Amazon CLF-C02 Online Practice Questions and Exam Preparation

Amazon CLF-C02 Online Questions & Answers

• Question 1191:

  Which options are AWS Cloud Adoption Framework (AWS CAF) perspectives? (Choose two.)

  A. Cloud fluency
  B. Security
  C. Change acceleration
  D. Architecture
  E. Business
  B. Security
  E. Business

  ---

  Explanation

• Question 1192:

  A company plans to migrate its application to AWS and run the application on Amazon EC2 instances. The application will have continuous usage for 1 year. Which EC2 instance purchasing option will meet these requirements MOST cost-effectively?

  A. Reserved Instances
  B. Spot Instances
  C. On-Demand Instances
  D. Dedicated Hosts
  A. Reserved Instances

  ---

  Explanation

• Question 1193:

  A company wants to deploy a web application as a containerized application. The company wants to use a managed service that can automatically create container images from source code and deploy the containerized application.

  Which AWS service will meet these requirements?

  A. AWS Elastic Beanstalk
  B. Amazon Elastic Container Service (Amazon ECS)
  C. AWS App Runner
  D. Amazon EC2
  C. AWS App Runner

  ---

  Explanation

  AWS App Runner is a fully managed service that makes it easy for developers to quickly deploy containerized web applications and APIs at scale. It can automatically build container images from source code or directly from a container

  registry and then deploy the application without requiring deep container knowledge or expertise.

  AWS App Runner meets the requirements of:

  Automatically creating container images from source code.

  Managing the deployment of the containerized application with minimal operational overhead.

  Why Other Options Are Not Suitable:

  AWS Elastic Beanstalk: While it simplifies deploying and scaling web applications, it does not automatically create container images from source code. Amazon Elastic Container Service (Amazon ECS): ECS is a container orchestration

  service that requires more manual setup for creating and managing container images and deployments.

  Amazon EC2: This service provides virtual servers but does not offer managed container image creation or deployment.

• Question 1194:

  Which of the following actions are controlled with AWS Identity and Access Management (IAM)? (Select TWO.)

  A. Control access to AWS service APIs and to other specific resources.
  B. Provide intelligent threat detection and continuous monitoring.
  C. Protect the AWS environment using multi-factor authentication (MFA).
  D. Grant users access to AWS data centers.
  E. Provide firewall protection for applications from common web attacks.
  A. Control access to AWS service APIs and to other specific resources.
  C. Protect the AWS environment using multi-factor authentication (MFA).

  ---

  Explanation

  AWS Identity and Access Management (IAM) is a service that enables you to manage access to AWS services and resources securely. You can use IAM to perform the following actions:

  Control access to AWS service APIs and to other specific resources: You can create users, groups, roles, and policies that define who can access which AWS resources and how. You can also use IAM to grant temporary access to users or

  applications that need to perform certain tasks on your behalf Protect the AWS environment using multi-factor authentication (MFA): You can enable MFA for your IAM users and root user to add an extra layer of security to your AWS account.

  MFA requires users to provide a unique authentication code from an approved device or SMS text message, in addition to their user name and password, when they sign in to AWS

• Question 1195:

  A company needs a managed NFS file system that the company can use with its AWS compute resources.

  Which AWS service or feature will meet these requirements?

  A. Amazon Elastic Block Store (Amazon EBS)
  B. AWS Storage Gateway Tape Gateway
  C. Amazon S3 Glacier Flexible Retrieval
  D. Amazon Elastic File System (Amazon EFS)
  D. Amazon Elastic File System (Amazon EFS)

  ---

  Explanation

  Amazon Elastic File System (Amazon EFS) is a fully managed, scalable, and serverless NFS (Network File System) file system specifically designed for use with AWS services and on-premises resources. It enables companies to create and

  configure file systems that can be accessed from multiple Amazon EC2 instances simultaneously, making it ideal for use cases that require shared file storage for AWS compute services.

  Why Amazon EFS Fits the Requirements:

  Managed Service: Amazon EFS is a fully managed file storage service that simplifies the process of setting up and managing NFS file systems. Scalability and Elasticity: EFS automatically scales to accommodate the storage needs of

  applications, without the need to provision or manage storage capacity. NFS Compatibility: Amazon EFS natively supports the NFSv4 protocol, making it compatible with a wide range of applications and workloads that require NFS access.

