Amazon CLF-C02 Online Practice Questions and Exam Preparation

Amazon CLF-C02 Online Questions & Answers

• Question 161:

  Which of the following is a benefit of decoupling an AWS Cloud architecture?

  A. Reduced latency
  B. Ability to upgrade components independently
  C. Decreased costs
  D. Fewer components to manage
  B. Ability to upgrade components independently

  ---

  Explanation

  A benefit of decoupling an AWS Cloud architecture is the ability to upgrade components independently. Decoupling is a way of designing systems to reduce interdependencies and minimize the impact of changes. Decoupling allows components to interact with each other through well-defined interfaces, rather than direct references. This reduces the risk of failures and errors propagating across the system, and enables greater scalability, availability, and maintainability. By decoupling an AWS Cloud architecture, the user can upgrade or modify one component without affecting the other components5.

• Question 162:

  A retail company is building a new mobile app. The company is evaluating whether to build the app at an on-premises data center or in the AWS Cloud.

  Which of the following are benefits of building this app in the AWS Cloud? (Choose two.)

  A. A large, upfront capital expense and low variable expenses
  B. Increased speed for trying out new projects
  C. Complete control over the physical security of the infrastructure
  D. Flexibility to scale up in minutes as the application becomes popular
  E. Ability to pick the specific data centers that will host the application servers
  B. Increased speed for trying out new projects
  D. Flexibility to scale up in minutes as the application becomes popular

  ---

  Explanation

• Question 163:

  A company wants an AWS service that can automate software deployment in Amazon EC2 instances and on-premises instances. Which AWS service will meet this requirement?

  A. AWS CodeCommit
  B. AWS CodeBuild
  C. AWS CodeDeploy
  D. AWS CodePipeline
  C. AWS CodeDeploy

  ---

  Explanation

• Question 164:

  A company wants to centrally manage its employee's access to multiple AWS accounts. Which AWS service or feature should the company use to meet this requirement?

  A. AWS Identity and Access Management Access Analyzer
  B. AWS Secrets Manager
  C. AWS IAM Identity Center
  D. AWS Security Token Service (AWS STS)
  C. AWS IAM Identity Center

  ---

  Explanation

  AWS IAM Identity Center provides centralized access management across multiple AWS accounts, enabling organizations to manage employee access efficiently. It is specifically designed for this purpose within AWS Organizations. AWS STS provides temporary credentials but does not manage multiple account access centrally, while IAM Access Analyzer and Secrets Manager serve different purposes related to access and secret management.

• Question 165:

  Which AWS service is a fully managed NoSQL database service?

  A. Amazon RDS
  B. Amazon Redshift
  C. Amazon DynamoDB
  D. Amazon Aurora
  C. Amazon DynamoDB

  ---

  Explanation

  Amazon DynamoDB is a fully managed NoSQL database service that provides fast and predictable performance with seamless scalability. It supports both document and key-value data models and is designed to handle large amounts of data across multiple servers. Other options, like Amazon RDS and Aurora, are managed relational database services, and Amazon Redshift is a data warehousing service.

• Question 166:

  A company needs to automatically protect its Amazon EC2 instances from distributed denial of service (DDoS) attacks. Which AWS service or tool will provide this protection?

  A. Network access control list (ACL)
  B. AWS Shield
  C. Security group
  D. Amazon GuardDuty
  B. AWS Shield

  ---

  Explanation

• Question 167:

  A food delivery company needs to block users in certain countries from accessing its website.

  Which AWS service should the company use to meet this requirement?

  A. AWS WAF
  B. AWS Control Tower
  C. Amazon Fraud Detector
  D. Amazon Pinpoint
  A. AWS WAF

  ---

  Explanation

• Question 168:

  Which of the following is a way to use Amazon EC2 Auto Scaling groups to scale capacity in the AWS Cloud?

  A. Scale the number of EC2 instances in or out automatically, based on demand.
  B. Use serverless EC2 instances.
  C. Scale the size of EC2 instances up or down automatically, based on demand.
  D. Transfer unused CPU resources between EC2 instances.
  A. Scale the number of EC2 instances in or out automatically, based on demand.

  ---

  Explanation

• Question 169:

  Which AWS services can be used to store files? (Select TWO.)

  A. Amazon S3
  B. AWS Lambda
  C. Amazon Elastic Block Store (Amazon EBS)
  D. Amazon SageMaker
  E. AWS Storage Gateway
  A. Amazon S3
  C. Amazon Elastic Block Store (Amazon EBS)

  ---

  Explanation

  Amazon S3 and Amazon EBS are two AWS services that can be used to store files . Amazon S3 is an object storage service that offers high scalability, durability, availability, and performance. Amazon EBS is a block storage service that provides persistent and low-latency storage volumes for Amazon EC2 instances. AWS Lambda, Amazon SageMaker, and AWS Storage Gateway are other AWS services that have different purposes, such as serverless computing, machine learning, and hybrid cloud storage .

• Question 170:

  A company wants to use an AWS networking solution that can act as a centralized gateway between multiple VPCs and on-premises networks. Which AWS service or feature will meet this requirement?

  A. Gateway VPC endpoint
  B. AWS Direct Connect
  C. AWS Transit Gateway
  D. AWS PrivateLink
  C. AWS Transit Gateway

  ---

  Explanation

  AWS Transit Gateway serves as a central hub that enables connectivity between multiple VPCs and on-premises networks. It simplifies network architecture and management by acting as a centralized gateway for traffic flowing between all connected networks. Other options, such as Gateway VPC Endpoints and AWS PrivateLink, do not provide the centralized, scalable connectivity that Transit Gateway offers across multiple VPCs and on-premises environments.