Amazon CLF-C02 Online Practice Questions and Exam Preparation

Amazon CLF-C02 Online Questions & Answers

• Question 1101:

  A company has created an AWS Cost and Usage Report and wants to visualize the report.

  Which AWS service should the company use to ingest and display this information?

  A. Amazon QuickSight
  B. Amazon Pinpoint
  C. Amazon Neptune
  D. Amazon Kinesis
  A. Amazon QuickSight

  ---

  Explanation

  Amazon QuickSight is an AWS service that provides business intelligence and data visualization capabilities. Amazon QuickSight enables you to ingest, analyze, and display data from various sources, such as AWS Cost and Usage Reports, Amazon S3, Amazon Athena, Amazon Redshift, and Amazon RDS. You can use Amazon QuickSight to create interactive dashboards and charts that show insights and trends from your data. You can also share your dashboards and charts with other users or embed them into your applications.

• Question 1102:

  A company deploys its application on Amazon EC2 instances. The application occasionally experiences sudden increases in demand. The company wants to ensure that its application can respond to changes in demand at the lowest possible cost.

  Which AWS service or tool will meet these requirements?

  A. AWS Auto Scaling
  B. AWS Compute Optimizer
  C. AWS Cost Explorer
  D. AWS Well-Architected Framework
  A. AWS Auto Scaling

  ---

  Explanation

  AWS Auto Scaling is the AWS service or tool that will meet the requirements of ensuring that the application can respond to changes in demand at the lowest possible cost. AWS Auto Scaling allows users to automatically adjust the number of Amazon EC2 instances based on the application's performance and availability needs. AWS Auto Scaling can also optimize costs by helping users select the most cost-effective EC2 instances for their application1

• Question 1103:

  A company needs to identify who accessed an AWS service and what action was performed for a given time period.

  Which AWS service should the company use to meet this requirement?

  A. Amazon CloudWatch
  B. AWS CloudTrail
  C. AWS Security Hub
  D. Amazon Inspector
  B. AWS CloudTrail

  ---

  Explanation

  AWS CloudTrail is a service that enables governance, compliance, operational auditing, and risk auditing of your AWS account. With CloudTrail, you can log, continuously monitor, and retain account activity related to actions across your AWS infrastructure. You can use CloudTrail to identify who accessed an AWS service and what action was performed for a given time period. Amazon CloudWatch, AWS Security Hub, and Amazon Inspector are AWS services that provide different types of monitoring and security capabilities.

• Question 1104:

  What is the purpose of having an internet gateway within a VPC?

  A. To create a VPN connection to the VPC
  B. To allow communication between the VPC and the internet
  C. To impose bandwidth constraints on internet traffic
  D. To load balance traffic from the internet across Amazon EC2 instances
  B. To allow communication between the VPC and the internet

  ---

  Explanation

  An internet gateway is a service that allows for internet traffic to enter into a VPC. Otherwise, a VPC is completely segmented off and then the only way to get to it is potentially through a VPN connection rather than through internet connection. An internet gateway is a logical connection between an AWS VPC and the internet. It supports IPv4 and IPv6 traffic. It does not cause availability risks or bandwidth constraints on your network traffic. An internet gateway enables resources in your public subnets (such as EC2 instances) to connect to the internet if the resource has a public IPv4 address or an IPv6 address. Similarly, resources on the internet can initiate a connection to resources in your subnet using the public IPv4 address or IPv6 address. An internet gateway also provides a target in your VPC route tables for internet-routable traffic. For communication using IPv4, the internet gateway also performs network address translation (NAT). For communication using IPv6, NAT is not needed because IPv6 addresses are public. To enable access to or from the internet for instances in a subnet in a VPC using an internet gateway, you must create an internet gateway and attach it to your VPC, add a route to your subnet's route table that directs internet-bound traffic to the internet gateway, ensure that instances in your subnet have a public IPv4 address or an IPv6 address, and ensure that your network access control lists and security group rules allow the desired internet traffic to flow to and from your instance.

  References: Connect to the internet using an internet gateway, AWS Internet Gateway and VPC Routing

• Question 1105:

  Which of the following is a fully managed graph database service on AWS?

  A. Amazon Aurora
  B. Amazon FSx
  C. Amazon DynamoDB
  D. Amazon Neptune
  D. Amazon Neptune

  ---

  Explanation

  Amazon Neptune is a fully managed graph database service on AWS. A graph database is a type of database that stores and queries data as a network of nodes and edges, representing entities and relationships. Graph databases are useful for applications that deal with highly connected data, such as social networks, recommendation engines, fraud detection, and knowledge graphs45. Amazon Neptune is a fast, reliable, and scalable graph database service that supports two popular graph models: property graphs and RDF. Amazon Neptune also supports two open standards for querying graphs: Apache TinkerPop Gremlin and SPARQL. Amazon Neptune handles the heavy lifting of managing the database, such as provisioning, patching, backup, recovery, encryption, and replication456.

