Amazon Amazon Certifications CLF-C02 Questions & Answers

• Question 131:

  Which AWS service is used to provide encryption for Amazon EBS?

  A. AWS Certificate Manager

  B. AWS Systems Manager

  C. AWS KMS

  D. AWS Config

  Correct Answer: C

  Use Amazon EBS encryption as a straight-forward encryption solution for your EBS resources associated with your EC2 instances. With Amazon EBS encryption, you aren't required to build, maintain, and secure your own key management infrastructure. Amazon EBS encryption uses AWS KMS keys when creating encrypted volumes and snapshots. https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/EBSEncryption.html

• Question 132:

  A company wants to manage its AWS Cloud resources through a web interface. Which AWS service will meet this requirement?

  A. AWS Management Console

  B. AWS CLI

  C. AWS SDK

  D. AWS Cloud9

  Correct Answer: A

• Question 133:

  Which AWS Cloud benefit is shown by an architecture's ability to withstand failures with minimal downtime?

  A. Agility

  B. Elasticity

  C. Scalability

  D. High availability

  Correct Answer: D

  High availability = minimal downtime = recovery quickly from failure.

  Agility is about how quickly something is deployed.

  https://aws.amazon.com/marketplace/solutions/infrastructure-software/high-availability

• Question 134:

  Which AWS services or features provide disaster recovery solutions for Amazon EC2 instances? (Choose two.)

  A. EC2 Reserved Instances

  B. EC2 Amazon Machine Images (AMIs)

  C. Amazon Elastic Block Store (Amazon EBS) snapshots

  D. AWS Shield

  E. Amazon GuardDuty

  Correct Answer: BC

  B. EC2 Amazon Machine Images (AMIs): AMIs are used to create backups of EC2 instances, and they can be used to launch replacement instances in the event of a disaster or data loss. AMIs are essential for creating recovery points for your EC2 instances.

  C. Amazon Elastic Block Store (Amazon EBS) snapshots: EBS snapshots allow you to create point-in-time backups of your EBS volumes. These snapshots can be used to restore data or create new EBS volumes, making them a key component of disaster recovery for EC2 instances.

• Question 135:

  Which AWS service provides command line access to AWS tools and resources directly from a web browser?

  A. AWS CloudHSM

  B. AWS CloudShell

  C. Amazon WorkSpaces

  D. AWS Cloud Map

  Correct Answer: B

• Question 136:

  A network engineer needs to build a hybrid cloud architecture connecting on-premises networks to the AWS Cloud using AWS Direct Connect. The company has a few VPCs in a single AWS Region and expects to increase the number of

  VPCs to hundreds over time.

  Which AWS service or feature should the engineer use to simplify and scale this connectivity as the VPCs increase in number?

  A. VPC endpoints

  B. AWS Transit Gateway

  C. Amazon Route 53

  D. AWS Secrets Manager

  Correct Answer: B

• Question 137:

  Which AWS service supports a hybrid architecture that gives users the ability to extend AWS infrastructure, AWS services, APIs, and tools to data centers, co-location environments, or on-premises facilities?

  A. AWS Snowmobile

  B. AWS Local Zones

  C. AWS Outposts

  D. AWS Fargate

  Correct Answer: C

  AWS Outposts enables you to run AWS infrastructure and services on premises while seamlessly connecting to the AWS cloud. This service extends the AWS ecosystem to your on-premises locations, allowing you to take advantage of cloud benefits while addressing the requirements of data residency, low-latency applications, and specific regulatory needs in hybrid environments.

• Question 138:

  Which AWS service can run a managed PostgreSQL database that provides online transaction processing (OLTP)?

  A. Amazon DynamoDB

  B. Amazon Athena

  C. Amazon RDS

  D. Amazon EMR

  Correct Answer: C

  Amazon RDS supports various database engines, including PostgreSQL, and offers a managed database service suitable for OLTP workloads. With Amazon RDS for PostgreSQL, you can easily set up, operate, and scale a PostgreSQL database without the administrative overhead of managing the infrastructure.

• Question 139:

  A company wants to provide managed Windows virtual desktops and applications to its remote employees over secure network connections. Which AWS services can the company use to meet these requirements? (Choose two.)

  A. Amazon Connect

  B. Amazon AppStream 2.0

  C. Amazon WorkSpaces

  D. AWS Site-to-Site VPN

  E. Amazon Elastic Container Service (Amazon ECS)

  Correct Answer: CD

  Amazon AppStream 2.0 is a service for streaming desktop applications to a web browser, but it is different from full Windows virtual desktops provided by Amazon WorkSpaces. - Is not right

• Question 140:

  A company is deploying a machine learning (ML) research project that will require a lot of compute power over several months. The ML processing jobs do not need to run at specific times. Which Amazon EC2 instance purchasing option will meet these requirements at the lowest cost?

  A. On-Demand Instances

  B. Spot Instances

  C. Reserved Instances

  D. Dedicated Instances

  Correct Answer: B

  Spot Instances allow you to access spare EC2 capacity at a significantly lower price compared to On-Demand Instances. They are a cost-effective choice for workloads that can be interrupted and are flexible regarding timing. Spot Instances can be ideal for ML processing jobs that do not have strict timing requirements.