Amazon CLF-C02 Online Practice Questions and Exam Preparation

Amazon CLF-C02 Online Questions & Answers

• Question 1141:

  A cloud practitioner wants to use a highly available and scalable DNS service for its AWS workload.

  Which AWS service will meet this requirement?

  A. Amazon Route 53
  B. Amazon Lightsail
  C. AWS Amplify Hosting
  D. Amazon S3
  A. Amazon Route 53

  ---

  Explanation

• Question 1142:

  A company needs to request temporary, limited-privilege credentials for IAM users and for the federated users that the company authenticates.

  Which AWS service will provide these credentials?

  A. Amazon GuardDuty
  B. AWS Key Management Service (AWS KMS)
  C. AWS Security Token Service (AWS STS)
  D. AWS Identity and Access Management Access Analyzer
  C. AWS Security Token Service (AWS STS)

  ---

  Explanation

• Question 1143:

  A company has 5 TB of data stored in Amazon S3. The company plans to occasionally run queries on the data for analysis.

  Which AWS service should the company use to run these queries in the MOST cost-effective manner?

  A. Amazon Redshift
  B. Amazon Athena
  C. Amazon Kinesis
  D. Amazon RDS
  B. Amazon Athena

  ---

  Explanation

  Amazon Athena is a serverless, interactive analytics service that allows users to run SQL queries on data stored in Amazon S3. It is ideal for occasional queries on large datasets, as it does not require any server provisioning, configuration, or management. Users only pay for the queries they run, based on the amount of data scanned. Amazon Athena supports various data formats, such as CSV, JSON, Parquet, ORC, and Avro, and integrates with AWS Glue Data Catalog to create and manage schemas. Amazon Athena also supports querying data from other sources, such as on-premises or other cloud systems, using data connectors. Amazon Redshift is a fully managed data warehouse service that allows users to run complex analytical queries on petabyte-scale data. However, it requires users to provision and maintain clusters of nodes, and pay for the storage and compute capacity they use. Amazon Redshift is more suitable for frequent and consistent queries on structured or semi-structured data. Amazon Kinesis is a platform for streaming data on AWS, enabling users to collect, process, and analyze real-time data. It is not designed for querying data stored in Amazon S3. Amazon Kinesis consists of four services: Kinesis Data Streams, Kinesis Data Firehose, Kinesis Data Analytics, and Kinesis Video Streams. Amazon RDS is a relational database service that provides six database engines: Amazon Aurora, PostgreSQL, MySQL, MariaDB, Oracle Database, and SQL Server. It simplifies database administration tasks such as backup, patching, scaling, and replication. However, it is not optimized for querying data stored in Amazon S3. Amazon RDS is more suitable for transactional workloads that require high performance and availability.

• Question 1144:

  A company wants to integrate natural language processing (NLP) into business intelligence (Bl) dashboards. The company wants to ask questions and receive answers with relevant visualizations.

  Which AWS service or tool will meet these requirements?

  A. Amazon Macie
  B. Amazon Rekognition
  C. Amazon QuickSight Q
  D. Amazon Lex
  C. Amazon QuickSight Q

  ---

  Explanation

  Amazon QuickSight Q is a natural language query feature that allows users to ask questions about their data and receive answers in the form of relevant visualizations1. Amazon Macie is a data security and data privacy service that uses machine learning and pattern matching to discover and protect sensitive data in AWS2. Amazon Rekognition is a computer vision service that can analyze images and videos for faces, objects, scenes, text, and more3. Amazon Lex is a

  service for building conversational interfaces using voice and text4.

• Question 1145:

  A company needs to apply security rules to specific Amazon EC2 instances.

  Which AWS service or feature provides this functionality?

  A. AWS Shield
  B. Network ACLs
  C. Security groups
  D. AWS Firewall Manager
  C. Security groups

  ---

  Explanation

  Security groups act as a firewall for associated Amazon EC2 instances, controlling both inbound and outbound traffic at the instance level. You can use security groups to set rules that allow or deny traffic to or from your instances. You can modify the rules for a security group at any time; the new rules are automatically applied to all instances that are associated with the security group.

