Amazon CLF-C02 Online Practice Questions and Exam Preparation

Amazon CLF-C02 Online Questions & Answers

• Question 1001:

  What does the Amazon S3 Intelligent-Tiering storage class offer?

  A. Payment flexibility by reserving storage capacity
  B. Long-term retention of data by copying the data to an encrypted Amazon Elastic Block Store (Amazon EBS) volume
  C. Automatic cost savings by moving objects between tiers based on access pattern changes
  D. Secure, durable, and lowest cost storage for data archival
  C. Automatic cost savings by moving objects between tiers based on access pattern changes

  ---

  Explanation

  The Amazon S3 Intelligent-Tiering storage class offers automatic cost savings by moving objects between tiers based on access pattern changes. This storage class is designed for data with unknown or changing access patterns. It has two access tiers: frequent access and infrequent access. Objects are stored in the frequent access tier by default, and are moved to the infrequent access tier after 30 consecutive days of no access. If an object in the infrequent access tier is accessed, it is moved back to the frequent access tier. There are no retrieval fees in S3 Intelligent-Tiering, and no additional tiering fees when objects are moved between access tiers within the S3 Intelligent-Tiering storage class1.

• Question 1002:

  A company has an AWS-hosted website located behind an Application Load Balancer. The company wants to safeguard the website from SQL injection or cross-site scripting.

  Which AWS service should the company use?

  A. Amazon GuardDuty
  B. AWS WAF
  C. AWS Trusted Advisor
  D. Amazon Inspector
  B. AWS WAF

  ---

  Explanation

  The company should use AWS WAF to safeguard the website from SQL injection or cross-site scripting. AWS WAF is a web application firewall that helps protect web applications from common web exploits that could affect availability, compromise security, or consume excessive resources. The company can use AWS WAF to create custom rules that block malicious requests that match certain patterns, such as SQL injection or cross-site scripting. AWS WAF can be applied to web applications that are behind an Application Load Balancer, Amazon CloudFront, or Amazon API Gateway. Amazon GuardDuty, AWS Trusted Advisor, and Amazon Inspector are not the best services to use for this purpose. Amazon GuardDuty is a threat detection service that monitors for malicious activity and unauthorized behavior across the AWS accounts and resources. AWS Trusted Advisor is a service that provides best practice recommendations for cost optimization, performance, security, and fault tolerance. Amazon Inspector is a service that assesses the security and compliance of applications running on Amazon EC2 instances12

• Question 1003:

  Which AWS service can manage permissions for AWS resources by using policies?

  A. Amazon Inspector
  B. Amazon Detective
  C. AWS Identity and Access Management (IAM)
  D. Amazon GuardDuty
  C. AWS Identity and Access Management (IAM)

  ---

  Explanation

• Question 1004:

  A company is running an application that is hosted on Amazon EC2 instances. The usage of the EC2 instances is higher during daytime hours than nighttime hours. The company wants to optimize the number of EC2 instances based on this usage pattern.

  Which AWS service or instance purchasing option should the company use to meet these requirements?

  A. Spot Instances
  B. Reserved Instances
  C. AWS CloudFormation
  D. AWS Auto Scaling
  D. AWS Auto Scaling

  ---

  Explanation

  AWS Auto Scaling is the AWS service that allows users to optimize the number of EC2 instances based on the usage pattern, as it automatically adjusts the capacity to maintain steady and predictable performance at the lowest possible cost. Spot Instances are a way to reduce the cost of EC2 instances by bidding on unused EC2 capacity, but they are not suitable for applications that require steady and reliable performance. Reserved Instances are a way to reduce the cost of EC2 instances by committing to a certain amount of usage for a period of time, but they are not flexible to adjust to the usage pattern. AWS CloudFormation is a way to automate the creation and management of AWS resources, but it does not optimize the number of EC2 instances based on the usage pattern. These concepts are explained in the AWS Cloud Practitioner Essentials course3.

• Question 1005:

  A company that is migrating to the AWS Cloud wants to reduce the operational costs of running its databases. Which combination of actions should the company take to achieve this goal (Select TWO.)

