Amazon CLF-C02 Online Practice Questions and Exam Preparation

Amazon CLF-C02 Online Questions & Answers

• Question 151:

  Which top-level Key Performance Indicator (KPI) is available in AWS rightsizing recommendations for Cost Optimization?

  A. Container Modernization Opportunities
  B. Estimated Monthly Saving
  C. Reserved Instances Savings
  D. Compute Savings Recommendations
  B. Estimated Monthly Saving

  ---

  Explanation

  Understanding Cost Optimization Recommendations:

  In AWS, cost optimization involves identifying ways to reduce costs while maintaining or improving performance and capacity.

  Top-Level KPI - Estimated Monthly Saving:

  This KPI provides an estimation of potential monthly cost savings based on AWS rightsizing recommendations.

• Question 152:

  A company wants to deploy a non-containerized Java-based web application on AWS. The company wants to use a managed service to quickly deploy the application. The company wants the service to automatically provision capacity, load balance, scale, and monitor application health.

  Which AWS service will meet these requirements?

  A. Amazon Elastic Container Service (Amazon ECS)
  B. AWS Lambda
  C. Amazon Elastic Kubernetes Service (Amazon EKS)
  D. AWS Elastic Beanstalk
  D. AWS Elastic Beanstalk

  ---

  Explanation

• Question 153:

  A developer wants to use an Amazon S3 bucket to store application logs that contain sensitive data.

  Which AWS service or feature should the developer use to restrict read and write access to the S3 bucket?

  A. Security groups
  B. Amazon CloudWatch
  C. AWS CloudTrail
  D. ACLs
  D. ACLs

  ---

  Explanation

  ACLs are an AWS service or feature that the developer can use to restrict read and write access to the S3 bucket. ACLs are access control lists that grant basic permissions to other AWS accounts or predefined groups. They can be used to grant read or write access to an S3 bucket or an object3. Security groups are virtual firewalls that control the inbound and outbound traffic for Amazon EC2 instances. They are not a service or feature that can be used to restrict access to an S3 bucket. Amazon CloudWatch is a service that provides monitoring and observability for AWS resources and applications. It can be used to collect and analyze metrics, logs, events, and alarms. It is not a service or feature that can be used to restrict access to an S3 bucket. AWS CloudTrail is a service that provides governance, compliance, and audit for AWS accounts and resources. It can be used to track and record the API calls and user activity in AWS. It is not a service or feature that can be used to restrict access to an S3 bucket.

• Question 154:

  A company uses AWS for its web application. The company wants to minimize latency and perform compute operations for the application as close to end users as possible.

  Which AWS service or infrastructure component will provide this functionality?

  A. AWS Regions
  B. Availability Zones
  C. Edge locations
  D. AWS Direct Connect
  C. Edge locations

  ---

  Explanation

  Edge locations are sites that Amazon CloudFront uses to cache copies of your content for faster delivery to users at any location. You can use Amazon CloudFront to deliver your entire website, including dynamic, static, streaming, and interactive content using a global network of edge locations. Requests for your content are automatically routed to the nearest edge location, so content is delivered with the best possible performance. Edge locations can also host AWS

  Lambda functions to perform compute operations for your web application as close to end users as possible.

• Question 155:

  An ecommerce company has deployed a new web application on Amazon EC2 instances. The company wants to distribute incoming HTTP traffic evenly across all running instances.

  Which AWS service or resource will meet this requirement?

  A. Amazon EC2 Auto Scaling
  B. Application Load Balancer
  C. Gateway Load Balancer
  D. Network Load Balancer
  B. Application Load Balancer

  ---

  Explanation

  An Application Load Balancer (ALB) is the best choice for distributing incoming HTTP/HTTPS traffic evenly across multiple Amazon EC2 instances. It operates at the application layer (Layer 7 of the OSI model) and is specifically designed to

  handle HTTP and HTTPS traffic, which is ideal for web applications.

  Here is why the ALB is the correct choice:

  Layer 7 Load Balancing: The ALB works at the application layer and provides advanced routing capabilities based on content. It can inspect the incoming HTTP requests and make decisions on how to route traffic to various backend targets,

  which include Amazon EC2 instances, containers, or Lambda functions. This is particularly useful for web applications where you need to make routing decisions based on HTTP headers, paths, or query strings.

  HTTP and HTTPS Support: The ALB natively supports HTTP and HTTPS protocols, making it the ideal load balancer for web-based applications. It can efficiently manage and route these types of traffic and handle tasks such as SSL/TLS

  termination.

  Health Checks: The ALB can continuously monitor the health of the registered EC2 instances and only route traffic to healthy instances. This ensures high availability and reliability of the web application. Path-based and Host-based Routing:

  The ALB can route traffic based on the URL path or host header. This feature allows the same load balancer to serve multiple applications hosted on different domains or subdomains. Integration with Auto Scaling: The ALB can integrate

  seamlessly with Amazon EC2 Auto Scaling. As the number of EC2 instances increases or decreases, the ALB automatically includes the new instances in its traffic distribution pool, ensuring even distribution of incoming requests.

