Amazon CLF-C02 Online Practice Questions and Exam Preparation

Amazon CLF-C02 Online Questions & Answers

• Question 211:

  A company wants to securely store Amazon RDS database credentials and automatically rotate user passwords periodically.

  Which AWS service or capability will meet these requirements?

  A. Amazon S3
  B. AWS Systems Manager Parameter Store
  C. AWS Secrets Manager
  D. AWS CloudTrail
  C. AWS Secrets Manager

  ---

  Explanation

  AWS Secrets Manager is a service that helps you protect access to your applications, services, and IT resources. This service enables you to easily rotate, manage, and retrieve database credentials, API keys, and other secrets throughout their lifecycle1. Amazon S3 is a storage service that does not offer automatic rotation of credentials. AWS Systems Manager Parameter Store is a service that provides secure, hierarchical storage for configuration data management and secrets management2, but it does not offer automatic rotation of credentials. AWS CloudTrail is a service that enables governance, compliance, operational auditing, and risk auditing of your AWS account3, but it does not store or rotate credentials.

• Question 212:

  What is an Availability Zone?

  A. A location where users can deploy compute, storage, database, and other select AWS services where no AWS Region currently exists
  B. One or more discrete data centers with redundant power, networking, and connectivity
  C. One or more clusters of servers where new workloads can be deployed
  D. A fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to users globally
  B. One or more discrete data centers with redundant power, networking, and connectivity

  ---

  Explanation

  An Availability Zone is one or more discrete data centers with redundant power, networking, and connectivity. Availability Zones are part of the AWS global infrastructure, which consists of AWS Regions, Availability Zones, and edge locations. Availability Zones are physically separate locations within an AWS Region that are engineered to be isolated from failures and connected by low-latency, high-throughput, and highly redundant networking. Each Availability Zone contains one or more data centers that house the servers and storage devices that run AWS services. Availability Zones enable users to design and operate fault-tolerant and high-availability applications on AWS. AWS Global InfrastructureAWS Certified Cloud Practitioner - aws.amazon.com

• Question 213:

  Which of the following are characteristics of a serverless application that runs in the AWS Cloud? (Select TWO.)

  A. Users must manually configure Amazon EC2 instances.
  B. Users have a choice of operating systems.
  C. The application has built-in fault tolerance.
  D. Users can run Amazon EC2 Spot Instances.
  E. The application can scale based on demand.
  C. The application has built-in fault tolerance.
  E. The application can scale based on demand.

  ---

  Explanation

• Question 214:

  A company is moving an on-premises data center to the AWS Cloud. The company must migrate 50 petabytes of file storage data to AWS with the least possible operational overhead.

  Which AWS service or resource should the company use to meet these requirements?

  A. AWS Snowmobile
  B. AWS Snowball Edge
  C. AWS Data Exchange
  D. AWS Database Migration Service (AWS DMS)
  A. AWS Snowmobile

  ---

  Explanation

  AWS Snowmobile is a service that allows you to migrate large amounts of data to AWS using a 45-foot long ruggedized shipping container that can store up to 100 petabytes of data. AWS Snowmobile is designed for situations where you need to move massive amounts of data to the cloud in a fast, secure, and cost-effective way. AWS Snowmobile has the least possible operational overhead because it eliminates the need to buy, configure, or manage hundreds or thousands of storage devices12. AWS Snowball Edge is a service that allows you to migrate data to AWS using a physical device that can store up to 80 terabytes of data and has compute and storage capabilities to run applications on the device. AWS Snowball Edge is suitable for situations where you have limited or intermittent network connectivity, or where bandwidth costs are high. However, AWS Snowball Edge has more operational overhead than AWS Snowmobile because you need to request multiple devices and transfer your data onto them using the client. AWS Data Exchange is a service that allows you to find, subscribe to, and use third-party data in the cloud. AWS Data Exchange is not a data migration service, but rather a data marketplace that enables data providers and data consumers to exchange data sets securely and efficiently. AWS Database Migration Service (AWS DMS) is a service that helps migrate databases to AWS. AWS DMS does not migrate file storage data, but rather supports various database platforms and engines as sources and targets.

  References:

  1: AWS Snowmobile - Move Exabytes of Data to the Cloud in Weeks

  2: AWS Snowmobile - Amazon Web Services

  3: Automated Software Vulnerability Management - Amazon Inspector - AWS

  4: AWS Data Exchange - Find, subscribe to, and use third-party data in ...

  5: AWS Database Migration Service - Amazon Web Services

• Question 215:

  A company needs to provide customer service by using voice calls and web chat features.

  Which AWS service should the company use to meet these requirements?

  A. Amazon Aurora
  B. Amazon Connect
  C. Amazon WorkSpaces
  D. AWS Organizations
  B. Amazon Connect

  ---

  Explanation

• Question 216:

  A company wants its Amazon EC2 instances to operate in a highly available environment, even if there is a natural disaster in a particular geographic area.

  Which solution achieves this goal?

