Amazon CLF-C02 Online Practice Questions and Exam Preparation

Amazon CLF-C02 Online Questions & Answers

• Question 1251:

  A company wants to avoid unnecessary charges and run workloads at the lowest price point. Which pillar of the AWS Well-Architected Framework includes these goals?

  A. Security
  B. Reliability
  C. Sustainability
  D. Cost optimization
  D. Cost optimization

  ---

  Explanation

• Question 1252:

  Which AWS service or feature is a browser-based, pre-authenticated service that can be launched directly from the AWS Management Console?

  A. AWS API
  B. AWS Lightsail
  C. AWS Cloud9
  D. AWS CloudShell
  D. AWS CloudShell

  ---

  Explanation

• Question 1253:

  A network engineer needs to build a hybrid cloud architecture connecting on-premises networks to the AWS Cloud using AWS Direct Connect. The company has a few VPCs in a single AWS Region and expects to increase the number of VPCs to hundreds over time.

  Which AWS service or feature should the engineer use to simplify and scale this connectivity as the VPCs increase in number?

  A. VPC endpoints
  B. AWS Transit Gateway
  C. Amazon Route 53
  D. AWS Secrets Manager
  B. AWS Transit Gateway

  ---

  Explanation

  AWS Transit Gateway is a network transit hub that you can use to interconnect your VPCs and on-premises networks through a central gateway. AWS Transit Gateway simplifies and scales the connectivity between your on-premises networks and AWS, as you only need to create and manage a single connection from the central gateway to each on-premises network, rather than individual connections to each VPC. You can also use AWS Transit Gateway to connect to other AWS services, such as Amazon S3, Amazon DynamoDB, and AWS PrivateLink. AWS Transit Gateway supports thousands of VPCs per gateway, and enables you to peer Transit Gateways across AWS Regions. The other options are not AWS services or features that can simplify and scale the connectivity between on-premises networks and hundreds of VPCs using AWS Direct Connect. VPC endpoints enable private connectivity between your VPCs and supported AWS services, but do not support on-premises networks. Amazon Route 53 is a DNS service that helps you route internet traffic to your resources, but does not provide network connectivity. AWS Secrets Manager is a service that helps you securely store and manage secrets, such as database credentials and API keys, but does not relate to network connectivity

• Question 1254:

  A company needs to launch an Amazon EC2 instance.

  Which of the following can the company use during the launch process to configure the root volume of the EC2 instance?

  A. Amazon EC2 Auto Scaling
  B. Amazon Data Lifecycle Manager (Amazon DLM)
  C. Amazon Machine Image (AMI)
  D. Amazon Elastic Block Store (Amazon EBS) volume
  C. Amazon Machine Image (AMI)

  ---

  Explanation

  Amazon Machine Image (AMI) is the option that the company can use during the launch process to configure the root volume of the EC2 instance. An AMI is a template that contains the software configuration, such as the operating system, applications, and settings, required to launch an EC2 instance. An AMI also specifies the volume size and type of the root device for the instance. The company can choose an AMI provided by AWS, the AWS Marketplace, or the AWS community, or create a custom AMI. For more information, see [Amazon Machine Images (AMI)] and [Launching an Instance Using the Launch Instance Wizard].

• Question 1255:

  Which of the following are pillars of the AWS Well-Architected Framework? (Select TWO.)

  A. Availability
  B. Reliability
  C. Scalability
  D. Responsive design
  E. Operational excellence
  B. Reliability
  E. Operational excellence

  ---

  Explanation

  The correct answers to the questions are B and E because reliability and operational excellence are pillars of the AWS Well-Architected Framework. The AWS Well- Architected Framework is a set of best practices and guidelines for designing and operating reliable, secure, efficient, and cost-effective systems in the cloud. The AWS Well- Architected Framework consists of five pillars: operational excellence, security, reliability, performance efficiency, and cost optimization. Each pillar has a set of design principles that describe the characteristics of a well-architected system. Reliability is the pillar that focuses on the ability of a system to recover from failures and meet business and customer demand. Operational excellence is the pillar that focuses on the ability of a system to run and monitor processes that support business outcomes and continually improve. The other options are incorrect because they are not pillars of the AWS Well-Architected Framework. Availability, scalability, and responsive design are important aspects of cloud architecture, but they are not separate pillars in the framework. Availability and scalability are related to the reliability and performance efficiency pillars, while responsive design is related to the customer experience and user interface.

  AWS Well-Architected Framework

• Question 1256:

  Which service enables customers to audit API calls in their AWS accounts?