  A. Activate Amazon DynamoDB Accelerator (DAX)
  B. Deploy resources across multiple Availability Zones.
  C. Decrease operational tasks by using AWS managed services.
  D. Automate changes and responses to events.
  E. Use the AWS global infrastructure to benefit from economies of scale
  C. Decrease operational tasks by using AWS managed services.
  D. Automate changes and responses to events.

  ---

  Explanation

• Question 1006:

  A company needs to use machine learning and pattern matching to identify and protect sensitive data that the company stores in the AWS Cloud.

  Which AWS service will meet these requirements?

  A. Amazon Inspector
  B. Amazon Macie
  C. Amazon GuardDuty
  D. AWS Audit Manager
  B. Amazon Macie

  ---

  Explanation

  Amazon Macie is a fully managed data security and data privacy service that uses machine learning and pattern matching to discover and protect your sensitive data in AWS.

• Question 1007:

  A company wants to grant users in one AWS account access to resources in another AWS account. The users do not currently have permission to access the resources. Which AWS service will meet this requirement?

  A. IAM group
  B. IAM role
  C. IAM tag
  D. IAM Access Analyzer
  B. IAM role

  ---

  Explanation

  IAM roles are a way to delegate access to resources in different AWS accounts. IAM roles allow users to assume a set of permissions for a limited time without having to create or share long-term credentials. IAM roles can be used to grant cross- account access by creating a trust relationship between the accounts and specifying the permissions that the role can perform. Users can then switch to the role and access the resources in the other account using temporary security credentials provided by the role.

  References: Cross account resource access in IAM, IAM tutorial: Delegate access across AWS accounts using IAM roles, How to Enable Cross-Account Access to the AWS Management Console

• Question 1008:

  A company manages an on-premises MySQL database on a Windows server. The company wants to migrate the database to AWS and needs a solution that will reduce the administrative overhead of the database.

  Which AWS service will meet this requirement?

  A. Amazon Redshift
  B. Amazon ElastiCache
  C. Amazon RDS
  D. Amazon Elastic File System (Amazon EFS)
  C. Amazon RDS

  ---

  Explanation

• Question 1009:

  A company has migrated its workloads to AWS. The company wants to adopt AWS at scale and operate more efficiently and securely.

  Which AWS service or framework should the company use for operational support?

  A. AWS Support
  B. AWS Cloud Adoption Framework (AWS CAF)
  C. AWS Managed Services (AMS)
  D. AWS Well-Architected Framework
  C. AWS Managed Services (AMS)

  ---

  Explanation

  AWS Managed Services (AMS) helps enterprises adopt AWS at scale by providing operational support for infrastructure, including monitoring, patching, backup, incident management, and security. It enables companies to operate more

  efficiently and securely by offloading much of the day-to-day operations to AWS experts, allowing internal teams to focus on innovation.

  A is incorrect because AWS Support provides technical assistance and troubleshooting, but not full operational management.

  B is a strategic planning framework, not an operational service.

  D helps review and improve architecture but does not provide hands-on operational support.

• Question 1010:

  Which AWS service is designed to help users orchestrate a workflow process for a set of AWS Lambda functions?

  A. Amazon DynamoDB
  B. AWS CodePipeline
  C. AWS Batch
  D. AWS Step Functions
  D. AWS Step Functions

  ---

  Explanation

  The AWS service that is designed to help users orchestrate a workflow process for a set of AWS Lambda functions is AWS Step Functions. AWS Step Functions is a service that helps users coordinate multiple AWS services into serverless workflows that can be triggered by events, such as messages, API calls, or schedules. AWS Step Functions allows users to create and visualize complex workflows that can include branching, parallel execution, error handling, retries, and timeouts. AWS Step Functions can integrate with AWS Lambda to orchestrate a sequence of Lambda functions that perform different tasks or logic. Amazon DynamoDB, AWS CodePipeline, and AWS Batch are not the best services to use for orchestrating a workflow process for a set of AWS Lambda functions. Amazon DynamoDB is a fully managed NoSQL database service that provides fast and consistent performance, scalability, and flexibility. AWS CodePipeline is a fully managed continuous delivery service that helps users automate the release process of their applications. AWS Batch is a fully managed service that helps users run batch computing workloads on the AWS Cloud.