Amazon CLF-C02 Online Practice Questions and Exam Preparation

Amazon CLF-C02 Online Questions & Answers

• Question 1091:

  Which pillar of the AWS Well-Architected Framework includes a design principle about measuring the overall efficiency of workloads in terms of business value?

  A. Operational excellence
  B. Security
  C. Reliability
  D. Cost optimization
  A. Operational excellence

  ---

  Explanation

  The operational excellence pillar of the AWS Well-Architected Framework includes a design principle about measuring the overall efficiency of workloads in terms of business value. This principle states that you should monitor and measure key performance indicators (KPIs) and set targets and thresholds that align with your business goals. You should also use feedback loops to continuously improve your processes and procedures1.

• Question 1092:

  A company needs to mount a file share across multiple Amazon EC2 instances as a mapped drive by using the SMB protocol. Which AWS service will meet these requirements?

  A. Amazon FSx for Windows File Server
  B. Amazon Elastic File System (Amazon EFS)
  C. Amazon S3
  D. AWS DataSync
  A. Amazon FSx for Windows File Server

  ---

  Explanation

• Question 1093:

  A company is planning to migrate its application to the AWS Cloud.

  Which AWS tool or set of resources should the company use to analyze and asses its readiness for migration?

  A. AWS Cloud Adoption Framework (AWS CAF)
  B. AWS Pricing Calculator
  C. AWS Well-Architected Framework
  D. AWS Budgets
  A. AWS Cloud Adoption Framework (AWS CAF)

  ---

  Explanation

  AWS Cloud Adoption Framework (AWS CAF) is a tool that helps organizations understand how cloud adoption transforms the way they work, and it provides structure to identify and address gaps in skills and processes. Applying the AWS CAF in your organization results in an actionable plan that helps you prepare the cloud environment, enable your staff with new skills, and migrate your applications. AWS Pricing Calculator is a tool that helps you estimate the cost of AWS services for your use cases and compare the cost of different AWS service configurations. AWS Well-Architected Framework is a tool that helps you review and improve your cloud-based architectures and better understand the business impact of your design decisions. AWS Budgets is a tool that helps you plan your service usage, service costs, and instance reservations, and track how close your plan is to your budgeted amount.

• Question 1094:

  A company wants to migrate its on-premises application to the AWS Cloud. The company is legally obligated to retain certain data in its onpremises data center.

  Which AWS service or feature will support this requirement?

  A. AWS Wavelength
  B. AWS Local Zones
  C. VMware Cloud on AWS
  D. AWS Outposts
  D. AWS Outposts

  ---

  Explanation

  AWS Outposts is a fully managed service that extends AWS infrastructure, AWS services, APIs, and tools to virtually any datacenter, co-location space, or on- premises facility for a truly consistent hybrid experience. AWS Outposts enables you to run AWS services in your on-premises data center, which can support the requirement of retaining certain data on-premises due to legal obligations5.

• Question 1095:

  A company needs to schedule the rotation of database credentials in the AWS Cloud.

  Which AWS service should the company use to perform this task?

  A. AWS Identity and Access Management (IAM)
  B. AWS Managed Services (AMS)
  C. Amazon RDS
  D. AWS Secrets Manager
  D. AWS Secrets Manager

  ---

  Explanation

  AWS Secrets Manager makes it easier to rotate, manage, and retrieve database credentials, API keys, and other secrets throughout their lifecycle. The key features of this service include the ability to:

  1.Secure and manage secrets centrally. You can store, view, and manage all your secrets centrally. By default, Secrets Manager encrypts these secrets with encryption keys that you own and control. You can use fine-grained IAM policies or

  resource-based policies to control access to your secrets. You can also tag secrets to help you discover, organize, and control access to secrets used throughout your organization.

  2.Rotate secrets safely. You can configure Secrets Manager to rotate secrets automatically without disrupting your applications. Secrets Manager offers built-in integrations for rotating credentials for all Amazon RDS databases (MySQL,

  PostgreSQL, Oracle, Microsoft SQL Server, MariaDB, and Amazon Aurora.) You can also extend Secrets Manager to meet your custom rotation requirements by creating an AWS Lambda function to rotate other types of secrets.

  3.Transmit securely. Secrets are transmitted securely over Transport Layer Security (TLS) protocol 1.2. You can also use Secrets Manager with Amazon Virtual Private Cloud (Amazon VPC) endpoints powered by AWS Privatelink to keep

  this communication within the AWS network and help meet your compliance and regulatory requirements to limit public internet connectivity.

