Amazon CLF-C02 Online Practice Questions and Exam Preparation

Amazon CLF-C02 Online Questions & Answers

• Question 171:

  Which AWS service integrates with other AWS services to provide the ability to encrypt data at rest?

  A. AWS Key Management Service (AWS KMS)
  B. AWS Certificate Manager (ACM)
  C. AWS Identity and Access Management (IAM)
  D. AWS Security Hub
  A. AWS Key Management Service (AWS KMS)

  ---

  Explanation

  AWS Key Management Service (AWS KMS) is designed to integrate with various AWS services to encrypt data at rest. It provides a secure and highly available service to create, control, and manage encryption keys used to encrypt your data. AWS Certificate Manager (ACM) is for managing SSL/TLS certificates, AWS Identity and Access Management (IAM) is for managing user access and permissions, and AWS Security Hub is for security monitoring and compliance, but none of these services provide data encryption at rest like AWS KMS.

• Question 172:

  A company needs to design a solution for the efficient use of compute resources for an enterprise workload. The company needs to make informed decisions as its technology needs evolve.

  Which pillar of the AWS Well-Architected Framework do these requirements represent?

  A. Operational excellence
  B. Performance efficiency
  C. Cost optimization
  D. Reliability
  B. Performance efficiency

  ---

  Explanation

  Performance efficiency is the pillar of the AWS Well-Architected Framework that represents the requirements of designing a solution for the efficient use of compute resources for an enterprise workload and making informed decisions as the technology needs evolve. It focuses on using the right resources and services for the workload, monitoring performance, and continuously improving the efficiency of the solution. Operational excellence is the pillar of the AWS Well-Architected Framework that represents the ability to run and monitor systems to deliver business value and to continually improve supporting processes and procedures. Cost optimization is the pillar of the AWS Well- Architected Framework that represents the ability to run systems to deliver business value at the lowest price point. Reliability is the pillar of the AWS Well-Architected Framework that represents the ability of a system to recover from infrastructure or service disruptions, dynamically acquire computing resources to meet demand, and mitigate disruptions such as misconfigurations or transient network issues.

• Question 173:

  A university receives a grant to conduct research by using AWS services. The research team needs to make sure the grant money lasts for the entire school year. The team has decided on a monthly allocation that adds up to the total grant amount.

  Which AWS service or feature will notify the team if spending exceeds the planned amount?

  A. AWS Budgets
  B. Cost Explorer
  C. Cost allocation tags
  D. Cost categories
  A. AWS Budgets

  ---

  Explanation

• Question 174:

  Which complimentary AWS service or tool creates data-driven business cases for cloud planning?

  A. Migration Evaluator
  B. AWS Billing Conductor
  C. AWS Billing Console
  D. Amazon Forecast
  A. Migration Evaluator

  ---

  Explanation

  Migration Evaluator is a cloud-based service that provides organizations with a comprehensive assessment of their current IT environment and estimates the cost savings and performance improvements that can be achieved by migrating to AWS. Migration Evaluator helps users build a data-driven business case for AWS by discovering over-provisioned on-premises instances, providing recommendations for cost- effective AWS alternatives, and analyzing existing licenses and cost comparisons of Bring Your Own License (BYOL) and License Included (LI) options

• Question 175:

  A company needs to host a highly available application in the AWS Cloud. The application runs infrequently for short periods of time.

  Which AWS service will meet these requirements with the LEAST amount of operational overhead?

