Amazon CLF-C02 Online Practice Questions and Exam Preparation

Amazon CLF-C02 Online Questions & Answers

• Question 991:

  Which AWS service gives users the ability to provision a dedicated and private network connection from their internal network to AWS?

  A. AWS CloudHSM
  B. AWS Direct Connect
  C. AWS VPN
  D. Amazon Connect
  B. AWS Direct Connect

  ---

  Explanation

  AWS Direct Connect gives users the ability to provision a dedicated and private network connection from their internal network to AWS. AWS Direct Connect links the user's internal network to an AWS Direct Connect location over a standard Ethernet fiber-optic cable. One end of the cable is connected to the user's router, the other to an AWS Direct Connect router. With this connection in place, the user can create virtual interfaces directly to the AWS cloud and Amazon Virtual Private Cloud (Amazon VPC), bypassing internet service providers in the network path2.

• Question 992:

  Which option is a shared responsibility between AWS and its customers under the AWS shared responsibility model?

  A. Configuration of Amazon EC2 instance operating systems
  B. Application file system server-side encryption
  C. Patch management
  D. Security of the physical infrastructure
  C. Patch management

  ---

  Explanation

  Shared Controls

  "AWS is responsible for patching and fixing flaws within the infrastructure, but customers are responsible for patching their guest OS and applications."

  https://aws.amazon.com/compliance/shared-responsibility-model/

• Question 993:

  A company is assessing its AWS Business Support plan to determine if the plan still meets the company's needs. The company is considering switching to AWS Enterprise Support.

  Which additional benefit will the company receive with AWS Enterprise Support?

  A. A full set of AWS Trusted Advisor checks
  B. Phone, email, and chat access to cloud support engineers 24 hours a day, 7 days a week
  C. A designated technical account manager (TAM) to assist in monitoring and optimization
  D. A consultative review and architecture guidance for the company's applications
  C. A designated technical account manager (TAM) to assist in monitoring and optimization

  ---

  Explanation

  AWS Enterprise Support provides customers with a designated technical account manager (TAM) who is a single point of contact for all technical and operational issues. The TAM provides consultative architectural and operational guidance delivered in the context of the customer's applications and use-cases to help them achieve the greatest value from AWS. The TAM also helps customers with proactive services, such as strategic business reviews, security improvement programs, guided Well-Architected reviews, cost optimization workshops, and more1. A full set of AWS Trusted Advisor checks is not an additional benefit of AWS Enterprise Support, as it is also included in the AWS Business Support plan2. AWS Trusted Advisor is a tool that provides best practice recommendations for cost optimization, performance, security, fault tolerance, and service limits. Phone, email, and chat access to cloud support engineers 24 hours a day, 7 days a week is not an additional benefit of AWS Enterprise Support, as it is also included in the AWS Business Support plan2. Cloud support engineers can help customers with technical issues, such as troubleshooting, configuration, usage, and service features. A consultative review and architecture guidance for the company's applications is not an additional benefit of AWS Enterprise Support, as it is also included in the AWS Business Support plan2. Customers can request a consultative review from a solutions architect who will provide best practices and recommendations based on the customer's use-cases and goals.

• Question 994:

  A company wants to set up an entire development and continuous delivery toolchain for coding, building, testing, and deploying application code. Which AWS service will meet these requirements?

  A. Amazon CodeGuru
  B. AWS CodeStar
  C. AWS CodeCommit
  D. AWS CodeDeploy
  B. AWS CodeStar

  ---

  Explanation

• Question 995:

  A company has an on-premises application. The application has processing times of less than 5 minutes and is invoked only a few times each day. The company wants to move the application to the AWS Cloud.

  Which AWS service will support this application MOST cost-effectively?

