Amazon Amazon Certifications CLF-C02 Questions & Answers

• Question 111:

  A company wants to automate infrastructure deployment by using infrastructure as code (IaC). The company wants to scale production stacks so the stacks can be deployed in multiple AWS Regions. Which AWS service will meet these requirements?

  A. Amazon CloudWatch

  B. AWS Config

  C. AWS Trusted Advisor

  D. AWS CloudFormation

  Correct Answer: D

  "AWS CloudFormation gives you an easy way to model a collection of related AWS and third-party resources, provision them quickly and consistently, and manage them throughout their lifecycles, by treating infrastructure as code. A CloudFormation template describes your desired resources and their dependencies so you can launch and configure them together as a stack. You can use a template to create, update, and delete an entire stack as a single unit, as often as you need to, instead of managing resources individually. You can manage and provision stacks across multiple AWS accounts and AWS Regions."

  Reference: https://aws.amazon.com/cloudformation/features/

• Question 112:

  How does AWS Cloud computing help businesses reduce costs? (Choose two.)

  A. AWS charges the same prices for services in every AWS Region.

  B. AWS enables capacity to be adjusted on demand.

  C. AWS offers discounts for Amazon EC2 instances that remain idle for more than 1 week.

  D. AWS does not charge for data sent from the AWS Cloud to the internet.

  E. AWS eliminates many of the costs of building and maintaining on-premises data centers.

  Correct Answer: BE

• Question 113:

  A company wants to grant users in one AWS account access to resources in another AWS account. The users do not currently have permission to access the resources. Which AWS service will meet this requirement?

  A. IAM group

  B. IAM role

  C. IAM tag

  D. IAM Access Analyzer

  Correct Answer: B

• Question 114:

  Which tool should a developer use to integrate AWS service features directly into an application?

  A. AWS Software Development Kit

  B. AWS CodeDeploy

  C. AWS Lambda

  D. AWS Batch

  Correct Answer: A

• Question 115:

  Using AWS Identity and Access Management (IAM) to grant access only to the resources needed to perform a task is a concept known as:

  A. restricted access.

  B. as-needed access.

  C. least privilege access.

  D. token access.

  Correct Answer: C

• Question 116:

  Which AWS service or tool can be used to set up a firewall to control traffic going into and coming out of an Amazon VPC subnet?

  A. Security group

  B. AWS WAF

  C. AWS Firewall Manager

  D. Network ACL

  Correct Answer: D

  Network ACLs are an optional layer of security that act as a firewall for controlling inbound and outbound traffic at the subnet level.

  https://docs.aws.amazon.com/zh_tw/vpc/latest/userguide/VPC_Security.html#VPC_Security_Comparison

• Question 117:

  A company wants to operate a data warehouse to analyze data without managing the data warehouse infrastructure. Which AWS service will meet this requirement?

  A. Amazon Aurora

  B. Amazon Redshift Serverless

  C. AWS Lambda

  D. Amazon RDS

  Correct Answer: B

  "Amazon Redshift Serverless makes it easy to run analytics workloads of any size without having to manage data warehouse infrastructure."

  Reference: https://aws.amazon.com/redshift/redshift-serverless/

• Question 118:

  Which AWS service or feature improves network performance by sending traffic through the AWS worldwide network infrastructure?

  A. Route table

  B. AWS Transit Gateway

  C. AWS Global Accelerator

  D. Amazon VPC

  Correct Answer: C

  "Improve application availability, performance, and security using the AWS global network"

  Reference: https://aws.amazon.com/global-accelerator/

• Question 119:

  Which responsibility belongs to AWS when a company hosts its databases on Amazon EC2 instances?

  A. Database backups

  B. Database software patches

  C. Operating system patches

  D. Operating system installations

  Correct Answer: D

• Question 120:

  Which AWS service is a hybrid cloud storage service that provides on-premises users access to virtually unlimited cloud storage?

  A. AWS DataSync

  B. Amazon S3 Glacier

  C. AWS Storage Gateway

  D. Amazon Elastic Block Store (Amazon EBS)

  Correct Answer: C

  AWS Storage Gateway is a hybrid cloud storage service that enables on-premises applications to seamlessly access AWS Cloud-based storage. It provides a local cache for frequently accessed data to ensure low-latency access, while also storing data in the cloud for durability and scalability.