  A. Amazon EC2
  B. AWS Fargate
  C. AWS Lambda
  D. Amazon Aurora
  C. AWS Lambda

  ---

  Explanation

  The AWS service that will meet the requirements of the company that needs to host a highly available application in the AWS Cloud that runs infrequently for short periods of time with the least amount of operational overhead is AWS Lambda. AWS Lambda is a serverless compute service that allows customers to run code without provisioning or managing servers. The company can use AWS Lambda to create and deploy their application as functions that are triggered by events, such as API calls, messages, or schedules. AWS Lambda automatically scales the compute resources based on the demand, and customers only pay for the compute time they consume. AWS Lambda also simplifies the management and maintenance of the application, as customers do not need to worry about the underlying infrastructure, security, or availability. Amazon EC2, AWS Fargate, and Amazon Aurora are not the best services to use for this purpose. Amazon EC2 is a service that provides scalable compute capacity in the cloud, and allows customers to launch and run virtual servers, called instances, with a variety of operating systems, configurations, and specifications. Amazon EC2 requires customers to provision and manage the instances, and pay for the instance hours they use, regardless of the application usage. AWS Fargate is a serverless compute engine for containers that allows customers to run containerized applications without managing servers or clusters. AWS Fargate requires customers to specify the amount of CPU and memory resources for each container, and pay for the resources they allocate, regardless of the application usage. Amazon Aurora is a fully managed relational database service that provides high performance, availability, and compatibility. Amazon Aurora is not a compute service, and it is not suitable for hosting an application that runs infrequently for short periods of time12

• Question 176:

  Which AWS service provides on-premises applications with low-latency access to data that is stored in the AWS Cloud?

  A. Amazon CloudFront
  B. AWS Storage Gateway
  C. AWS Backup
  D. AWS DataSync
  B. AWS Storage Gateway

  ---

  Explanation

  AWS Storage Gateway provides on-premises applications with low-latency access to data stored in AWS by caching frequently accessed data locally. It seamlessly integrates on-premises environments with cloud storage, enabling hybrid storage solutions. AWS DataSync is for data transfer, CloudFront is a content delivery network, and AWS Backup is for backup management, not low-latency access.

• Question 177:

  Which AWS service is designed to help users handle large amounts of data in a data warehouse environment?

  A. Amazon RDS
  B. Amazon DynamoDB
  C. Amazon Redshift
  D. Amazon Aurora
  C. Amazon Redshift

  ---

  Explanation

• Question 178:

  Which task can a company complete by using AWS Organizations?

  A. Track application deployment statuses globally.
  B. Remove unused and underutilized AWS resources across all accounts.
  C. Activate DDoS protection across all accounts.
  D. Share pre-purchased Amazon EC2 resources across accounts.
  B. Remove unused and underutilized AWS resources across all accounts.

  ---

  Explanation

  Using AWS Organizations, you can programmatically create new AWS accounts and allocate resources, group accounts to organize your workflows, apply policies to accounts or groups for governance, and simplify billing by using a single payment method for all of your accounts.

• Question 179:

  Which AWS service or feature gives users the ability to connect VPCs and on-premises networks to a central hub?

  A. Virtual private gateway
  B. AWS Transit Gateway
  C. Internet gateway
  D. Customer gateway
  B. AWS Transit Gateway

  ---

  Explanation

  AWS Transit Gateway is a network transit hub that customers can use to connect their Amazon VPCs and on-premises networks to a central hub. This service simplifies network management and reduces operational overhead by enabling a single gateway for managing multiple network connections. It facilitates seamless integration and routing between VPCs and on-premises networks.

  A. Virtual private gateway: Incorrect, as it is used to connect a single VPC to an on-premises network through a VPN connection.

  C. Internet gateway: Incorrect, as it provides internet access for instances in a VPC but does not connect multiple networks.

  D. Customer gateway: Incorrect, as it represents the on-premises device or software application that connects to AWS, but it does not provide a central hub.

• Question 180:

  A company wants its Amazon EC2 instances to be in different locations but share the same geographic area. The company also wants to use multiple power grids and independent networking connectivity for the EC2 instances.

  Which solution meets these requirements?

  A. Use EC2 instances in multiple edge locations in the same AWS Region.
  B. Use EC2 instances in multiple Availability Zones in the same AWS Region.
  C. Use EC2 instances in multiple Amazon Connect locations in the same AWS Region
  D. Use EC2 instances in multiple AWS Artifact locations in the same AWS Region.
  B. Use EC2 instances in multiple Availability Zones in the same AWS Region.

  ---

  Explanation

  Using multiple Availability Zones within the same AWS Region meets the requirements for having instances in different locations with independent power and networking. Availability Zones are distinct physical locations within a region, each with separate power sources and networking. Edge locations are used for content delivery, and Amazon Connect and AWS Artifact locations are not relevant to EC2 deployment and infrastructure.