CLF-C02: AWS Certified Cloud Practitioner

82%

Question 251

Which AWS service can a company use to store and manage Docker images?
Amazon DynamoDB
Amazon Kinesis Data Streams
Amazon Elastic Container Registry (Amazon ECR)
Amazon Elastic File System (Amazon EFS)




Answer is Amazon Elastic Container Registry (Amazon ECR)

Amazon Elastic Container Registry (Amazon ECR) is a fully managed container registry service provided by AWS. It allows you to store, manage, and deploy Docker container images. With Amazon ECR, you can securely store your container images and easily integrate them with other AWS services, such as Amazon Elastic Container Service (Amazon ECS) or Amazon Elastic Kubernetes Service (Amazon EKS), for running containerized applications.

Reference:
https://aws.amazon.com/docker/#:~:text=AWS%20provides%20Amazon%20Elastic%20Container
,and%20quickly%20retrieving%20Docker%20images.

Question 252

A company needs an automated security assessment report that will identify unintended network access to Amazon EC2 instances. The report also must identify operating system vulnerabilities on those instances.

Which AWS service or feature should the company use to meet this requirement?
AWS Trusted Advisor
Security groups
Amazon Macie
Amazon Inspector




Answer is Amazon Inspector

Amazon Inspector is an automated security assessment service provided by AWS. It helps you identify security vulnerabilities and potential issues in your applications and infrastructure. In the given scenario, Amazon Inspector can be used to generate an automated security assessment report that includes the identification of unintended network access to Amazon EC2 instances and operating system vulnerabilities on those instances.

Amazon Inspector uses a set of predefined rules to assess the security state of your resources. It analyzes the network activity, operating system configurations, and application behavior to identify potential security issues. The assessment report provides detailed findings and recommendations for remediation.

Reference:
https://aws.amazon.com/inspector/faqs/?nc=sn&loc=6

Question 253

Which AWS service tracks API calls and user activity?
AWS Organizations
AWS Config
Amazon CloudWatch
AWS CloudTrail




Answer is AWS CloudTrail

AWS CloudTrail provides a comprehensive audit trail of all API activity within your AWS account. It captures detailed information about API calls made to various AWS services, including the identity of the caller, the time of the call, the source IP address, the parameters passed, and the response received. This information helps you monitor and troubleshoot your AWS infrastructure, track changes made to resources, and investigate security incidents.

Reference:
https://aws.amazon.com/cloudtrail/faqs/

Question 254

A bank needs to store recordings of calls made to its contact center for 6 years. The recordings must be accessible within 48 hours from the time they are requested.

Which AWS service will provide a secure and cost-effective solution for retaining these files?
Amazon DynamoDB
Amazon S3 Glacier
Amazon Connect
Amazon ElastiCache




Answer is Amazon S3 Glacier

Amazon S3 Glacier is designed for long-term data archiving and backup. It provides secure, durable, and scalable object storage with flexible retrieval options. With Amazon S3 Glacier, you can store large amounts of data at a lower cost compared to other storage options. The data is stored in archives and can be accessed within a predefined retrieval time (such as 48 hours) when needed.

Reference:
https://aws.amazon.com/s3/storage-classes/glacier/

Question 255

Which AWS service should be used to migrate a company's on-premises MySQL database to Amazon RDS?
AWS Direct Connect
AWS Server Migration Service (AWS SMS)
AWS Database Migration Service (AWS DMS)
AWS Schema Conversion Tool (AWS SCT)




Answer is AWS Database Migration Service (AWS DMS)

AWS Database Migration Service (AWS DMS) is a managed migration and replication service that helps move your database and analytics workloads to AWS quickly, securely, and with minimal downtime and zero data loss. AWS DMS supports migration between 20-plus database and analytics engines, such as Oracle to Amazon Aurora MySQL-Compatible Edition, MySQL to Amazon Relational Database (RDS) for MySQL, Microsoft SQL Server to Amazon Aurora PostgreSQL-Compatible Edition, MongoDB to Amazon DocumentDB (with MongoDB compatibility), Oracle to Amazon Redshift, and Amazon Simple Storage Service (S3).

Reference:
https://aws.amazon.com/dms/

Question 256

A company accepts enrollment applications on handwritten paper forms. The company uses a manual process to enter the form data into its backend systems.
The company wants to automate the process by scanning the forms and capturing the enrollment data from scanned PDF files.

