Amazon CLF-C02 Online Practice Questions and Exam Preparation

Amazon CLF-C02 Online Questions & Answers

• Question 1111:

  How does consolidated billing help reduce costs for a company that has multiple AWS accounts?

  A. It aggregates usage across accounts so that the company can reach volume discount thresholds sooner.
  B. It offers an additional 5% discount on purchases of All Upfront Reserved Instances.
  C. It provides a simplified billing invoice that the company can process more quickly than a standard invoice.
  D. It gives AWS resellers the ability to bill their customers for usage.
  A. It aggregates usage across accounts so that the company can reach volume discount thresholds sooner.

  ---

  Explanation

  Consolidated billing for AWS Organizations You can use the consolidated billing feature in AWS Organizations to consolidate billing and payment for multiple AWS accounts or multiple Amazon Internet Services Pvt. Ltd (AISPL) accounts. Every organization in AWS Organizations has a management account that pays the charges of all the member accounts. For more information about organizations, see the AWS Organizations User Guide. Consolidated billing has the following benefits: *One bill ?You get one bill for multiple accounts. *Easy tracking ?You can track the charges across multiple accounts and download the combined cost and usage data. *Combined usage ?You can combine the usage across all accounts in the organization to share the volume pricing discounts, Reserved Instance discounts, and Savings Plans. This can result in a lower charge for your project, department, or company than with individual standalone accounts. For more information, see Volume discounts. *No extra fee ?Consolidated billing is offered at no additional cost. Note: The member account bills are for informational purpose only. The management account might reallocate the additional volume discounts, Reserved Instance, or Savings Plans discounts that your account receives. If you have access to the management account, you can see a combined view of the AWS charges that the member accounts incur. You also can get a cost report for each member account. AWS and AISPL accounts can't be consolidated together. If your contact address is in India, you can use AWS Organizations to consolidate AISPL accounts within your organization. Important When a member account leaves an organization, the member account can no longer access Cost Explorer data that was generated when the account was in the organization. The data isn't deleted, and the management account in the organization can still access the data. If the member account rejoins the organization, the member account can access the data again.

• Question 1112:

  A company needs to block SQL injection attacks.

  Which AWS service or feature can meet this requirement?

  A. AWS WAF
  B. AWS Shield
  C. Network ACLs
  D. Security groups
  A. AWS WAF

  ---

  Explanation

  A: AWS WAF allows you to create custom rules to block SQL injection attempts.

  Create a WebACL: Go to AWS WAF dashboard and create a new WebACL.

  Add a Rule: Inside the WebACL, add a new rule.

  SQLi Filter: Choose the rule type to look for SQLi patterns. AWS WAF has built-in SQLi filters.

  Attach Resources: Attach the WebACL to a resource, such as an Application Load Balancer, Amazon CloudFront distribution, or an API Gateway.

  Deploy: Save and deploy the WebACL.

• Question 1113:

  Which AWS service tool or feature helps companies reduce costs by identifying underutilized Amazon EC2 instances?

  A. Amazon Inspector
  B. AWS Trusted Advisor
  C. Consolidated billing
  D. Cost Explorer
  B. AWS Trusted Advisor

  ---

  Explanation

  The AWS service, tool, or feature that helps companies reduce costs by identifying underutilized Amazon EC2 instances is

  B. AWS Trusted Advisor. AWS Trusted Advisor is an online tool that provides you with real-time guidance to help you provision your resources following AWS best practiceshttps://aws.amazon.com/about-aws/whats-new/2019/07/introducing-amazon-ec2-resource-optimization-recommendations/.

• Question 1114:

  Which AWS Support plan provides the full set to AWS Trusted Advisor checks at the LOWEST cost?

  A. AWS Developer Support
  B. AWS Business Support
  C. AWS Enterprise On-Ramp Support
  D. AWS Enterprise Support
  B. AWS Business Support

  ---

  Explanation

  AWS Trusted Advisor is a tool that helps customers optimize their AWS environment by providing real-time guidance in five key areas: cost optimization, performance, security, fault tolerance, and service limits. However, the availability of the full set of Trusted Advisor checks depends on the AWS Support plan chosen. AWS Developer Support: This plan provides access to only seven core Trusted Advisor checks. It is designed for developers experimenting or testing in AWS and does not offer the full set of Trusted Advisor checks. AWS Business Support: This plan is the lowest-cost support plan that provides access to the full set of AWS Trusted Advisor checks. Business Support is intended for production workloads, providing a broader range of checks, 24x7 access to Cloud Support Engineers, and more extensive support features. AWS Enterprise On-Ramp Support: This plan offers access to all Trusted Advisor checks as well but is more expensive than the Business Support plan. It is designed for customers running production workloads and needing additional technical support but does not require the full level of engagement that comes with Enterprise Support. AWS Enterprise Support: This is the most comprehensive and highest-cost support plan, providing access to all Trusted Advisor checks and a full range of AWS Support resources, including a Technical Account Manager (TAM), account management, concierge support, and more. Conclusion:The correct answer is

  B. AWS Business Support, as it provides access to the full set of AWS Trusted Advisor checks at the lowest cost. AWS Developer Support does not offer the complete checks, and both AWS Enterprise On-Ramp and AWS Enterprise Support are higher-cost plans that also provide the full checks. AWS Cloud

  References: AWS Support Plans AWS Trusted Advisor

• Question 1115:

  A company wants to migrate to the AWS Cloud. The company needs the ability to acquire resources when the resources are necessary.

