Amazon CLF-C02 Online Practice Questions and Exam Preparation

Amazon CLF-C02 Online Questions & Answers

• Question 1031:

  Which Amazon EC2 instance pricing model can provide discounts of up to 90%?

  A. Reserved Instances
  B. On-Demand
  C. Dedicated Hosts
  D. Spot Instances
  D. Spot Instances

  ---

  Explanation

• Question 1032:

  A company is in the process of finding correct Amazon EC2 instance types and sizes to meet its performance and capacity requirements. The company wants to find the lowest possible cost.

  Which option accurately characterizes the company's actions?

  A. Auto Scaling
  B. Storage tiering
  C. Rightsizing
  D. Instance scheduling
  C. Rightsizing

  ---

  Explanation

• Question 1033:

  A developer has been hired by a large company and needs AWS credentials.

  Which are security best practices that should be followed? (Select TWO.)

  A. Grant the developer access to only the AWS resources needed to perform the job.
  B. Share the AWS account root user credentials with the developer.
  C. Add the developer to the administrator's group in AWS IAM.
  D. Configure a password policy that ensures the developer's password cannot be changed.
  E. Ensure the account password policy requires a minimum length.
  A. Grant the developer access to only the AWS resources needed to perform the job.
  E. Ensure the account password policy requires a minimum length.

  ---

  Explanation

  The security best practices that should be followed are A and

  E. A. Grant the developer access to only the AWS resources needed to perform the job. This is an example of the principle of least privilege, which means giving the minimum permissions necessary to achieve a task. This reduces the risk of unauthorized access, data leakage, or accidental damage to AWS resources. You can use AWS Identity and Access Management (IAM) to create users, groups, roles, and policies that grant fine-grained access to AWS resources.

  E. Ensure the account password policy requires a minimum length. This is a basic security measure that helps prevent brute-force attacks or guessing of passwords. A longer password is harder to crack than a shorter one. You can use IAM to configure a password policy that enforces a minimum password length, as well as other requirements such as complexity, expiration, and history.

  B. Share the AWS account root user credentials with the developer. This is a bad practice that should be avoided. The root user has full access to all AWS resources and services, and can perform sensitive actions such as changing billing information, closing the account, or deleting all resources. Sharing the root user credentials exposes your account to potential compromise or misuse. You should never share your root user credentials with anyone, and use them only for account administration tasks.

  C. Add the developer to the administrator's group in IAM. This is also a bad practice that should be avoided. The administrator's group has full access to all AWS resources and services, which is more than what a developer needs to perform their job. Adding the developer to the administrator's group violates the principle of least privilege and increases the risk of unauthorized access, data leakage, or accidental damage to AWS resources. You should create a custom group for the developer that grants only the necessary permissions for their role.

  D. Configure a password policy that ensures the developer's password cannot be changed. This is another bad practice that should be avoided. Preventing the developer from changing their password reduces their ability to protect their credentials and comply with security policies. For example, if the developer's password is compromised, they cannot change it to prevent further unauthorized access. Or if the company requires periodic password rotation, they cannot update their password to meet this requirement. You should allow the developer to change their password as needed, and enforce a password policy that sets reasonable rules for password management.

• Question 1034:

  A company is running a Microsoft SOL Server instance on premises and is migrating its application to AWS. The company lacks the resources needed to refactor the application but management wants to reduce operational overhead as part of the migration.

  Which database service would MOST effectively support these requirements?

  A. Amazon DynamoDB
  B. Amazon Redshift
  C. Microsoft SQL Server on Amazon EC2
  D. Amazon RDS for SQL Server
  D. Amazon RDS for SQL Server

  ---

  Explanation

• Question 1035:

  Which actions are examples of a company's effort to rightsize its AWS resources to control cloud costs? (Choose two.)

