Amazon CLF-C02 Online Practice Questions and Exam Preparation

Amazon CLF-C02 Online Questions & Answers

• Question 1:

  A company has migrated its workload to the AWS Cloud. The company wants to optimize existing Amazon EC2 resources. Which AWS services or tools provide this functionality? (Choose two.)

  A. AWS Elastic Beanstalk
  B. AWS Cost Explorer
  C. Amazon Detective
  D. AWS Compute Optimizer
  E. AWS Billing Conductor
  B. AWS Cost Explorer
  D. AWS Compute Optimizer

  ---

  Explanation

• Question 2:

  Which of the following is an advantage that the AWS Cloud provides to users?

  A. Users eliminate the need to guess about infrastructure capacity requirements.
  B. Users decrease their variable costs by maintaining sole ownership of IT hardware.
  C. Users maintain control of underlying IT infrastructure hardware.
  D. Users maintain control of operating systems for managed services.
  A. Users eliminate the need to guess about infrastructure capacity requirements.

  ---

  Explanation

  One of the primary advantages of the AWS Cloud is the ability to provision resources on demand. Users no longer need to over-provision or guess the capacity needed for infrastructure, which helps optimize costs and improve agility. AWS handles infrastructure scaling dynamically based on the actual usage. Options B, C, and D are incorrect as users do not maintain sole ownership of IT hardware or control of underlying infrastructure, and while they do maintain some control over the operating system in some cases, it is not an advantage specific to the cloud.

• Question 3:

  A company wants to securely log in to Linux Amazon EC2 instances.

  A. Use end-to-end encryption.
  B. Use multi-factor authentication (MFA).
  C. Use AWS Systems Manager Session Manager.
  D. Use AWS Systems Manager State Manager.
  C. Use AWS Systems Manager Session Manager.

  ---

  Explanation

• Question 4:

  Which statement describes a characteristic of the AWS global infrastructure?

  A. Edge locations contain multiple AWS Regions.
  B. AWS Regions contain multiple Regional edge caches.
  C. Availability Zones contain multiple data centers.
  D. Each data center contains multiple edge locations.
  C. Availability Zones contain multiple data centers.

  ---

  Explanation

  Availability Zones contain multiple data centers. This is a characteristic of the AWS global infrastructure, which consists of AWS Regions, Availability Zones, and edge locations. AWS Regions are geographically isolated areas that contain multiple Availability Zones. Availability Zones are physically separate locations within an AWS Region that are engineered to be isolated from failures and connected by low-latency, high- throughput, and highly redundant networking. Each Availability Zone contains one or more data centers that house the servers and storage devices that run AWS services. Edge locations are sites that are located closer to the end users and provide caching and content delivery services. AWS Global InfrastructureAWS Certified Cloud Practitioner - aws.amazon.com

• Question 5:

  A company that has multiple business units wants to centrally manage and govern its AWS Cloud environments. The company wants to automate the creation of AWS accounts, apply service control policies (SCPs), and simplify billing processes. Which AWS service or tool should the company use to meet these requirements?

  A. AWS Organizations
  B. Cost Explorer
  C. AWS Budgets
  D. AWS Trusted Advisor
  A. AWS Organizations

  ---

  Explanation

  AWS Organizations is an AWS service that enables you to centrally manage and govern your AWS Cloud environments across multiple business units. AWS Organizations allows you to create an organization that consists of AWS accounts that you create or invite to join. You can group your accounts into organizational units (OUs) and apply service control policies (SCPs) to them. SCPs are a type of policy that specify the maximum permissions for the accounts in your organization, and can help you enforce compliance and security requirements. AWS Organizations also simplifies billing processes by enabling you to consolidate and pay for all member accounts with a single payment method. You can also use AWS Organizations to automate the creation of AWS accounts by using APIs or AWS CloudFormation templates.

  References: What is AWS Organizations?, Policy-Based Management - AWS Organizations

• Question 6:

  A company needs to configure rules to identify threats and protect applications from malicious network access.

  Which AWS service should the company use to meet these requirements?

  A. AWS Identity and Access Management (IAM)
  B. Amazon QuickSight
  C. AWS WAF
  D. Amazon Detective
  C. AWS WAF

  ---

  Explanation

  AWS WAF is the AWS service that the company should use to configure rules to identify threats and protect applications from malicious network access. AWS WAF is a web application firewall that helps to filter, monitor, and block malicious web requests based on customizable rules. AWS WAF can be integrated with other AWS services, such as Amazon CloudFront, Amazon API Gateway, and Application Load Balancer. For more information, see What is AWS WAF? and How AWS WAF Works.