  The company also needs the ability to release those resources when the resources are no longer necessary.

  Which architecture concept of the AWS Cloud meets these requirements?

  A. Elasticity
  B. Availability
  C. Reliability
  D. Durability
  A. Elasticity

  ---

  Explanation

  The architecture concept of the AWS Cloud that meets the requirements of the company that wants to migrate to the AWS Cloud and needs the ability to acquire and release resources as needed is elasticity. Elasticity means that AWS customers can quickly and easily provision and scale up or down AWS resources as their demand changes, without any upfront costs or long-term commitments. AWS provides various tools and services that enable customers to achieve elasticity, such as Amazon EC2 Auto Scaling, Amazon CloudWatch, and AWS CloudFormation. Elasticity helps customers optimize their performance, availability, and cost efficiency. Availability, reliability, and durability are other architecture concepts of the AWS Cloud, but they are not directly related to the ability to acquire and release resources as needed. Availability means that AWS customers can access their AWS resources and applications whenever and wherever they need them. Reliability means that AWS customers can depend on their AWS resources and applications to function correctly and consistently. Durability means that AWS customers can preserve their data and objects for long periods of time without loss or corruption12

• Question 1116:

  A company has existing software licenses that it wants to bring to AWS, but the licensing model requires licensing physical cores. How can the company meet this requirement in the AWS Cloud?

  A. Launch an Amazon EC2 instance with default tenancy.
  B. Launch an Amazon EC2 instance on a Dedicated Host.
  C. Create an On-Demand Capacity Reservation.
  D. Purchase Dedicated Reserved Instances.
  B. Launch an Amazon EC2 instance on a Dedicated Host.

  ---

  Explanation

• Question 1117:

  A company plans to use an Amazon Snowball Edge device to transfer files to the AWS Cloud. Which activities related to a Snowball Edge device are available to the company at no cost?

  A. Use of the Snowball Edge appliance for a 10-day period
  B. The transfer of data out of Amazon S3 and to the Snowball Edge appliance
  C. The transfer of data from the Snowball Edge appliance into Amazon S3
  D. Daily use of the Snowball Edge appliance after 10 days
  C. The transfer of data from the Snowball Edge appliance into Amazon S3

  ---

  Explanation

  Data transfer IN to Amazon S3 is $0.00 per GB (except for small files as explained below). Data transfer OUT of Amazon S3 is priced by region.

  https://aws.amazon.com/snowball/pricing/

• Question 1118:

  A company is migrating to the AWS Cloud and plans to run experimental workloads for 3 to 6 months on AWS.

  Which pricing model will meet these requirements?

  A. Use Savings Plans for a 3-year term.
  B. Use Dedicated Hosts.
  C. Buy Reserved Instances.
  D. Use On-Demand Instances.
  D. Use On-Demand Instances.

  ---

  Explanation

  On-Demand Instances are the most flexible and cost-effective pricing model for short-term, experimental, or unpredictable workloads on AWS. On-Demand Instances let you pay only for the resources you use, without any long-term commitments or upfront fees. You can easily start and stop instances as needed, and scale up or down depending on your demand. Savings Plans, Reserved Instances, and Dedicated Hosts are all pricing models that require a commitment for a certain amount of usage or capacity for a one- or three-year term. These pricing models offer lower prices than On-Demand Instances, but they are not suitable for workloads that only run for 3 to 6 months or have variable usage patterns. Savings Plans and Reserved Instances also offer flexibility to change instance types, sizes, or regions within the same family or pool, while Dedicated Hosts are physical servers that can only run specific instance types.

• Question 1119:

  Which AWS service or feature is used to Troubleshoot network connectivity issues between Amazon EC2 instances?

  A. AWS Certificate Manager (ACM)
  B. Internet gateway
  C. VPC Flow Logs
  D. AWS CloudHSM
  C. VPC Flow Logs

  ---

  Explanation

  VPC Flow Logs is the AWS service or feature that is used to troubleshoot network connectivity issues between Amazon EC2 instances. VPC Flow Logs is a feature that enables users to capture information about the IP traffic going to and from network interfaces in their VPC. VPC Flow Logs can help users monitor and diagnose network- related issues, such as traffic not reaching an instance, or an instance not responding to requests. VPC Flow Logs can be published to Amazon CloudWatch Logs, Amazon S3, or Amazon Kinesis Data Firehose for analysis and storage.

• Question 1120:

  A company wants to use a managed service to identify and protect sensitive data that is stored in Amazon S3. Which AWS service will meet these requirements?

  A. AWS IAM Access Analyzer
  B. Amazon GuardDuty
  C. Amazon Inspector
  D. Amazon Macie
  D. Amazon Macie

  ---

  Explanation