Amazon CLF-C02 Online Practice Questions and Exam Preparation

Amazon CLF-C02 Online Questions & Answers

• Question 1201:

  A company is building a mobile app to provide shopping recommendations to its customers. The company wants to use a graph database as part of the shopping recommendation engine.

  Which AWS database service should the company choose?

  A. Amazon DynamoDB
  B. Amazon Aurora
  C. Amazon Neptune
  D. Amazon DocumentDB (with MongoDB compatibility)
  C. Amazon Neptune

  ---

  Explanation

  Amazon Neptune is a service that provides a fully managed graph database that supports property graphs and RDF graphs. It can be used to build applications that work with highly connected datasets, such as shopping recommendations, social networks, fraud detection, and knowledge graphs2. Amazon DynamoDB is a service that provides a fully managed NoSQL database that delivers fast and consistent performance at any scale. Amazon Aurora is a service that provides a fully managed relational database that is compatible with MySQL and PostgreSQL. Amazon DocumentDB (with MongoDB compatibility) is a service that provides a fully managed document database that is compatible with MongoDB.

• Question 1202:

  According to the AWS shared responsibility model, which of the following are AWS responsibilities? (Select TWO.)

  A. Network infrastructure and virtualization of infrastructure
  B. Security of application data
  C. Guest operating systems
  D. Physical security of hardware
  E. Credentials and policies
  A. Network infrastructure and virtualization of infrastructure
  D. Physical security of hardware

  ---

  Explanation

  The correct answers are A and D because network infrastructure and virtualization of infrastructure and physical security of hardware are AWS responsibilities according to the AWS shared responsibility model. The AWS shared responsibility model is a framework that defines the division of responsibilities between AWS and the customer for security and compliance. AWS is responsible for the security of the cloud, which includes the global infrastructure, such as the regions, availability zones, and edge locations; the hardware, software, networking, and facilities that run the AWS services; and the virtualization layer that separates the customer instances and storage. The customer is responsible for the security in the cloud, which includes the customer data, the guest operating systems, the applications, the identity and access management, the firewall configuration, and the encryption. The other options are incorrect because they are not AWS responsibilities according to the AWS shared responsibility model. Security of application data, guest operating systems, and credentials and policies are customer responsibilities according to the AWS shared responsibility model.

  [AWS Shared Responsibility Model]

• Question 1203:

  A company is building an application that will receive millions of database queries each second. The company needs the data store for the application to scale to meet these needs.

  Which AWS service will meet this requirement?

  A. Amazon DynamoDB
  B. AWS Cloud9
  C. Amazon ElastiCache for Memcached
  D. Amazon Neptune
  A. Amazon DynamoDB

  ---

  Explanation

  Amazon DynamoDB is the AWS service that will meet the requirement of building an application that will receive millions of database queries each second. Amazon DynamoDB is a fully managed NoSQL database service that provides fast and consistent performance, scalability, and durability. Amazon DynamoDB can handle any level of request traffic and automatically scale up or down the capacity based on the demand. Amazon DynamoDB also supports in-memory caching with Amazon DynamoDB Accelerator (DAX) to improve the response time and reduce the cost. For more information, see What is Amazon DynamoDB? and Amazon DynamoDB Features.

• Question 1204:

  A company needs to grant permissions that apply to only one specific IAM user and are not intended to be reused by other users, groups, or roles.

  Which IAM policy type meets this requirement?

  A. AWS managed policies
  B. Customer managed policies
  C. Inline policies
  D. Amazon S3 bucket policies
  C. Inline policies

• Question 1205:

  A company has an on-premises Oracle database. The company spends a significant amount of time on database administration activities. The company is moving the database to AWS and needs to minimize the time that is requited lot these administration activities.

  Which AWS service should the company use to meet this requirement?

  A. Amazon ElastiCache
  B. Amazon EC2
  C. Amazon RDS
  D. Amazon DynamoDB
  C. Amazon RDS

  ---

  Explanation

• Question 1206:

  Which option is AWS responsible for under the AWS shared responsibility model?

  A. Network and firewall configuration
  B. Client-side data encryption
  C. Management of user permissions
  D. Hardware and infrastructure
  D. Hardware and infrastructure

  ---

  Explanation

  Hardware and infrastructure is the option that AWS is responsible for under the AWS shared responsibility model. The AWS shared responsibility model describes how AWS and customers share responsibilities for security and compliance in the cloud. AWS is responsible for security of the cloud, which means protecting the infrastructure that runs all the services offered in the AWS Cloud. This infrastructure is composed of the hardware, software, networking, and facilities that run AWS Cloud services. Customers are responsible for security in the cloud, which means taking care of the security of their own applications, data, and operating systems. This includes network and firewall configuration, client-side data encryption, management of user permissions, and more.

• Question 1207:

  A company needs to continuously run an experimental workload on an Amazon EC2 instance and stop the instance after 12 hours. Which instance purchasing option will meet this requirement MOST cost-effectively?

  A. On-Demand Instances
  B. Reserved Instances
  C. Spot Instances
  D. Dedicated Instances
  A. On-Demand Instances

  ---

  Explanation

• Question 1208:

  A company simulates workflows to review and validate that all processes are effective and that staff are familiar with the processes.

  Which design principle of the AWS Well-Architected Framework is the company following with this practice?

  A. Perform operations as code.
  B. Refine operation procedures frequently.
  C. Make frequent, small, reversible changes.
  D. Structure the company to support business outcomes.
  B. Refine operation procedures frequently.

  ---

  Explanation

  Refine operation procedures frequently is one of the design principles of the operational excellence pillar of the AWS Well-Architected Framework. It means that users should continuously review and validate their operational processes to ensure that they are effective and that staff are familiar with them. It also means that users should identify and address any gaps or issues in their processes, and incorporate feedback and lessons learned from operational events5. Perform operations as code is another design principle of the operational excellence pillar, which means that users should automate and script their operational tasks to reduce human error and enable consistent and repeatable execution. Make frequent, small, reversible changes is a design principle of the reliability pillar, which means that users should deploy changes in small increments that can be easily tested and rolled back if necessary. Structure the company to support business outcomes is a design principle of the performance efficiency pillar, which means that users should align their organizational structure and culture with their business goals and cloud strategy.

• Question 1209:

  A solutions architect needs to maintain a fleet of Amazon EC2 instances so that any impaired instances are replaced with new ones.

  Which AWS service should the solutions architect use?

  A. Amazon Elastic Container Service (Amazon ECS)
  B. Amazon GuardDuty
  C. AWS Shield
  D. AWS Auto Scaling
  D. AWS Auto Scaling

  ---

  Explanation

• Question 1210:

  Which AWS service or resource can a company use to deploy AWS WAF rules?

  A. Amazon EC2
  B. Application Load Balancer
  C. AWS Trusted Advisor
  D. Network Load Balancer
  B. Application Load Balancer

  ---

  Explanation

  Application Load Balancer (ALB) integrates with AWS WAF to deploy and manage WAF rules for incoming traffic. ALB can route HTTP and HTTPS traffic and apply WAF rules to protect applications from common web exploits. Network Load Balancer does not support AWS WAF, and Trusted Advisor does not deploy WAF rules.