The AWS Certified Cloud Practitioner (CLF-C02) exam is designed for individuals who want to demonstrate their overall understanding of AWS Cloud. It covers basic AWS services and their benefits.
A company needs to restrict access to AWS resources based on user and group roles. Which AWS service should they use?
AAWS IAM
BAWS VPC
CAmazon S3
DAWS CloudFormation
Explanation
AWS IAM manages user permissions and access control, while the others do not focus on security roles and permissions.
Q342
You are configuring an application load balancer. What happens if you select the 'HTTP' protocol instead of 'HTTPS'?
AEncrypted traffic is enabled.
BUnencrypted traffic is used.
CPerformance decreases significantly.
DNo impact on performance.
Explanation
Selecting 'HTTP' means the traffic is unencrypted, leading to potential security risks; the other options do not accurately describe this situation.
Q343
Which service allows automatic scaling of resources in AWS?
AAWS Auto Scaling
BAmazon S3
CAWS Lambda
DAmazon RDS
Explanation
AWS Auto Scaling adjusts resource capacity automatically; the other options do not perform scaling.
Q344
A company needs to store sensitive data but keep it easily accessible. Which service is best suited for this?
AAmazon Glacier
BAmazon S3 Standard
CAWS Snowball
DAWS IAM
Explanation
Amazon S3 Standard is ideal for sensitive, easily accessible data; the other services are for colder storage or security management.
Q345
What happens when you delete a security group in AWS?
AAll instances are deleted
BNo effect unless in use
CAccess is permanently denied
DData is lost permanently
Explanation
Deleting a security group not in use has no effect; other options incorrectly imply immediate deletion or loss.
Q346
Which service provides a managed database solution?
AAmazon RDS
BAWS Lambda
CAmazon S3
DAWS CloudFormation
Explanation
Amazon RDS offers a managed database service, while the others serve different purposes like compute or storage.
Q347
A company needs to secure access to sensitive data stored in Amazon S3. Which feature should they use?
AIAM Policies
BVPC Peering
CAWS CLI
DCloudFront
Explanation
IAM Policies help manage access control to S3, while the other options do not specifically secure data access.
Q348
What happens when you delete a CloudFormation stack?
AResources stay intact
BResources are deleted
CAn error occurs
DStack cannot be deleted
Explanation
Deleting a CloudFormation stack removes all associated resources unless they are retained, unlike the other options which are incorrect.
Q349
Which service allows you to run code without provisioning servers?
AAWS Lambda
BAmazon EC2
CAWS Elastic Beanstalk
DAmazon S3
Explanation
AWS Lambda executes code without server management; EC2 requires provisioning.
Q350
A company needs to store and retrieve data with minimal latency. Which AWS storage service is best?
AAmazon S3
BAmazon EFS
CAmazon DynamoDB
DAWS Glacier
Explanation
Amazon DynamoDB is a fast NoSQL database; S3 has higher latency.