Free CLF-C02 Exam Braindumps
AWS Certified Cloud Practitioner CLF-C02 Questions 211–215 (page: 44)

Updated On: 1-Oct-2026

A company is deploying a mobile app on AWS. Thousands of users will access the app.
Which AWS service should the company use to create a directory to manage sign-in for the users?

  1. AWS Directory Service
  2. AWS IAM Identity Center
  3. Amazon Cognito
  4. AWS Identity and Access Management (IAM)

Answer(s): C

Explanation:

Amazon Cognito is specifically designed for managing user authentication and sign-in for mobile and web applications. It provides user directories, supports social and enterprise identity providers, and enables features like multi-factor authentication (MFA). It is the ideal choice for managing authentication for thousands of app users.



A company needs to use an AWS service to invoke an AWS Lambda function when an Amazon EC2 instance enters the stopping state.
Which AWS service will meet this requirement?

  1. Amazon EventBridge
  2. AWS Config
  3. Amazon Simple Notification Service (Amazon SNS)
  4. AWS CloudFormation

Answer(s): A



A company wants to control traffic between its application and Amazon DynamoDB. The company hosts the application on Amazon EC2 instances within VPC subnets.
Which AWS services or features should the company use to manage this traffic? (Choose two.)

  1. AWS WAF
  2. AWS Shield
  3. Network ACLs
  4. VPC endpoints
  5. AWS Global Accelerator

Answer(s): C,D

Explanation:

Network ACLs provide stateless traffic filtering at the subnet level, allowing the company to control inbound and outbound traffic to and from the EC2 instances.
VPC endpoints (specifically DynamoDB Gateway Endpoints) enable private connectivity between the VPC and
DynamoDB without traversing the public internet, providing both control and security over the traffic.



A company is considering a move to the AWS Cloud. The company wants to be able to scale its compute resources as needed to accommodate changing loads.
Which benefit of the AWS Cloud does this scenario describe?

  1. Global deployment in minutes
  2. Cost savings
  3. Agility
  4. Elasticity

Answer(s): D

Explanation:

Elasticity refers to the ability to automatically scale compute resources up or down to match changing workloads. This capability ensures optimal resource utilization and cost efficiency, which is a key benefit of the
AWS Cloud for accommodating variable loads.



In the AWS shared responsibility model, which tasks are the responsibility of AWS? (Choose two.)

  1. Patch an Amazon EC2 instance operating system.
  2. Configure a security group.
  3. Monitor the health of an Availability Zone.
  4. Protect the infrastructure that runs Amazon EC2 instances.
  5. Manage access to the data in an Amazon S3 bucket.

Answer(s): C,D

Explanation:

In the AWS shared responsibility model, AWS is responsible for the security of the cloud, which includes:
-▪ Monitoring the health of an Availability Zone: AWS ensures the availability and operation of its infrastructure, including Availability Zones.
-▪ Protecting the infrastructure that runs Amazon EC2 instances: This includes physical security,
hardware maintenance, and the underlying network infrastructure.
The customer is responsible for tasks such as configuring security groups, patching EC2 instance operating systems, and managing access to data stored in services like Amazon S3.



Viewing page 44 of 201
Viewing questions 216 - 220 out of 999 questions


Post your Comments and Discuss Amazon CLF-C02 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!