  A. AWS CloudTrail
  B. AWS Trusted Advisor
  C. Amazon Inspector
  D. AWS X-Ray
  A. AWS CloudTrail

  ---

  Explanation

  AWS CloudTrail is a service that provides a record of actions taken by a user, role, or an AWS service in your AWS account. CloudTrail captures all API calls for AWS services as events, including calls from the AWS Management Console, AWS SDKs, command line tools, and higher-level AWS services. You can use CloudTrail to monitor, audit, and troubleshoot your AWS account activity. AWS Trusted Advisor is a service that provides best practices recommendations for cost optimization, performance, security, and fault tolerance in your AWS account. Amazon Inspector is a service that helps you improve the security and compliance of your applications deployed on AWS by automatically assessing them for vulnerabilities and deviations from best practices. AWS X-Ray is a service that helps you analyze and debug your applications by collecting data about the requests that your application serves, and providing tools to view, filter, and gain insights into that data.

  References: Logging AWS Audit Manager API calls with CloudTrail, Logging AWS Account Management API calls using AWS CloudTrail, Review API calls in your AWS account using CloudTrail, Monitor the usage of AWS API calls using Amazon CloudWatch, Which service enables customers to audit API calls in their AWS ...

• Question 1257:

  A company is building a serverless architecture that connects application data from multiple data sources. The company needs a solution that does not require additional code.

  Which AWS service meets these requirements?

  A. AWS Lambda
  B. Amazon Simple Queue Service (Amazon SQS)
  C. Amazon CloudWatch
  D. Amazon EventBridge
  D. Amazon EventBridge

  ---

  Explanation

  Amazon EventBridge is the service that meets the requirements of building a serverless architecture that connects application data from multiple data sources without requiring additional code. Amazon EventBridge is a serverless event bus service that allows you to easily connect your applications with data from AWS services, SaaS applications, and your own applications. You can use Amazon EventBridge to create rules that match events and route them to targets such as AWS Lambda functions, Amazon SNS topics, Amazon SQS queues, or other AWS services. Amazon EventBridge handles the event ingestion, delivery, security, authorization, and error handling for you34

• Question 1258:

  A company has set up a VPC on AWS. The company needs a dedicated connection between the VPC and the company's on-premises network.

  Which action should the company take to meet this requirement?

  A. Establish a VPN connection between the VPC and the company's on-premises network.
  B. Establish an AWS Direct Connect connection between the VPC and the company's on- premises network.
  C. Attach an internet gateway to the VPC. Use the AWS public endpoints for connectivity.
  D. Configure Amazon Connect to provide connectivity between the VPC and the company's on-premises network.
  B. Establish an AWS Direct Connect connection between the VPC and the company's on- premises network.

  ---

  Explanation

  Establishing an AWS Direct Connect connection between the VPC and the company's on-premises network is the action that the company should take to meet the requirement of having a dedicated connection between the VPC and the company's on- premises network. AWS Direct Connect is a service that lets you establish a dedicated network connection between your network and one of the AWS Direct Connect locations. Using AWS Direct Connect, you can create a private connection between AWS and your datacenter, office, or colocation environment, which can reduce your network costs, increase bandwidth throughput, and provide a more consistent network experience than internet-based connections. Establishing a VPN connection between the VPC and the company's on-premises network is an action that the company can take to create a secure and encrypted connection between the VPC and the company's on-premises network, but it is not a dedicated connection, as it uses the public internet as the transport mechanism. Attaching an internet gateway to the VPC and using the AWS public endpoints for connectivity is an action that the company can take to enable communication between the VPC and the internet, but it is not a dedicated connection, as it also uses the public internet as the transport mechanism. Configuring Amazon Connect to provide connectivity between the VPC and the company's on-premises network is not an action that the company can take, because Amazon Connect is a service that lets you set up and manage a contact center in the cloud, but it does not provide network connectivity between the VPC and the company's on-premises network.

• Question 1259:

  A company moves a workload to AWS lo run on Amazon EC2 instances. The company needs to run the workload in the most cost-effective way. What can the company do lo meet this requirement?

  A. Use AWS Key Management Sen/ice (AWS KMS)
  B. Use multiple AWS accounts and consolidated billing.
  C. Use AWS CloudFormation to deploy the infrastructure.
  D. Rightsize all the EC2 instances that are used in the deployment
  D. Rightsize all the EC2 instances that are used in the deployment

  ---

  Explanation

  "Right sizing is the most effective way to control cloud costs. It involves continually analyzing instance performance and usage needs and patterns—and then turning off idle instances and right sizing instances that are either overprovisioned or poorly matched to the workload. Because your resource needs are always changing, right sizing must become an ongoing process to continually achieve cost optimization. "

  https://aws.amazon.com/aws-cost-management/aws-cost-optimization/right-sizing/

• Question 1260:

  A user has limited knowledge of AWS services, but wants to quickly deploy a scalable Node.js application in the AWS Cloud. Which service should be used to deploy the application?

  A. AWS CloudFormation
  B. AWS Elastic Beanstalk
  C. Amazon EC2
  D. AWS OpsWorks
  B. AWS Elastic Beanstalk

  ---

  Explanation