  A. Use EC2 instances in a single Availability Zone.
  B. Use EC2 instances in multiple AWS Regions.
  C. Use EC2 instances in multiple edge locations.
  D. Use Amazon CloudFront with the EC2 instances configured as the source.
  B. Use EC2 instances in multiple AWS Regions.

  ---

  Explanation

  To achieve high availability in the event of a natural disaster, the company should use EC2 instances in multiple AWS Regions. AWS Regions are geographically isolated areas that consist of multiple Availability Zones. Availability Zones are physically separate locations within an AWS Region that are engineered to be isolated from failures. By using EC2 instances in multiple AWS Regions, the company can ensure that its applications can continue to run even if one Region is affected by a disaster. AWS Global InfrastructureAWS Well-Architected Framework

• Question 217:

  Which capabilities are in the platform perspective of the AWS Cloud Adoption Framework (AWS CAF)? (Select TWO.)

  A. Performance and capacity management
  B. Data engineering
  C. Continuous integration and continuous delivery (CI/CD)
  D. Infrastructure protection
  E. Change and release management
  B. Data engineering
  C. Continuous integration and continuous delivery (CI/CD)

  ---

  Explanation

  These are two of the seven capabilities that are in the platform perspective of the AWS Cloud Adoption Framework (AWS CAF). The platform perspective helps you build an enterprise-grade, scalable, hybrid cloud platform, modernize existing

  workloads, and implement new cloud-native solutions. The other five capabilities are:

  Platform architecture - Establish and maintain guidelines, principles, patterns, and guardrails for your cloud environment.

  Platform engineering - Build a compliant multi-account cloud environment with enhanced security features, and packaged, reusable cloud products. Platform operations -Manage and optimize your cloud environment with automation,

  monitoring, and incident response.

  Application development - Develop and deploy cloud-native applications using modern architectures and best practices.

  Application migration - Migrate your existing applications to the cloud using proven methodologies and tools.

  Performance and capacity management, infrastructure protection, and change and release management are not capabilities of the platform perspective. They are part of the operations perspective, which helps you achieve operational

  excellence in the cloud. The operations perspective comprises six capabilities:

  Performance and capacity management - Monitor and optimize the performance and capacity of your cloud workloads.

  Infrastructure protection - Protect your cloud infrastructure from unauthorized access, malicious attacks, and data breaches.

  Change and release management - Manage changes and releases to your cloud workloads using automation and governance.

  Configuration management - Manage the configuration of your cloud resources and applications using automation and version control. Incident management - Respond to incidents affecting your cloud workloads using best practices and

  tools.

  Service continuity management - Ensure the availability and resilience of your cloud workloads using backup, recovery, and disaster recovery strategies.

• Question 218:

  A company is reviewing the design of an application that will be migrated from on premises to a single Amazon EC2 instance.

  What should the company do to make the application highly available?

  A. Provision additional EC2 instances in other Availability Zones.
  B. Configure an Application Load Balancer (ALB). Assign the EC2 instance as the ALB's target.
  C. Use an Amazon Machine Image (AMI) to create the EC2 instance.
  D. Provision the application by using an EC2 Spot Instance.
  A. Provision additional EC2 instances in other Availability Zones.

  ---

  Explanation

  Provisioning additional EC2 instances in other Availability Zones is a way to make the application highly available, as it reduces the impact of failures and increases fault tolerance. Configuring an Application Load Balancer and assigning the EC2 instance as the ALB's target is a way to distribute traffic among multiple instances, but it does not make the application highly available if there is only one instance. Using an Amazon Machine Image to create the EC2 instance is a way to launch a virtual server with a preconfigured operating system and software, but it does not make the application highly available by itself. Provisioning the application by using an EC2 Spot Instance is a way to use spare EC2 capacity at up to 90% off the On-Demand price, but it does not make the application highly available, as Spot Instances can be interrupted by EC2 with a two-minute notification.

• Question 219:

  Which of the following gives a company the ability to take advantage of tiered pricing for services across multiple AWS member accounts?

  A. AWS Organizations service control policies (SCPs)
  B. AWS Organizations consolidated billing
  C. All upfront Reserved Instances
  D. Cost Explorer utilization reports
  B. AWS Organizations consolidated billing

  ---

  Explanation

• Question 220:

  A company is operating several factories where it builds products. The company needs the ability to process data, store data, and run applications with local system interdependencies that require low latency.

  Which AWS service should the company use to meet these requirements?

  A. AWS loT Greengrass
  B. AWS Lambda
  C. AWS Outposts
  D. AWS Snowball Edge
  C. AWS Outposts

  ---

  Explanation

  AWS Outposts is a service that provides fully managed AWS infrastructure and services on premises. It allows users to run applications that require low latency and local data processing, while seamlessly connecting to the AWS Cloud for a consistent hybrid experience. AWS IoT Greengrass is a service that provides local compute, messaging, data caching, sync, and ML inference capabilities for connected devices. AWS Lambda is a service that allows users to run code without provisioning or managing servers. AWS Snowball Edge is a device that provides a petabyte-scale data transport and edge computing solution.