  References: 4: Managed Graph Database - Amazon Neptune - AWS, 5: Amazon Neptune ?A Fully Managed Graph Database Service, 6: Working with AWS Neptune. Neptune is a fully-managed graph ... - Medium

• Question 1106:

  An independent software vendor wants to deliver and share its custom Amazon Machine Images (AMIs) to prospective customers.

  Which AWS service will meet these requirements?

  A. AWS Marketplace
  B. AWS Data Exchange
  C. Amazon EC2
  D. AWS Organizations
  A. AWS Marketplace

  ---

  Explanation

  AWS Marketplace is an online store where independent software vendors (ISVs) can list and sell their software products, including custom Amazon Machine Images (AMIs). It allows vendors to share, distribute, and monetize their AMIs with a broad audience of AWS customers.

  B. AWS Data Exchange: Incorrect, as it is a service for finding, subscribing to, and using third-party data in the cloud, not for delivering custom AMIs.

  C. Amazon EC2: Incorrect, as it is the service for running instances, but it does not provide a marketplace for distributing AMIs.

  D. AWS Organizations: Incorrect, as it is a service for managing multiple AWS accounts, not for distributing software products like AMIs.

  AWS Cloud

  References:

  AWS Marketplace

• Question 1107:

  A company needs to run some of its workload in the AWS Cloud. The company needs to keep some of the workload in its own on-site data center due to compliance reasons.

  Which AWS service will meet these requirements?

  A. AWSConfig
  B. AWS Outposts
  C. Amazon Lightsail
  D. Amazon Connect
  B. AWS Outposts

  ---

  Explanation

• Question 1108:

  Which of the following is a fully managed MySQL-compatible database?

  A. Amazon S3
  B. Amazon DynamoDB
  C. Amazon Redshift
  D. Amazon Aurora
  D. Amazon Aurora

  ---

  Explanation

  Amazon Aurora is a relational database service that is compatible with MySQL and PostgreSQL. It is fully managed by AWS and is designed for high availability, performance, and scalability while maintaining MySQL compatibility. Aurora offers features like automated backups, read replicas, and seamless failover to ensure data durability and availability. It's a popular choice for applications that require a MySQL-compatible database with the benefits of a fully managed service.

• Question 1109:

  Which Amazon S3 storage class is MOST cost-effective for unknown access patterns?

  A. S3 Standard
  B. S3 Standard-Infrequent Access (S3 Standard-IA)
  C. S3 One Zone-Infrequent Access (S3 One Zone-IA)
  D. S3 Intelligent-Tiering
  D. S3 Intelligent-Tiering

  ---

  Explanation

  Understanding S3 Intelligent-Tiering: S3 Intelligent-Tiering is designed to optimize costs by automatically moving data to the most cost-effective access tier based on changing access patterns. It is ideal for data with unknown or unpredictable

  access patterns.

  Why S3 Intelligent-Tiering is Cost-Effective:

  When to Use S3 Intelligent-Tiering:

  References:

  Amazon S3 Intelligent-Tiering

  Amazon S3 Storage Classes

• Question 1110:

  A company wants to provide managed Windows virtual desktops and applications to its remote employees over secure network connections. Which AWS services can the company use to meet these requirements? (Choose two.)

  A. Amazon Connect
  B. Amazon AppStream 2.0
  C. Amazon WorkSpaces
  D. AWS Site-to-Site VPN
  E. Amazon Elastic Container Service (Amazon ECS)
  B. Amazon AppStream 2.0
  C. Amazon WorkSpaces

  ---

  Explanation

  Amazon AppStream 2.0 is a fully managed application streaming service that allows users to securely access desktop applications through a web browser. It’s ideal for delivering individual Windows applications to remote users without

  needing to manage desktop infrastructure.

  Amazon WorkSpaces is a fully managed, secure Desktop-as-a-Service (DaaS) solution that provides Windows (and Linux) virtual desktops to end-users. It enables employees to access their desktop environments securely from anywhere.

  Amazon Connect is a cloud-based contact center service - not related to virtual desktops.

  AWS Site-to-Site VPN provides secure network connectivity but doesn't offer desktops or applications.

  Amazon ECS is a container orchestration service and not used for managing virtual desktops or GUI-based apps.