Amazon Amazon Certifications CLF-C02 Questions & Answers

• Question 101:

  A company needs to perform data processing once a week that typically takes about 5 hours to complete. Which AWS service should the company use for this workload?

  A. AWS Lambda

  B. Amazon EC2

  C. AWS CodeDeploy

  D. AWS Wavelength

  Correct Answer: B

  The best AWS service for a workload that needs to be processed once a week for about 5 hours is Amazon EC2.

  AWS Lambda is a serverless computing service that runs your code without provisioning or managing servers. However, Lambda functions have a maximum execution time of 15 minutes. Therefore, Lambda is not suitable for workloads that need to run for longer than 15 minutes.

  Amazon EC2 is a scalable computing service that provides instances with varying capabilities and pricing options. You can choose an EC2 instance that is right for your data processing job and then terminate the instance when the job is complete. This will help you to save money on your AWS bill.

• Question 102:

  A social media company wants to protect its web application from common web exploits such as SQL injections and cross-site scripting. Which AWS service will meet these requirements?

  A. Amazon Inspector

  B. AWS WAF

  C. Amazon GuardDuty

  D. Amazon CloudWatch

  Correct Answer: B

  "AWS WAF is a web application firewall that helps protect web applications from attacks by allowing you to configure rules that allow, block, or monitor (count) web requests based on conditions that you define. These conditions include IP addresses, HTTP headers, HTTP body, URI strings, SQL injection and cross-site scripting."

  References: https://aws.amazon.com/waf/faqs/

• Question 103:

  A company has an uninterruptible application that runs on Amazon EC2 instances. The application constantly processes a backlog of files in an Amazon Simple Queue Service (Amazon SQS) queue. This usage is expected to continue to

  grow for years.

  What is the MOST cost-effective EC2 instance purchasing model to meet these requirements?

  A. Spot Instances

  B. On-Demand Instances

  C. Savings Plans

  D. Dedicated Hosts

  Correct Answer: C

  Savings Plans are a flexible pricing model that offer low prices on EC2 usage, in exchange for a commitment to a consistent amount of usage, measured in dollars per hour, for a term of 1 or 3 years. Savings Plans can reduce your EC2 costs by up to 72% compared to On-Demand prices.

• Question 104:

  A company wants to migrate its NFS on-premises workload to AWS.

  Which AWS Storage Gateway type should the company use to meet this requirement?

  A. Tape Gateway

  B. Volume Gateway

  C. Amazon FSx File Gateway

  D. Amazon S3 File Gateway

  Correct Answer: D

  "Amazon S3 File Gateway provides a seamless way to connect to the cloud in order to store application data files and backup images as durable objects in Amazon S3 cloud storage. Amazon S3 File Gateway offers SMB or NFS-based access to data in Amazon S3 with local caching. It can be used for on-premises data-intensive Amazon EC2-based applications that need file protocol access to S3 object storage."

  Reference: https://aws.amazon.com/storagegateway/file/s3/

• Question 105:

  A company needs to track the activity in its AWS accounts, and needs to know when an API call is made against its AWS resources. Which AWS tool or service can be used to meet these requirements?

  A. Amazon CloudWatch

  B. Amazon Inspector

  C. AWS CloudTrail

  D. AWS IAM

  Correct Answer: C

  "CloudTrail enables auditing, security monitoring, and operational troubleshooting by tracking user activity and API usage. CloudTrail logs, continuously monitors, and retains account activity related to actions across your AWS infrastructure, giving you control over storage, analysis, and remediation actions."

  Reference: https://aws.amazon.com/cloudtrail/faqs/

• Question 106:

  A company wants a fully managed Windows file server for its Windows-based applications. Which AWS service will meet this requirement?

  A. Amazon FSx

  B. Amazon Elastic Kubernetes Service (Amazon EKS)

  C. Amazon Elastic Container Service (Amazon ECS)

  D. Amazon EMR

  Correct Answer: A

  Amazon FSx lets you easily and securely backup, archive, or replicate your on-premises file storage to AWS in order to meet regulatory, data retention, or disaster recovery requirements. Learn how to get started. Choosing an Amazon FSx File System.

• Question 107:

  Which tasks are the customer's responsibility, according to the AWS shared responsibility model? (Choose two.)

  A. Establish the global infrastructure.

  B. Perform client-side data encryption.

  C. Configure IAM credentials.

  D. Secure edge locations.

  E. Patch Amazon RDS DB instances.

  Correct Answer: BC

• Question 108:

  A user wants to allow applications running on an Amazon EC2 instance to make calls to other AWS services. The access granted must be secure. Which AWS service or feature should be used?

  A. Security groups

  B. AWS Firewall Manager

  C. IAM roles

  D. IAM user SSH keys

  Correct Answer: C

  AWS Identity and Access Management (IAM) is a web service that helps you securely control access to AWS resources. With IAM, you can centrally manage permissions that control which AWS resources users can access. You can use IAM features to securely provide credentials for applications that run on EC2 instances. These credentials provide permissions for your application to access other AWS resources. https://docs.aws.amazon.com/IAM/latest/UserGuide/introduction.html

• Question 109:

  Which option is an AWS Cloud Adoption Framework (AWS CAF) platform perspective capability?

  A. Data architecture

  B. Data protection

  C. Data governance

  D. Data science

  Correct Answer: A

  https://abhi0751.medium.com/aws-cloud-adoption-framework-aws-caf-a512b89dbcba

• Question 110:

  Which AWS tool gives users the ability to plan their service usage, service costs, and instance reservations, and also allows them to set custom alerts when their costs or usage exceed established thresholds?

  A. Cost Explorer

  B. AWS Budgets

  C. AWS Cost and Usage Report

  D. Reserved Instance reporting

  Correct Answer: B

  "Using AWS Budgets, you can set a budget that alerts you when you exceed (or are forecasted to exceed) your budgeted cost or usage amount. You can also set alerts based on your RI or Savings Plans Utilization and Coverage using AWS

  Budgets."

  https://aws.amazon.com/aws-cost-management/aws-budgets/faqs/