  Integration with AWS Compute Services: EFS integrates seamlessly with Amazon EC2 and other AWS services, providing a shared file storage solution across multiple instances and services within the AWS cloud environment.

  Why Other Options Do Not Fit:

  A. Amazon Elastic Block Store (Amazon EBS): While EBS provides block-level storage that can be attached to individual EC2 instances, it is not a file system, nor does it provide managed NFS file storage capabilities. EBS is designed for

  single- instance access rather than shared file access across multiple instances.

  B. AWS Storage Gateway Tape Gateway: Tape Gateway is designed for archival purposes and allows companies to store virtual tape backups in Amazon S3 or

  Glacier. It does not support NFS file storage and is not intended for regular compute access.

  C. Amazon S3 Glacier Flexible Retrieval: Amazon S3 Glacier is optimized for data archiving and long-term storage of infrequently accessed data, but it does not provide NFS file system capabilities, nor is it suitable for high-performance

  access needs associated with compute services.

  For more details, you can refer to the AWS Cloud Practitioner Essentials content, specifically the modules on Storage Services where Amazon EFS is covered as the managed NFS file storage solution offered by AWS.

• Question 1196:

  What is the total amount of storage offered by Amazon S3?

  A. WOMB
  B. 5 GB
  C. 5 TB
  D. Unlimited
  D. Unlimited

  ---

  Explanation

  Amazon S3 offers unlimited storage for any amount of data. You can store as many objects as you want, and each object can be as large as 5 terabytes. You pay only for the storage space that you actually use, and there are no minimum commitments or upfront fees. Amazon S3 also provides high durability, availability, scalability, and security for your data.

• Question 1197:

  A company needs stateless network filtering for its VPC. Which AWS service, tool, or feature will meet this requirement?

  A. AWS PrivateLink
  B. Security group
  C. Network access control list (ACL)
  D. AWS WAF
  C. Network access control list (ACL)

  ---

  Explanation

  A Network Access Control List (ACL) is a stateless network filtering mechanism provided by AWS for controlling traffic in and out of subnets within a VPC. Unlike security groups, which are stateful, network ACLs are stateless. This means

  they do not automatically allow responses to inbound traffic unless explicitly specified. Network ACLs allow you to set rules for both inbound and outbound traffic, making them suitable for stateless filtering.

  Security groups, on the other hand, are stateful. AWS WAF is primarily used for web application-level security, while AWS PrivateLink is used for privately connecting VPCs to AWS services without using an internet gateway.

  Therefore, for stateless network filtering, Network ACL is the correct choice.

• Question 1198:

  Which AWS services or tools can identify rightsizing opportunities for Amazon EC2 instances? (Choose two.)

  A. AWS Cost Explorer
  B. AWS Billing Conductor
  C. Amazon CodeGuru
  D. Amazon SageMaker
  E. AWS Compute Optimizer
  A. AWS Cost Explorer
  E. AWS Compute Optimizer

  ---

  Explanation

  https://docs.aws.amazon.com/cost-management/latest/userguide/ce-rightsizing.html https://aws.amazon.com/compute-optimizer/

• Question 1199:

  A cloud practitioner wants a repeatable way to deploy identical AWS resources by using infrastructure templates. Which AWS service will meet these requirements?

  A. AWS CloudFormation
  B. AWS Directory Service
  C. Amazon Lightsail
  D. AWS CodeDeploy
  A. AWS CloudFormation

  ---

  Explanation

• Question 1200:

  An online retail company wants to migrate its on-premises workload to AWS. The company needs to automatically handle a seasonal workload increase in a cost-effective manner.

  Which AWS Cloud features will help the company meet this requirement? (Choose two.)

  A. Cross-Region workload deployment
  B. Pay-as-you-go pricing
  C. Built-in AWS CloudTrail audit capabilities
  D. Auto Scaling policies
  E. Centralized logging
  B. Pay-as-you-go pricing
  D. Auto Scaling policies

  ---

  Explanation