CLF-C02 Free Practice Test

- (Exam Topic 2)
A company wants to push VPC Flow Logs to an Amazon S3 bucket.
Which action is the company's responsibility?

1. A. Managing the infrastructure that runs the S3 bucket.
2. B. Managing the data in transit.
3. C. Managing the encryption options on the S3 bucket
4. D. Managing the operating system updates on the S3 bucket

Correct Answer: C

- (Exam Topic 3)
A company needs to use a serverless interactive query service to analyze data in Amazon S3. The query service must support standard SQL.
Which AWS service will meet these requirements?

1. A. Amazon Redshift
2. B. AWS Glue
3. C. Amazon Athena
4. D. Amazon Kinesis Data Streams

Correct Answer: C

- (Exam Topic 1)
A company stores configuration files in an Amazon S3 bucket. These configuration files must be accessed by applications that are running on Amazon EC2 instances.
According to AWS security best practices, how should the company grant permissions to allow the applications to access the S3 bucket?

1. A. Use the AWS account root user access keys.
2. B. Use the AWS access key ID and the EC2 secret access key.
3. C. Use an IAM role with the necessary permissions.
4. D. Activate multi-factor authentication (MFA) and versioning on the S3 bucket.

Correct Answer: C

- (Exam Topic 3)
A company wants to build an application that consists entirely of microservices. Which AWS Cloud architecture design principle supports this goal?

1. A. Think parallel.
2. B. Implement elasticity.
3. C. Stop guessing capacity.
4. D. Decouple components

Correct Answer: D

- (Exam Topic 3)
What is the security best practice concerning sensitive data stored in Amazon S3?

1. A. Enable cross-Region replication on the S3 bucket.
2. B. Enable S3 server-side encryption on the S3 bucket.
3. C. Configure AWS WAF to prevent unauthorized access to the S3 bucket.
4. D. Configure Amazon GuardDuty to prevent unauthorized access to the S3 bucket.

Correct Answer: B