AWS Marketplace.

D. Use AWS Key Management Service (AWS KMS) to create a customer-managed key

Correct Answer: B

Section: (none)

QUESTION 312

What does the Amazon s3 Intelligent-Tiering storage class offer?

A. Payment flexibility by reserving storage capacity

B. Long-term retention of data by copying the data to an encrypted Amazon Elastic Block Store (Amazon EBS) volume

C. Automatic cost savings by moving objects between tiers based on access pattern changes

D. Secure, durable, and lowest cost storage for data archival

Correct Answer: C

Section: (none)

QUESTION 313

Which of the following is entirely the responsibility of AWS, according to the AWS shared responsibility model?

A. Security awareness and training

B. Development of an IAM password policy

C. Patching of the guest operating system

D. Physical and environmental controls

Correct Answer: D

Section: (none)

QUESTION 314

According to the AWS shared responsibility model, the customer is responsible for applying the latest security updates and patches for which of the following?

A. Amazon DynamoDB

B. Amazon EC2 instances

C. Amazon RDS instances

D. Amazon S3

Correct Answer: B

Section: (none)

QUESTION 315

A company hosts an application on an Amazon EC2 instance. The EC2 instance needs to access several AWS resources, including Amazon S3 and Amazon DynamoDB. What is the MOST operationally efficient solution to delegate permissions?

A. Create an IAM role with the required permissions. Attach the role to the EC2 instance

B. Create an IAM user and use its access key and secret access key in the application

C. Create an IAM user and use its access key and secret access key to create a CLI profile in the EC2 instance.

D. Create an IAM role with the required permissions. Attach the role to the administrative IAM user

Correct Answer: A

Section: (none)

好奇小豬科技如何幫助您的企業？了解更多關於我們的專業服務。

QUESTION 316

Who is responsible for managing IAM user access and secret keys according to the AWS shared responsibility model?

A. IAM access and secret keys are static, so there is no need to rotate them

B. The customer is responsible for rotating keys

C. AWS will rotate the keys whenever required

D. The AWS Support team will rotate keys when requested by the customer

Correct Answer: B

Section: (none)

QUESTION 317

Which of the following are features of network ACLs as they are used in the AWS Cloud? (Select TWO.)

A. They are stateless.

B. They are stateful.

C. They evaluate all rules before allowing traffic

D. They process rules in order, starting with the lowest numbered rule, when deciding whether to allow traffic

E. They operate at the instance level.

Correct Answer: AD

Section: (none)

QUESTION 318

An Amazon EC2 instance previously used for development is inaccessible and no longer appears in the AWS Management Console. Which AWS service should be used to determine what action made this EC2 instance inaccessible?

A. Amazon CloudWatch Logs

B. AWS Security Hub

C. Amazon Inspector

D. AWS CIoudTraill

Correct Answer: D

Section: (none)

QUESTION 319

A company uses Amazon S3 to store records that can contain personally identifiable information (PII). The company wants a solution that can monitor all S3 buckets for PII and immediately alert staff about vulnerabilities.

Which AWS service will meet these requirements?

A. Amazon GuardDuty

B. Amazon Detective

C. Amazon Macie

D. AWS Shield

Correct Answer: C

Section: (none)

QUESTION 320

Which AWS Cloud Adoption Framework(AWS CAF) capability belongs to the business perspective?

A. Program and project management

B. Data science

C. Observability

D. Change and release management

Correct Answer: A

Section: (none)

需要更詳細的資訊？聯絡專員，我們會為您提供最佳建議。