Amazon Amazon Certifications CLF-C02 Questions & Answers

• Question 151:

  A company is building an application that needs to deliver images and videos globally with minimal latency. Which approach can the company use to accomplish this in a cost effective manner?

  A. Deliver the content through Amazon CloudFront.

  B. Store the content on Amazon S3 and enable S3 cross-region replication.

  C. Implement a VPN across multiple AWS Regions.

  D. Deliver the content through AWS PrivateLink.

  Correct Answer: A

  Key: "deliver images and videos globally with minimal latency"

• Question 152:

  Which option is a benefit of the economies of scale based on the advantages of cloud computing?

  A. The ability to trade variable expense for fixed expense

  B. Increased speed and agility

  C. Lower variable costs over fixed costs

  D. Increased operational costs across data centers

  Correct Answer: C

  1 - is reversed benefit "Trade fixed expense for variable expense" thus invalid 2 - speed and agility has nothing to do with economies of scale 4 - "Increased operational costs across data centers" is not a benefit 3 - Benefit from massive economies of scale ?By using cloud computing, you can achieve a -------lower variable cost than you can get on your own------. Because usage from hundreds of thousands of customers is aggregated in the cloud, providers such as AWS can achieve higher economies of scale, which translates into lower pay as-you-go prices. https://docs.aws.amazon.com/whitepapers/latest/aws-overview/six-advantages-of-cloud-computing.html

• Question 153:

  Which AWS service can be used at no additional cost?

  A. Amazon SageMaker

  B. AWS Config

  C. AWS Organizations

  D. Amazon CloudWatch

  Correct Answer: C

  AWS Organizations is an account management service that enables you to consolidate multiple AWS accounts into an organization that you create and centrally manage. AWS Organizations is offered at no additional charge. You are charged only for AWS resources that users and roles in your member accounts use. For example, you are charged the standard fees for Amazon EC2 instances that are used by users or roles in your member accounts. https://docs.aws.amazon.com/organizations/latest/userguide/orgs_introduction.html

• Question 154:

  Which AWS Cloud Adoption Framework (AWS CAF) capability belongs to the people perspective?

  A. Data architecture

  B. Event management

  C. Cloud fluency

  D. Strategic partnership

  Correct Answer: C

  Data architecture => Platform Event management => Operations Cloud fluency => People Strategic partnership => Business https://abhi0751.medium.com/aws-cloud-adoption-framework-aws-caf-a512b89dbcba

• Question 155:

  A company wants to migrate its on-premises relational databases to the AWS Cloud. The company wants to use infrastructure as close to its current geographical location as possible. Which AWS service or resource should the company use to select its Amazon RDS deployment area?

  A. Amazon Connect

  B. AWS Wavelength

  C. AWS Regions

  D. AWS Direct Connect

  Correct Answer: C

• Question 156:

  Which service enables customers to audit API calls in their AWS accounts?

  A. AWS CloudTrail

  B. AWS Trusted Advisor

  C. Amazon Inspector

  D. AWS X-Ray

  Correct Answer: A

  CloudTrail is a service that enables governance, compliance, operational auditing, and risk auditing of your AWS account. It records and logs all API calls made within your account, including who made them, when they were made, and which resources were affected.

• Question 157:

  What is a customer responsibility when using AWS Lambda according to the AWS shared responsibility model?

  A. Managing the code within the Lambda function

  B. Confirming that the hardware is working in the data center

  C. Patching the operating system

  D. Shutting down Lambda functions when they are no longer in use

  Correct Answer: A

  In the AWS shared responsibility model, AWS is responsible for the infrastructure and security "of" the cloud, while customers are responsible for the security "in" the cloud. When using AWS Lambda, customers are responsible for managing the code and configuration within the Lambda function. This includes writing and updating the code, configuring the function's execution environment, and ensuring that the code complies with security best practices and is free from vulnerabilities.

• Question 158:

  A company is setting up AWS Identity and Access Management (IAM) on an AWS account. Which recommendation complies with IAM security best practices?

  A. Use the account root user access keys for administrative tasks.

  B. Grant broad permissions so that all company employees can access the resources they need.

  C. Turn on multi-factor authentication (MFA) for added security during the login process.

  D. Avoid rotating credentials to prevent issues in production applications.

  Correct Answer: C

  Enabling multi-factor authentication (MFA) for user accounts, especially for users with administrative or high-privilege access, is a crucial security best practice. MFA adds an additional layer of security by requiring users to provide two or more verification factors (typically something they know, like a password, and something they have, like a temporary MFA code from a hardware token or mobile app) before gaining access. This significantly reduces the risk of unauthorized access, even if login credentials are compromised.

• Question 159:

  Elasticity in the AWS Cloud refers to which of the following? (Choose two.)

  A. How quickly an Amazon EC2 instance can be restarted

  B. The ability to rightsize resources as demand shifts

  C. The maximum amount of RAM an Amazon EC2 instance can use

  D. The pay-as-you-go billing model

  E. How easily resources can be procured when they are needed

  Correct Answer: BE

  Pay-as-you-go Pricing: Cloud elasticity lets organizations connect their IT spending to current demand. This means they only pay for the resources they use at any given time.

• Question 160:

  A cloud practitioner needs to obtain AWS compliance reports before migrating an environment to the AWS Cloud. How can these reports be generated?

  A. Contact the AWS Compliance team.

  B. Download the reports from AWS Artifact.

  C. Open a case with AWS Support.

  D. Generate the reports with Amazon Macie.

  Correct Answer: B

  AWS Artifact is a portal that provides access to various compliance reports, including certifications, attestations, and other relevant documents. You can download these reports directly from AWS Artifact.