Free CLF-C02 Exam Braindumps
AWS Certified Cloud Practitioner CLF-C02 Questions 501–505 (page: 102)

Updated On: 1-Oct-2026

A developer who has no AWS Cloud experience wants to use AWS technology to build a web application.
Which AWS service should the developer use to start building the application?

  1. Amazon SageMaker
  2. AWS Lambda
  3. Amazon Lightsail
  4. Amazon Elastic Container Service (Amazon ECS)

Answer(s): C

Explanation:


Reference:

https://aws.amazon.com/getting-started/hands-on/amazon-ebs-backup-and-restore-using-aws-backup/



A company needs to migrate from its on-premises data center to the AWS Cloud. The company must minimize latency of the connection and must not transfer data through the public internet.
Which AWS service should the company use to meet these requirements?

  1. AWS PrivateLink
  2. AWS Direct Connect
  3. AWS Site-to-Site VPN
  4. AWS Client VPN

Answer(s): B

Explanation:

AWS Direct Connect provides a dedicated private network connection between an on-premises data center and AWS, minimizing latency and ensuring data does not traverse the public internet.



A company's application uses Amazon EC2 instances, AWS Lambda functions, and AWS Fargate tasks that are deployed in multiple AWS Regions. The company needs to optimize cost across Regions by using a single purchasing option.
Which purchasing option will meet these requirements MOST cost-effectively?

  1. Compute Savings Plans
  2. EC2 Instance Savings Plans
  3. On-Demand Instances
  4. Reserved Instances

Answer(s): A

Explanation:

Compute Savings Plans is the most flexible Savings Plan option, allowing cost savings of up to 66%
compared to On-Demand pricing. It applies to usage across multiple AWS Regions and works with various compute services, including Amazon EC2, AWS Lambda, and AWS Fargate. This flexibility makes it ideal for optimizing costs across Regions and compute types.



Which AWS service offers threat detection and continuously monitors for malicious activity and unauthorized behavior in AWS accounts?

  1. Amazon Macie
  2. AWS Config
  3. Amazon GuardDuty
  4. Amazon Inspector

Answer(s): C

Explanation:

Amazon GuardDuty is a managed threat detection service that continuously monitors AWS accounts,
workloads, and data for malicious activity, unauthorized behavior, and potential security threats using machine learning, anomaly detection, and threat intelligence feeds.



A company provides Amazon WorkSpaces to its remote employees. The company wants to prevent employees from using their virtual desktops to visit specific websites that are known to be malicious.
Which AWS service should the company use to meet this requirement?

  1. AWS Shield Advanced
  2. Amazon Route 53
  3. Amazon GuardDuty
  4. AWS Network Firewall

Answer(s): D

Explanation:

AWS Network Firewall is a managed service that provides network protections for VPCs. It includes features like URL filtering to block access to specific websites, including malicious ones. This makes it the ideal solution for preventing Amazon WorkSpaces users from visiting known malicious websites.



Viewing page 102 of 201
Viewing questions 506 - 510 out of 999 questions


Post your Comments and Discuss Amazon CLF-C02 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!