  A. Amazon Elastic Container Service (Amazon ECS)
  B. AWS Lambda
  C. Amazon Elastic Kubernetes Service (Amazon EKS)
  D. Amazon EC2
  B. AWS Lambda

  ---

  Explanation

  AWS Lambda is a serverless compute service that is ideal for applications with short-running processes and low-frequency invocation, as it only charges for the compute time consumed. Since the application is invoked only a few times a day and runs for less than 5 minutes, Lambda is the most cost-effective option. ECS, EKS, and EC2 are better suited for more persistent workloads and would be more costly in this use case.

• Question 996:

  Who is responsible for managing IAM user access and secret keys according to the AWS shared responsibility model?

  A. IAM access and secret keys are static, so there is no need to rotate them.
  B. The customer is responsible for rotating keys.
  C. AWS will rotate the keys whenever required.
  D. The AWS Support team will rotate keys when requested by the customer.
  B. The customer is responsible for rotating keys.

  ---

  Explanation

• Question 997:

  An IT engineer needs to access AWS services from an on-premises application.

  Which credentials or keys does the application need for authentication?

  A. AWS account user name and password
  B. IAM access key and secret
  C. Amazon EC2 key pairs
  D. AWS Key Management Service (AWS KMS) keys
  B. IAM access key and secret

  ---

  Explanation

  IAM access keys are long-term credentials that consist of an access key ID and a secret access key. You use access keys to sign programmatic requests that you make to AWS. If you need to access AWS services from an on-premises application, you can use IAM access keys to authenticate your requests. AWS account user name and password are used to sign in to the AWS Management Console. Amazon EC2 key pairs are used to connect to your EC2 instances using SSH. AWS Key Management Service (AWS KMS) keys are used to encrypt and decrypt your data using the AWS Encryption SDK or the AWS CLI.

• Question 998:

  A company wants to migrate its applications from its on-premises data center to a VPC in the AWS Cloud.

  These applications will need to access on-premises resources.

  Which actions will meet these requirements?

  (Select TWO.)

  A. Use AWS Service Catalog to identify a list of on-premises resources that can be migrated.
  B. Create a VPN connection between an on-premises device and a virtual private gateway in the VPC.
  C. Use an Amazon CloudFront distribution and configure it to accelerate content delivery close to the on-premises resources
  D. Set up an AWS Direct Connect connection between the on-premises data center and AWS.
  E. Use Amazon CloudFront to restrict access to static web content provided through the on-premises web servers.
  B. Create a VPN connection between an on-premises device and a virtual private gateway in the VPC.
  D. Set up an AWS Direct Connect connection between the on-premises data center and AWS.

• Question 999:

  A company simulates workflows to review and validate that all processes are effective and that staff are familiar with the processes.

  Which design principle of the AWS Well-Architected Framework is the company following with this practice?

  A. Perform operations as code.
  B. Refine operation procedures frequently.
  C. Make frequent, small, reversible changes.
  D. Structure the company to support business outcomes.
  B. Refine operation procedures frequently.

  ---

  Explanation

  Refining operation procedures frequently is one of the design principles of the operational excellence pillar of the AWS Well-Architected Framework. It means that you should review and validate your processes regularly to ensure they are effective and that staff are familiar with them. Performing operations as code, making frequent, small, reversible changes, and structuring the company to support business outcomes are design principles of other pillars of the AWS Well-Architected Framework.

• Question 1000:

  Which Amazon S3 storage class is the MOST cost-effective for long-term storage?

  A. S3 Glacier Deep Archive
  B. S3 Standard
  C. S3 Standard-Infrequent Access (S3 Standard-IA)
  D. S3 One Zone-Infrequent Access (S3 One Zone-IA)
  A. S3 Glacier Deep Archive

  ---

  Explanation

  Amazon S3 Glacier Deep Archive is the lowest-cost storage class in the cloud. It is designed for long-term data archiving that is rarely accessed. It offers a retrieval time of 12 hours and a durability of 99.999999999% (11 9's). It is ideal for data that must be retained for 7 years or longer to meet regulatory compliance requirements.