Amazon Amazon Certifications CLF-C02 Questions & Answers

• Question 141:

  Which of the following is a fully managed MySQL-compatible database?

  A. Amazon S3

  B. Amazon DynamoDB

  C. Amazon Redshift

  D. Amazon Aurora

  Correct Answer: D

  Amazon Aurora is a relational database service that is compatible with MySQL and PostgreSQL. It is fully managed by AWS and is designed for high availability, performance, and scalability while maintaining MySQL compatibility. Aurora offers features like automated backups, read replicas, and seamless failover to ensure data durability and availability. It's a popular choice for applications that require a MySQL-compatible database with the benefits of a fully managed service.

• Question 142:

  A company has a test AWS environment. A company is planning on testing an application within AWS. The application testing can be interrupted and does not need to run continuously. Which Amazon EC2 purchasing option will meet these requirements MOST cost-effectively?

  A. On-Demand Instances

  B. Dedicated Instances

  C. Spot Instances

  D. Reserved Instances

  Correct Answer: C

  Spot Instances are a good fit for stateless, fault-tolerant workloads that can be interrupted without any impact on the overall job.

• Question 143:

  Which AWS service gives users the ability to discover and protect sensitive data that is stored in Amazon S3 buckets?

  A. Amazon Macie

  B. Amazon Detective

  C. Amazon GuardDuty

  D. AWS IAM Access Analyzer

  Correct Answer: A

  Amazon Macie is a security service that uses machine learning to automatically discover, classify, and protect sensitive data in Amazon S3. It helps you identify and protect data such as personally identifiable information (PII), financial information, intellectual property, and more by monitoring data access and alerting you to potential security risks

• Question 144:

  Which of the following services can be used to block network traffic to an instance? (Choose two.)

  A. Security groups

  B. Amazon Virtual Private Cloud (Amazon VPC) flow logs

  C. Network ACLs

  D. Amazon CloudWatch

  E. AWS CloudTrail

  Correct Answer: AC

  Security groups are stateful firewalls that control inbound and outbound traffic at the instance level. You can configure security groups to allow or deny specific types of network traffic to and from your instances. Network ACLs (Access Control Lists) are stateless firewalls that control traffic at the subnet level. Network ACLs define rules to allow or deny traffic based on source and destination IP addresses, ports, and protocols.

• Question 145:

  Which AWS service is always provided at no charge?

  A. Amazon S3

  B. AWS Identity and Access Management (IAM)

  C. Elastic Load Balancers

  D. AWS WAF

  Correct Answer: B

  "IAM is a feature of your AWS account and is offered at no additional charge."

  Reference: https://aws.amazon.com/iam/getting-started/?nc=snandloc=3

• Question 146:

  To reduce costs, a company is planning to migrate a NoSQL database to AWS.

  Which AWS service is fully managed and can automatically scale throughput capacity to meet database workload demands?

  A. Amazon Redshift

  B. Amazon Aurora

  C. Amazon DynamoDB

  D. Amazon RDS

  Correct Answer: B

  Answer B is Correct.

  Key: "NoSQL database" "fully managed and can automatically scale throughput capacity"

• Question 147:

  A company is using Amazon DynamoDB.

  Which task is the company's responsibility, according to the AWS shared responsibility model?

  A. Patch the operating system.

  B. Provision hosts.

  C. Manage database access permissions.

  D. Secure the operating system.

  Correct Answer: C

  https://www.examtopics.com/discussions/amazon/view/101729-exam-aws-certified-cloud-practitioner-topic-1-question-629/

• Question 148:

  Which AWS service is a cloud security posture management (CSPM) service that aggregates alerts from various AWS services and partner products in a standardized format?

  A. AWS Security Hub

  B. AWS Trusted Advisor

  C. Amazon EventBridge

  D. Amazon GuardDuty

  Correct Answer: A

  "AWS Security Hub is a cloud security posture management (CSPM) service that performs automated, continuous security best practice checks against your AWS resources to help you identify misconfigurations, and aggregates your security alerts (i.e. findings) in a standardized format so that you can more easily enrich, investigate, and remediate them."

  Reference: https://aws.amazon.com/security-hub/features/?nc=snandloc=2

• Question 149:

  Which of the following is a software development framework that a company can use to define cloud resources as code and provision the resources through AWS CloudFormation?

  A. AWS CLI

  B. AWS Developer Center

  C. AWS Cloud Development Kit (AWS CDK)

  D. AWS CodeStar

  Correct Answer: C

  AWS CDK is a software development framework that enables developers to define infrastructure as code (IaC) using familiar programming languages like TypeScript, Python, Java, C#, and more. With AWS CDK, you can define cloud resources, their relationships, and provisioning logic in your preferred programming language. AWS CDK also generates CloudFormation templates based on your code, making it easier to manage and deploy infrastructure resources in AWS.

• Question 150:

  A company is exploring the use of the AWS Cloud, and needs to create a cost estimate for a project before the infrastructure is provisioned. Which AWS service or feature can be used to estimate costs before deployment?

  A. AWS Free Tier

  B. AWS Pricing Calculator

  C. AWS Billing and Cost Management

  D. AWS Cost and Usage Report

  Correct Answer: B

  AWS Pricing Calculator is a web-based planning tool that you can use to create estimates for your AWS use cases. You can use it to model your solutions before building them, explore the AWS service price points, and review the calculations behind your estimates. https://docs.aws.amazon.com/pricing-calculator/latest/userguide/what-is-pricing-calculator.html