Which AWS service should the company use to build this process?
Amazon Rekognition
Amazon Textract
Amazon Transcribe
Amazon Comprehend




Answer is Amazon Textract

Amazon Textract is a machine learning (ML) service that automatically extracts text, handwriting, and data from scanned documents. It goes beyond simple optical character recognition (OCR) to identify, understand, and extract data from forms and tables.

Reference:
https://aws.amazon.com/textract/

Question 257

Which AWS service should a company use to organize, characterize, and search large numbers of images?
Amazon Transcribe
Amazon Rekognition
Amazon Aurora
Amazon QuickSight




Answer is Amazon Rekognition

The AWS service that a company should use to organize, characterize, and search large numbers of images is Amazon Rekognition. Amazon Rekognition is a fully managed AI service that makes it easy to add image and video analysis to applications. It provides capabilities such as object and scene detection, facial analysis, celebrity recognition, text detection, and image moderation. With Amazon Rekognition, a company can easily organize and search large numbers of images based on their characteristics, such as visual content, keywords, and tags.

Reference:
https://docs.aws.amazon.com/rekognition/latest/dg/what-is.html

Question 258

An ecommerce company wants to use Amazon EC2 Auto Scaling to add and remove EC2 instances based on CPU utilization.

Which AWS service or feature can initiate an Amazon EC2 Auto Scaling action to achieve this goal?
Amazon Simple Queue Service (Amazon SQS)
Amazon Simple Notification Service (Amazon SNS)
AWS Systems Manager
Amazon CloudWatch alarm




Answer is Amazon CloudWatch alarm

Amazon CloudWatch provides monitoring and observability services for AWS resources, including EC2 instances. It allows you to set up alarms on various metrics, such as CPU utilization, network traffic, or disk usage. When a specific threshold is breached, an alarm is triggered.

With Amazon EC2 Auto Scaling, you can configure scaling policies based on CloudWatch alarms. In this scenario, you can set a CloudWatch alarm to monitor CPU utilization of the EC2 instances. When the CPU utilization exceeds a certain threshold, the alarm triggers an auto scaling action to add more instances to handle the increased load. Similarly, when the CPU utilization decreases, the auto scaling action can remove instances to optimize costs.

Reference:
https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/AlarmThatSendsEmail.html#alarms-and-missing-data

Question 259

A company wants to host a private version control system for its application code in the AWS Cloud.

Which AWS service should the company use to meet this requirement?
AWS CodePipeline
AWS CodeStar
AWS CodeCommit
AWS CodeDeploy




Answer is AWS CodeCommit

AWS CodeCommit is a managed source control system that hosts Git repositories and works with all Git-based tools.

AWS CodeCommit will store code, binaries, and metadata in a redundant fashion with high availability. You will be able to collaborate with local and remote teams to edit, compare, sync, and revise your code.

Because AWS CodeCommit runs in the AWS Cloud, you no longer need to worry about hosting, scaling, or maintaining your own source code control infrastructure. CodeCommit automatically encrypts your files and is integrated with AWS Identity and Access Management (IAM), allowing you to assign user-specific permissions to your repositories. This ensures that your code remains secure and you can collaborate on projects across your team in a secure manner.

Reference:
https://aws.amazon.com/devops/source-control/

Question 260

Which AWS service or tool can a company set up to send notifications that a custom spending threshold has been reached or exceeded?
AWS Budgets
AWS Trusted Advisor
AWS CloudTrail
AWS Support




Answer is AWS Budgets

AWS Budgets is a service that allows users to set custom spending thresholds and receive alerts when those thresholds are reached or exceeded. It provides a way to track and manage costs by setting budgets based on various cost dimensions such as AWS service, linked account, tag, and more. Once a budget is created and configured with the desired spending threshold, users can choose to receive notifications via email or Amazon Simple Notification Service (SNS) when the threshold is crossed. This helps organizations proactively monitor their AWS spending and take appropriate actions to control costs.

Reference:
https://aws.amazon.com/aws-cost-management/aws-budgets/

< Previous PageNext Page >

Quick access to all questions in this exam

Warning: file_get_contents(http://www.geoplugin.net/php.gp?ip=216.73.216.5): failed to open stream: HTTP request failed! HTTP/1.1 403 Forbidden in /home/passnexa/public_html/view/question.php on line 243