  A. Switch from Amazon RDS to Amazon DynamoDB to accommodate NoSQL datasets.
  B. Base the selection of Amazon EC2 instance types on past utilization patterns.
  C. Use Amazon S3 Lifecycle policies to move objects that users access infrequently to lower-cost storage tiers.
  D. Use Multi-AZ deployments for Amazon RDS.
  E. Replace existing Amazon EC2 instances with AWS Elastic Beanstalk.
  B. Base the selection of Amazon EC2 instance types on past utilization patterns.
  C. Use Amazon S3 Lifecycle policies to move objects that users access infrequently to lower-cost storage tiers.

  ---

  Explanation

• Question 1036:

  A company needs a central user portal so that users can log in to third-party business applications that support Security Assertion Markup Language (SAML) 2.0. Which AWS service will meet this requirement?

  A. AWS Identity and Access Management (IAM)
  B. Amazon Cognito
  C. AWS IAM Identity Center (AWS Single Sign-On)
  D. AWS CLI
  B. Amazon Cognito

  ---

  Explanation

• Question 1037:

  A company wants to allow its employees to work remotely from home. The company's employees use Windows or Linux desktops. The company's employees need access from anywhere and at anytime by using any supported devices.

  Which AWS service will meet these requirements?

  A. Amazon Workspaces
  B. Amazon AppStream 2.0
  C. Amazon Keyspaces (for Apache Cassandra)
  D. AWS Cloud
  A. Amazon Workspaces

  ---

  Explanation

• Question 1038:

  A system administrator notices that several Amazon EC2 instances nave been terminated. The system administrator needs to identity the user or AWS API call that terminated these instances. Which AWS service should the system administrator use to meet this requirement?

  A. AWS Trusted Advisor
  B. AWS CloudTrail
  C. Amazon Inspector
  D. Amazon Detective
  B. AWS CloudTrail

  ---

  Explanation

• Question 1039:

  A company needs to search for text in documents that are stored in Amazon S3. Which AWS service will meet these requirements?

  A. Amazon Kendra
  B. Amazon Rekognition
  C. Amazon Polly
  D. Amazon Lex
  A. Amazon Kendra

  ---

  Explanation

  Amazon Kendra is a highly accurate and easy to use intelligent search service powered by machine learning. It enables users to easily find the content they are looking for, even when it is scattered across multiple locations and content repositories within their organization. Amazon Kendra supports natural language queries, and can search for text in documents stored in Amazon S3, as well as other sources such as SharePoint, OneDrive, Salesforce, ServiceNow, and more1. Amazon Rekognition is a computer vision service that makes it easy to add image and video analysis to applications. It can detect objects, faces, text, scenes, activities, and emotions in images and videos. However, it is not designed for searching for text in documents stored in Amazon S32. Amazon Polly is a text-to-speech service that turns text into lifelike speech. It can create audio versions of books, articles, podcasts, and more. However, it is not designed for searching for text in documents stored in Amazon S33. Amazon Lex is a service for building conversational interfaces using voice and text. It can create chatbots that can interact with users using natural language. However, it is not designed for searching for text in documents stored in Amazon S34.

• Question 1040:

  Which AWS service or feature allows a user to establish a dedicated network connection between a company's on-premises data center and the AWS Cloud?

  A. AWS Direct Connect
  B. VPC peering
  C. AWS VPN
  D. Amazon Route 53
  A. AWS Direct Connect

  ---

  Explanation

  AWS Direct Connect is an AWS service that allows users to establish a dedicated network connection between their on-premises data center and the AWS Cloud. This connection bypasses the public internet and provides more predictable

  network performance, reduced bandwidth costs, and increased security. Users can choose from different port speeds and connection types, and use AWS Direct Connect to access AWS services in any AWS Region globally. Users can also

  use AWS Direct Connect in conjunction with AWS VPN to create a hybrid network architecture that combines the benefits of both private and public connectivity.

  References: AWS Direct Connect, [AWS Cloud Practitioner Essentials: Module 3 - Compute in the Cloud]

  https://aws.amazon.com/directconnect/