  WebSocket Support: It also supports WebSocket and HTTP/2 protocols, which are essential for modern web applications that require real-time, bidirectional communication.

  Why other options are not suitable:

  A. Amazon EC2 Auto Scaling: This service is used to automatically scale the number of EC2 instances up or down based on specified conditions. However, it does not provide load balancing capabilities. It works well with load balancers but does not handle the distribution of incoming traffic by itself.

  C. Gateway Load Balancer: This is designed to distribute traffic to virtual appliances like firewalls, IDS/IPS systems, or deep packet inspection systems. It operates at Layer 3 (Network Layer) and is not ideal for distributing HTTP/HTTPS traffic to EC2 instances.

  D. Network Load Balancer: This load balancer operates at Layer 4 (Transport Layer) and is designed to handle millions of requests per second while maintaining ultra-low latencies. It is best suited for TCP, UDP, and TLS traffic but does not provide advanced Layer 7 routing features required for HTTP/HTTPS traffic.

  References: AWS Application Load Balancer Documentation Comparison of Elastic Load Balancing Options

• Question 156:

  A company needs a file-sharing service that supports SMB protocol.

  A. Amazon Aurora
  B. AWS Config
  C. AWS DataSync
  D. Amazon FSx for Windows File Server
  D. Amazon FSx for Windows File Server

  ---

  Explanation

• Question 157:

  A company is running an Amazon EC2 instance in a VPC.

  An ecommerce company is using Amazon EC2 Auto Scaling groups to manage a fleet of web servers running on Amazon EC2. This architecture follows which AWS Well-Architected Framework best practice?

  A. Secure the workload
  B. Decouple infrastructure components
  C. Design for failure
  D. Think parallel
  C. Design for failure

  ---

  Explanation

  Design for failure is one of the best practices of the AWS Well-Architected Framework. It means that the architecture should be resilient and fault-tolerant, and able to handle failures without impacting the availability and performance of the applications. By using Amazon EC2 Auto Scaling groups, the ecommerce company can design for failure by automatically scaling the number of EC2 instances up or down based on demand or health status. Amazon EC2 Auto Scaling groups can also distribute the EC2 instances across multiple Availability Zones, which are isolated locations within an AWS Region that have independent power, cooling, and network connectivity. This way, the company can ensure that their web servers can handle traffic spikes, recover from failures, and provide a consistent user experience

• Question 158:

  Which AWS service should a cloud practitioner use to receive real-time guidance for provisioning resources, based on AWS best practices related to security, cost optimization, and service limits?

  A. AWS Trusted Advisor
  B. AWS Config
  C. AWS Security Hub
  D. AWS Systems Manager
  A. AWS Trusted Advisor

  ---

  Explanation

  AWS Trusted Advisor is the AWS service that provides real-time guidance for provisioning resources, based on AWS best practices related to security, cost optimization, and service limits. AWS Trusted Advisor inspects the user's AWS environment and provides recommendations for improving performance, security, and reliability, reducing costs, and following best practices. AWS Trusted Advisor also alerts the user when they are approaching or exceeding their service limits, and helps them request limit increases3.

• Question 159:

  A company migrated its systems to the AWS Cloud. The systems are rightsized, and a security review did not reveal any issues. The company must ensure that additional developments, integrations, changes, and system usage growth do not jeopardize this optimized AWS infrastructure.

  Which AWS service should the company use to report ongoing optimization and security?

  A. AWS Trusted Advisor
  B. AWS Health Dashboard
  C. Amazon Connect
  D. AWS Systems Manager
  A. AWS Trusted Advisor

  ---

  Explanation

  AWS Trusted Advisor is a service that provides real-time guidance to help you provision your resources following AWS best practices. It offers checks in five categories: cost optimization, performance, security, fault tolerance, and service

  limits. By continuously monitoring the AWS environment, AWS Trusted Advisor helps ensure that additional developments, integrations, changes, and growth do not jeopardize the optimized infrastructure by providing ongoing optimization

  and security recommendations.

  Why Other Options Are Not Suitable:

  AWS Health Dashboard: Incorrect. This service provides a personalized view of service health and status updates but does not offer continuous optimization or security advice. Amazon Connect: Incorrect. This is a contact center service and

  is not related to infrastructure optimization or security. AWS Systems Manager: Incorrect. This service provides operational insights and management for AWS resources but is not specifically focused on ongoing optimization or security

  checks.

• Question 160:

  A company has developed a new In-house application. The company does not have a way to determine or predict the usage demand that the application will create.

  Which AWS Cloud computing benefit is the company seeking?

  A. Easy to use
  B. Cost-effective
  C. Secure
  D. Scalable and high performance
  D. Scalable and high performance

  ---

  Explanation