Amazon CLF-C02 Online Practice Questions and Exam Preparation

Amazon CLF-C02 Online Questions & Answers

• Question 191:

  A company wants to use guidelines from the AWS Well-Architected Framework to limit human error and facilitate consistent responses to events.

  Which of the following is a Well-Architected design principle that will meet these requirements?

  A. Use AWS CodeDeploy.
  B. Perform operations as code.
  C. Migrate workloads to a Dedicated Host.
  D. Use AWS Compute Optimizer.
  B. Perform operations as code.

  ---

  Explanation

  This is a design principle of the operational excellence pillar of the AWS Well-Architected Framework. Performing operations as code means using scripts, templates, or automation tools to perform routine tasks, such as provisioning, configuration, deployment, and monitoring. This reduces human error, increases consistency, and enables faster recovery from failures. You can learn more about the operational excellence pillar from this whitepaper or this digital course.

• Question 192:

  Which design principles support the reliability pillar of the AWS Well-Architected Framework? (Select TWO.)

  A. Perform operations as code.
  B. Enable traceability.
  C. Automatically scale to meet demand.
  D. Deploy resources globally to improve response time.
  E. Automatically recover from failure.
  C. Automatically scale to meet demand.
  E. Automatically recover from failure.

  ---

  Explanation

  The design principles that support the reliability pillar of the AWS Well- Architected Framework are: automatically scale to meet demand, and automatically recover from failure. These principles help users design systems that can handle changes in load, avoid disruptions, and resume normal operations quickly. Automatically scaling to meet demand means adjusting the capacity of the system based on the current and anticipated workload, using services such as AWS Auto Scaling, Amazon EC2, and AWS Lambda. Automatically recovering from failure means detecting and resolving issues, using services such as Amazon CloudWatch, AWS CloudFormation, and AWS CloudTrail

• Question 193:

  A company wants to migrate its NFS on-premises workload to AWS.

  Which AWS Storage Gateway type should the company use to meet this requirement?

  A. Tape Gateway
  B. Volume Gateway
  C. Amazon FSx File Gateway
  D. Amazon S3 File Gateway
  D. Amazon S3 File Gateway

  ---

  Explanation

  "Amazon S3 File Gateway provides a seamless way to connect to the cloud in order to store application data files and backup images as durable objects in Amazon S3 cloud storage. Amazon S3 File Gateway offers SMB or NFS-based access to data in Amazon S3 with local caching. It can be used for on-premises data-intensive Amazon EC2-based applications that need file protocol access to S3 object storage."

  https://aws.amazon.com/storagegateway/file/s3/

• Question 194:

  A user is moving a workload from a local data center to an architecture that is distributed between the local data center and the AWS Cloud.

  Which type of migration is this?

  A. On-premises to cloud native
  B. Hybrid to cloud native
  C. On-premises to hybrid
  D. Cloud native to hybrid
  C. On-premises to hybrid

  ---

  Explanation

  C is correct because moving a workload from a local data center to an architecture that is distributed between the local data center and the AWS Cloud is an example of an on-premises to hybrid migration. A hybrid cloud is a cloud computing environment that uses a mix of on-premises, private cloud, and public cloud services with orchestration between the platforms. A is incorrect because on-premises to cloud native migration is the process of moving a workload from a local data center to an architecture that is fully hosted and managed on the AWS Cloud. B is incorrect because hybrid to cloud native migration is the process of moving a workload from an architecture that is distributed between the local data center and the AWS Cloud to an architecture that is fully hosted and managed on the AWS Cloud. D is incorrect because cloud native to hybrid migration is the process of moving a workload from an architecture that is fully hosted and managed on the AWS Cloud to an architecture that is distributed between the local data center and the AWS Cloud.

• Question 195:

  Which perspective of the AWS Cloud Adoption Framework (AWS CAF) encourages the development of well-architected, cloud-focused applications?

  A. Platform
  B. Operations
  C. Governance
  D. Security
  B. Operations

  ---

  Explanation

• Question 196:

  Which AWS service allows users to download security and compliance reports about the AWS infrastructure on demand?

  A. Amazon GuardDuty
  B. AWS Security Hub
  C. AWS Artifact
  D. AWS Shield
  C. AWS Artifact

  ---

  Explanation

• Question 197:

  A company wants to design its cloud architecture so that it can support development innovations, and continuously improve processes and procedures. This is an example of which pillar of the AWS Well-Architected Framework?

  A. Security
  B. Performance efficiency
  C. Operational excellence
  D. Reliability
  C. Operational excellence

  ---

  Explanation

• Question 198:

  Which AWS service supports user sign-up functionality and authentication to mobile and web applications?

  A. Amazon Cognito
  B. AWS Config
  C. Amazon GuardDuty
  D. AWS Systems Manager
  A. Amazon Cognito

  ---

  Explanation

  Amazon Cognito is an AWS service that provides user sign-up, sign-in, and access control to web and mobile applications. It supports authentication for different identity providers, including social identity providers (such as Google,

  Facebook, and Apple), enterprise identity providers via SAML 2.0, and its own user pools.

  Amazon Cognito offers:

  User Pools for managing user registration, authentication, and account recovery. Federated Identities for managing user access from external identity providers.

  Why other options are not suitable:

  B. AWS Config: A service for tracking resource configuration changes, not related to user authentication.

  C. Amazon GuardDuty: A threat detection service, not related to user sign-up or authentication.

  D. AWS Systems Manager: A service to manage AWS resources, but it does not provide user authentication.

  References:

  Amazon Cognito Documentation

• Question 199:

  A company wants to move its iOS application development and build activities to AWS.

  Which AWS service or resource should the company use for these activities?

  A. AWS CodeCommit
  B. Amazon EC2 M1 Mac instances
  C. AWS Amplify
  D. AWS App Runner
  B. Amazon EC2 M1 Mac instances

  ---

  Explanation

  Amazon EC2 M1 Mac instances are the AWS service or resource that the company should use for its iOS application development and build activities, as they enable users to run macOS on AWS and access a broad and growing set of AWS services. AWS CodeCommit is a service that provides a fully managed source control service that hosts secure Git-based repositories. AWS Amplify is a set of tools and services that enable developers to build full-stack web and mobile applications using AWS. AWS App Runner is a service that makes it easy for developers to quickly deploy containerized web applications and APIs. These concepts are explained in the AWS Developer Tools page4.

• Question 200:

  A company needs a graph database service that is scalable and highly available.

  Which AWS service meets these requirements?

  A. Amazon Aurora
  B. Amazon Redshift
  C. Amazon DynamoDB
  D. Amazon Neptune
  D. Amazon Neptune

  ---

  Explanation

  The AWS service that meets the requirements of providing a graph database service that is scalable and highly available is Amazon Neptune. Amazon Neptune is a fast, reliable, and fully managed graph database service that supports property graph and RDF graph models. Amazon Neptune is designed to store billions of relationships and query the graph with milliseconds latency. Amazon Neptune also offers high availability and durability by replicating six copies of the data across three Availability Zones and continuously backing up the data to Amazon S35. Amazon Aurora, Amazon Redshift, and Amazon DynamoDB are other AWS services that provide relational or non- relational database solutions, but they do not support graph database models.