• Question 7:

  A company plans to launch an ecommerce website that contains many images for a product catalog. The company wants to keep the cost of running the website within a specific budget.

  Which AWS service or tool should the company use to monitor the ongoing costs of the website?

  A. AWS Cost Explorer
  B. AWS SDKs
  C. EC2 Image Builder
  D. AWS CloudFormation
  A. AWS Cost Explorer

  ---

  Explanation

  AWS Cost Explorer is a tool that enables you to view and analyze your costs and usage. It provides an easy-to-use interface to visualize, understand, and manage AWS costs and usage over time. Cost Explorer allows companies to monitor

  ongoing costs, set budget alerts, and analyze cost drivers, making it ideal for keeping the cost of running an e-commerce website within a specific budget.

  AWS SDKs: Incorrect. These are software development kits that allow integration with AWS services but do not provide cost monitoring or management capabilities.

  EC2 Image Builder: Incorrect. This service is for automating the creation of virtual machine images, not for monitoring costs.

  AWS CloudFormation: Incorrect. This service is used for provisioning and managing infrastructure as code, not for cost monitoring.

• Question 8:

  A company is migrating its public website to AWS. The company wants to host the domain name for the website on AWS. Which AWS service should the company use to meet this requirement?

  A. AWS Lambda
  B. Amazon Route 53
  C. Amazon CloudFront
  D. AWS Direct Connect
  B. Amazon Route 53

  ---

  Explanation

  Amazon Route 53 is a scalable Domain Name System (DNS) web service that routes end-user requests to infrastructure running in AWS. It is specifically designed to host domain names and manage DNS records, making it the ideal service for hosting the domain name of a public website. AWS Lambda, CloudFront, and Direct Connect serve different functions and are not DNS hosting services.

• Question 9:

  A company needs a database that can quickly read and write large amounts of unstructured data.

  Which AWS service meets these requirements with the MOST scalability?

  A. Amazon RDS
  B. Amazon Elastic Block Store (Amazon EBS)
  C. Amazon DynamoDB
  D. Amazon Lightsail
  C. Amazon DynamoDB

  ---

  Explanation

• Question 10:

  A company runs a database on Amazon Aurora in the us-east-1 Region. The company has a disaster recovery requirement that the database be available in another Region.

  Which solution meets this requirement with minimal disruption to the database operations?

  A. Perform an Aurora Multi-AZ deployment.
  B. Deploy Aurora cross-Region read replicas.
  C. Create Amazon Elastic Block Store (Amazon EBS) volume snapshots for Aurora and copy them to another Region.
  D. Deploy Aurora Replicas.
  B. Deploy Aurora cross-Region read replicas.

  ---

  Explanation

  The solution that meets the requirement of the company that runs a database on Amazon Aurora in the us-east-1 Region and has a disaster recovery requirement that the database be available in another Region with minimal disruption to the database operations is to deploy Aurora cross-Region read replicas. Aurora cross-Region read replicas are secondary Aurora clusters that are created in a different AWS Region from the primary Aurora cluster, and are kept in sync with the primary cluster using physical replication. The company can use Aurora cross-Region read replicas to improve the availability and durability of the database, as well as to reduce the recovery time objective (RTO) and recovery point objective (RPO) in case of a regional disaster. Performing an Aurora Multi-AZ deployment, creating Amazon EBS volume snapshots for Aurora and copying them to another Region, and deploying Aurora Replicas are not the best solutions for this requirement. An Aurora Multi-AZ deployment is a configuration that creates one or more Aurora Replicas within the same AWS Region as the primary Aurora cluster, and provides automatic failover in case of an Availability Zone outage. However, this does not provide cross-Region disaster recovery. Creating Amazon EBS volume snapshots for Aurora and copying them to another Region is a manual process that requires stopping the database, creating the snapshots, copying them to the target Region, and restoring them to a new Aurora cluster. This process can cause significant downtime and data loss. Deploying Aurora Replicas is a configuration that creates one or more secondary Aurora clusters within the same AWS Region as the primary Aurora cluster, and provides read scaling and high availability. However, this does not provide cross-Region disaster recovery.