• Question 1146:

  Which AWS Support plan is the minimum recommended tier for users who have production workloads on AWS?

  A. AWS Developer Support
  B. AWS Enterprise Support
  C. AWS Business Support
  D. AWS Enterprise On-Ramp Support
  C. AWS Business Support

  ---

  Explanation

  AWS Business Support is the minimum recommended tier for users who have production workloads on AWS. AWS Business Support provides 24x7 access to cloud support engineers via phone, chat, or email, as well as a guaranteed response time of less than one hour for urgent issues. AWS Business Support also includes access to AWS Trusted Advisor, a tool that provides real-time guidance to help you provision your resources following AWS best practices4.

• Question 1147:

  Which AWS service is always provided at no charge?

  A. Amazon S3
  B. AWS Identity and Access Management (IAM)
  C. Elastic Load Balancers
  D. AWS WAF
  B. AWS Identity and Access Management (IAM)

  ---

  Explanation

  "IAM is a feature of your AWS account and is offered at no additional charge."

  https://aws.amazon.com/iam/getting-started/?nc=snandloc=3

• Question 1148:

  Which Amazon EC2 pricing model is the MOST cost efficient for an uninterruptible workload that runs once a year for 24 hours?

  A. On-Demand Instances
  B. Reserved Instances
  C. Spot Instances
  D. Dedicated Instances
  A. On-Demand Instances

  ---

  Explanation

  On-Demand Instances are the most cost-efficient pricing model for an uninterruptible workload that runs once a year for 24 hours. On-Demand Instances let you pay for compute capacity by the hour or second, depending on which instances you run. No long- term commitments or up-front payments are required. You can increase or decrease your compute capacity to meet the demands of your application and only pay the specified hourly rates for the instance you use1. This model is suitable for developing/testing applications with short-term or unpredictable workloads2. The other pricing models are not cost-efficient for this use case. Reserved Instances and Savings Plans require a commitment to a consistent amount of usage, in USD per hour, for a term of 1 or 3 years. They provide significant discounts compared to On-Demand Instances, but they are not flexible or scalable for workloads that run only once a year. Spot Instances are the cheapest option, but they are not suitable for uninterruptible workloads, as they can be reclaimed by AWS at any time. They are recommended for applications that have flexible start and end times, or that are only feasible at very low compute prices. Dedicated Instances are designed for compliance and licensing requirements, not for cost optimization. They are more expensive than the other options, as they run on single-tenant hardware.

  References: Amazon EC2 ?Secure and resizable compute capacity ?AWS, Amazon EC2 - How AWS Pricing Works

• Question 1149:

  How should the company deploy the application to meet these requirements?

  A. Ina single Availability Zone
  B. On AWS Direct Connect
  C. On Reserved Instances
  D. In multiple Availability Zones
  D. In multiple Availability Zones

  ---

  Explanation

  Deploying the application in multiple Availability Zones is the best way to ensure high availability for the application. Availability Zones are isolated locations within an AWS Region that are engineered to be fault-tolerant from failures in other Availability Zones. By deploying the application in multiple Availability Zones, the company can reduce the impact of outages and increase the resilience of the application. Deploying the application in a single Availability Zone, on AWS Direct Connect, or on Reserved Instances does not provide the same level of high availability as deploying the application in multiple Availability Zones. Source: Availability Zones

• Question 1150:

  A company has set up its IT infrastructure in the AWS Cloud. The company wants to receive detailed reports that break down AWS costs by the hour. The reports must be placed in an Amazon S3 bucket. Which AWS tool will meet these requirements?

  A. AWS Cost and Usage Reports
  B. AWS Pricing Calculator
  C. Cost Explorer
  D. AWS Budgets
  A. AWS Cost and Usage Reports

  ---

  Explanation