  4.Pay as you go. Pay for the secrets you store in Secrets Manager and for the use of these secrets; there are no long-term contracts, licensing fees, or infrastructure and personnel costs. For example, a typical production-scale web

  application will generate an estimated monthly bill of $6. If you follow along the instructions in this blog post, your estimated monthly bill for Secrets Manager will be $1. Note: you may incur additional charges for using Amazon RDS and

  Amazon Lambda, if you've already consumed the free tier for these services.

  Now that you're familiar with Secrets Manager features, I'll show you how to store and automatically rotate credentials for an Oracle database hosted on Amazon RDS. I divided these instructions into three phases:

  1.Phase 1: Store and configure rotation for the superuser credential

  2.Phase 2: Store and configure rotation for the application credential

  3.Phase 3: Retrieve the credential from Secrets Manager programmatically

• Question 1096:

  A company is using AWS Lambda. Which task is the company's responsibility, according to the AWS shared responsibility model?

  A. Update the Lambda runtime language.
  B. Maintain the runtime environment.
  C. Maintain the networking infrastructure.
  D. Configure the resource.
  D. Configure the resource.

  ---

  Explanation

  According to the AWS shared responsibility model, the company is responsible for configuring the resources that they create in AWS Lambda, such as setting up the function, defining the function's triggers, specifying the function's runtime settings, and granting permissions to the function.

• Question 1097:

  A user has been granted permission to change their own IAM user password. Which AWS services can the user use to change the password? (Select TWO.)

  A. AWS Command Line Interface (AWS CLI)
  B. AWS Key Management Service (AWS KMS)
  C. AWS Management Console
  D. AWS Resource Access Manager (AWS RAM)
  E. AWS Secrets Manager
  A. AWS Command Line Interface (AWS CLI)
  C. AWS Management Console

  ---

  Explanation

  Users can change their own IAM user password using:

  AWS Management Console: The graphical interface allows users to navigate to the "My Security Credentials" page and change their password. AWS Command Line Interface (CLI): Users with the appropriate permissions can use the aws

  iam change-password command to change their password.

  Why other options are not suitable:

  B. AWS Key Management Service (AWS KMS): Used for creating and managing encryption keys, not for managing user passwords.

  D. AWS Resource Access Manager (AWS RAM): Used for resource sharing between accounts, not for password management.

  E. AWS Secrets Manager: A service for securely storing and managing secrets, not for changing IAM user passwords.

  References:

  AWS IAM User Guide - Changing Your Own Password

• Question 1098:

  Which benefit is always free of charge with AWS, regardless of a user's AWS Support plan?

  A. AWS Developer Support
  B. AWS Developer Forums
  C. Programmatic case management
  D. AWS technical account manager (TAM)
  B. AWS Developer Forums

  ---

  Explanation

  The AWS Developer Forums are always free to use, regardless of the user's AWS Support plan. They provide a platform for users to ask questions, share knowledge, and collaborate with the AWS community.

  A. AWS Developer Support: Incorrect, as it is a paid support plan option.

  C. Programmatic case management: Incorrect, as this feature is available only with certain AWS Support plans (Business and Enterprise).

  D. AWS Technical Account Manager (TAM): Incorrect, as a TAM is provided only under the AWS Enterprise Support plan, which is a paid support option.

• Question 1099:

  Which AWS service provides alerts when an AWS event may impact a company's AWS resources?

  A. AWS Personal Health Dashboard
  B. AWS Service Health Dashboard
  C. AWS Trusted Advisor
  D. AWS Infrastructure Event Management
  A. AWS Personal Health Dashboard

  ---

  Explanation

• Question 1100:

  Which task is a responsibility of AWS, according to the AWS shared responsibility model?

  A. Enable client-side encryption for objects that are stored in Amazon S3.
  B. Configure IAM security policies to comply with the principle of least privilege.
  C. Patch the guest operating system on an Amazon EC2 instance.
  D. Apply updates to the Nitro Hypervisor.
  D. Apply updates to the Nitro Hypervisor.

  ---

  Explanation

  "AWS responsibility "Security of the Cloud" - AWS is responsible for protecting the infrastructure that runs all of the services offered in the AWS Cloud. This infrastructure is composed of the hardware, software, networking, and facilities that run AWS Cloud services."

  https://aws.amazon.com/compliance/shared-responsibility-model/