Amazon CLF-C02 Online Practice Questions and Exam Preparation

Amazon CLF-C02 Online Questions & Answers

• Question 1021:

  A company recently mutated to AWS and wants to enable intelligent threat protection and continuous monitoring across all of its AWS accounts. Which AWS service should the company use lo achieve this goal?

  A. Amazon Macie
  B. Amazon GuardDuty
  C. AWS Shield
  D. Amazon Detective
  B. Amazon GuardDuty

  ---

  Explanation

• Question 1022:

  Which AWS service is a fully managed service for machine learning?

  A. AWS Lambda
  B. Amazon Kinesis
  C. Amazon Athena
  D. Amazon SageMaker
  D. Amazon SageMaker

• Question 1023:

  Which AWS service can a company use to securely store and encrypt passwords for a database?

  A. AWS Shield
  B. AWS Secrets Manager
  C. AWS Identity and Access Management (IAM)
  D. Amazon Cognito
  B. AWS Secrets Manager

  ---

  Explanation

  AWS Secrets Manager is an AWS service that can be used to securely store and encrypt passwords for a database. It allows users to manage secrets, such as database credentials, API keys, and tokens, in a centralized and secure way. It also provides features such as automatic rotation, fine-grained access control, and auditing. AWS Shield is an AWS service that provides protection against Distributed Denial of Service (DDoS) attacks for AWS resources and services. It does not store or encrypt passwords for a database. AWS Identity and Access Management (IAM) is an AWS service that allows users to manage access to AWS resources and services. It can be used to create users, groups, roles, and policies that control who can do what in AWS. It does not store or encrypt passwords for a database. Amazon Cognito is an AWS service that provides user identity and data synchronization for web and mobile applications. It can be used to authenticate and authorize users, manage user profiles, and sync user data across devices. It does not store or encrypt passwords for a database.

• Question 1024:

  A company plans to create a data lake that uses Amazon S3. Which factor will have the MOST effect on cost?

  A. The selection of S3 storage tiers
  B. Charges to transfer existing data into Amazon S3
  C. The addition of S3 bucket policies
  D. S3 ingest fees for each request
  B. Charges to transfer existing data into Amazon S3

  ---

  Explanation

• Question 1025:

  Which AWS Cloud service can send alerts to customers if custom spending thresholds are exceeded?

  A. AWS Budgets
  B. AWS Cost Explorer
  C. AWS Cost Allocation Tags
  D. AWS Organizations
  A. AWS Budgets

  ---

  Explanation

  AWS Budgets is a service that allows you to set custom budgets for your AWS costs and usage, and receive alerts via email or Amazon SNS notifications if you exceed or are forecasted to exceed your budgeted amount. You can create budgets based on different dimensions, such as service, linked account, tag, or purchase option, and define various types of alerts, such as actual, forecasted, or RI utilization alerts. You can also configure custom actions to automatically execute remediation tasks or workflows when a budget threshold is breached. AWS Budgets is the only service among the options that can send alerts to customers if custom spending thresholds are exceeded. The other options are not AWS services that provide this functionality.

• Question 1026:

  A company wants to use Amazon EC2 instances for a stable production workload that will run for 1 year.

  Which instance purchasing option meets these requirements MOST cost-effectively?

  A. Dedicated Hosts
  B. Reserved Instances
  C. On-Demand Instances
  D. Spot Instances
  B. Reserved Instances

  ---

  Explanation

  B is correct because Reserved Instances are the instance purchasing option that offers the most cost-effective way to use Amazon EC2 instances for a stable production workload that will run for 1 year, as they provide significant discounts compared to On-Demand Instances in exchange for a commitment to use a specific amount of computing power for a period of time. A is incorrect because Dedicated Hosts are the instance purchasing option that allows customers to use physical servers that are fully dedicated to their use, which is more expensive and less flexible than Reserved Instances. C is incorrect because On-Demand Instances are the instance purchasing option that allows customers to pay for compute capacity by the hour or second with no long-term commitments, which is more suitable for short-term, variable, and unpredictable workloads. D is incorrect because Spot Instances are the instance purchasing option that allows customers to bid on spare Amazon EC2 computing capacity, which is more suitable for flexible, scalable, and fault-tolerant workloads that can tolerate interruptions.

• Question 1027:

  A user wants to invoke an AWS Lambda function when an Amazon EC2 instance enters the "stopping" state. Which AWS service is appropriate for this use case?

  A. Amazon EventBridge
  B. AWS Config
  C. Amazon Simple Notification Service (Amazon SNS)
  D. AWS CloudFormation
  A. Amazon EventBridge

  ---

  Explanation

  Amazon EventBridge (formerly CloudWatch Events) allows users to respond to changes in the state of AWS resources. It can be configured to invoke an AWS Lambda function when an EC2 instance enters the "stopping" state, providing a serverless way to automate responses to changes in EC2 instance states. AWS Config, SNS, and CloudFormation do not provide direct triggering for specific instance state changes.

• Question 1028:

  Who can create and manage access keys for an AWS account root user?

  A. The AWS account owner
  B. An IAM user that has administrator permissions
  C. IAM users within a designated group
  D. An IAM user that has the required role
  A. The AWS account owner

  ---

  Explanation

  Anyone who has root user credentials for your AWS account has unrestricted access to all the resources in your account, including billing information. When you create access keys, you create the access key ID and secret access key as a set.

• Question 1029:

  A company is deploying a machine learning (ML) research project that will require a lot of compute power over several months. The ML processing jobs do not need to run at specific times. Which Amazon EC2 instance purchasing option will meet these requirements at the lowest cost?

  A. On-Demand Instances
  B. Spot Instances
  C. Reserved Instances
  D. Dedicated Instances
  B. Spot Instances

  ---

  Explanation

  Spot Instances allow you to access spare EC2 capacity at a significantly lower price compared to On-Demand Instances. They are a cost-effective choice for workloads that can be interrupted and are flexible regarding timing. Spot Instances can be ideal for ML processing jobs that do not have strict timing requirements.

• Question 1030:

  A company needs an AWS service that can monitor the company's AWS account If the service identifies misconfigurations; the company's operations team must receive an alert Additionally, the service must remediate the issues by invoking AWS Lambda functions.

  Which service will meet these requirements?

  A. Amazon Macie
  B. Amazon GuardDuty
  C. AWS Config
  D. AWS Trusted Advisor
  D. AWS Trusted Advisor

  ---

  Explanation