Amazon CLF-C02 Online Practice Questions and Exam Preparation

Amazon CLF-C02 Online Questions & Answers

• Question 221:

  Which AWS service or feature enables users to get one bill and easily track charges for multiple AWS accounts?

  A. AWS Organizations
  B. Cost Explorer
  C. AWS Trusted Advisor
  D. AWS Management Console
  A. AWS Organizations

  ---

  Explanation

  You can use the consolidated billing feature in AWS Organizations to consolidate billing and payment for multiple AWS accounts or multiple Amazon Internet Services Pvt. Ltd (AISPL) accounts. Every organization in AWS Organizations has a management account that pays the charges of all the member accounts.

• Question 222:

  A company needs to identify the last time that a specific user accessed the AWS Management Console.

  Which AWS service will provide this information?

  A. Amazon Cognito
  B. AWS CloudTrail
  C. Amazon Inspector
  D. Amazon GuardDuty
  B. AWS CloudTrail

  ---

  Explanation

  AWS CloudTrail is the service that will provide the information about the last time that a specific user accessed the AWS Management Console. AWS CloudTrail is a service that records the API calls and events made by or on behalf of your AWS account. You can use AWS CloudTrail to view, search, and download the history of AWS console sign-in events, which include the user name, date, time, source IP address, and other details of the sign-in activity. Amazon Cognito, Amazon Inspector, and Amazon GuardDuty are not services that will provide this information. Amazon Cognito is a service that provides user authentication and authorization for web and mobile applications. Amazon Inspector is a service that assesses the security and compliance of your applications running on AWS. Amazon GuardDuty is a service that monitors your AWS account and workloads for malicious or unauthorized activity.

• Question 223:

  Which company needs to apply security rules to a subnet for Amazon EC2 instances.

  Which AWS service or feature provides this functionality?

  A. Network ACLs
  B. Security groups
  C. AWS Certificate Manager (ACM)
  D. AWS Config
  A. Network ACLs

  ---

  Explanation

  Network ACLs (network access control lists) are an AWS service or feature that provides the functionality of applying security rules to a subnet for EC2 instances. A subnet is a logical partition of an IP network within a VPC (virtual private cloud). A VPC is a logically isolated section of the AWS Cloud where the company can launch AWS resources in a virtual network that they define. A network ACL is a virtual firewall that controls the inbound and outbound traffic for one or more subnets. The company can use network ACLs to allow or deny traffic based on protocol, port, or source and destination IP address. Network ACLs are stateless, meaning that they do not track the traffic that flows through them. Therefore, the company must create rules for both inbound and outbound traffic4

• Question 224:

  Which type of workload should a company run on Amazon EC2 Spot Instances?

  A. A steady-state workload that requires a particular EC2 instance Configuration for a long period of time
  B. A workload that can be interrupted and can control costs
  C. A steady-state workload that does not require a long-term commitment
  D. A workload that cannot be interrupted and can control costs
  B. A workload that can be interrupted and can control costs

  ---

  Explanation

• Question 225:

  Which task is the responsibility of AWS, according to the AWS shared responsibility model?

  A. Apply guest operating system patches to Amazon EC2 instances.
  B. Provide monitoring of human resources information management (HRIM) systems.
  C. Perform automated backups of Amazon RDS instances.
  D. Optimize the costs of running AWS services.
  C. Perform automated backups of Amazon RDS instances.

  ---

  Explanation

• Question 226:

  A company wants to set up a secure network connection from on premises to the AWS Cloud within 1 week. Which solution will meet these requirements?

  A. AWS Direct Connect
  B. Amazon VPC
  C. AWS Site-to-Site VPN
  D. Edge location
  C. AWS Site-to-Site VPN

  ---

  Explanation

• Question 227:

  How does the AWS Cloud help companies build agility into their processes and cloud infrastructure?

  A. Companies can avoid provisioning too much capacity when they do not know how much capacity is required.
  B. Companies can expand into new geographic regions.
  C. Companies can access a range of technologies to experiment and innovate quickly.
  D. Companies can pay for IT resources only when they use the resources.
  C. Companies can access a range of technologies to experiment and innovate quickly.

  ---

  Explanation

• Question 228:

  Which of the following is a benefit that AWS Professional Services provides?

  A. Management of the ongoing security of user data
  B. Advisory solutions for AWS adoption
  C. Technical support 24 hours a day, 7 days a week
  D. Monitoring of monthly billing costs in AWS accounts
  B. Advisory solutions for AWS adoption

  ---

  Explanation

  AWS Professional Services is a team of experts that help customers achieve their desired outcomes using the AWS Cloud. One of the benefits that AWS Professional Services provides is advisory solutions for AWS adoption, which include guidance on cloud strategy, architecture, migration, and innovation2. Management of the ongoing security of user data, technical support 24 hours a day, 7 days a week, and monitoring of monthly billing costs in AWS accounts are not benefits that AWS Professional Services provides, as they are either the responsibility of the customer or the features of other AWS services or support plans3

• Question 229:

  A company wants to use Amazon EC2 instances to run a stateless and restartable process after business hours.

  Which AWS service provides DNS resolution?

  A. Amazon CloudFront
  B. Amazon VPC
  C. Amazon Route 53
  D. AWS Direct Connect
  C. Amazon Route 53

  ---

  Explanation

  Amazon Route 53 is the AWS service that provides DNS resolution. DNS (Domain Name System) is a service that translates domain names into IP addresses. Amazon Route 53 is a highly available and scalable cloud DNS service that offers domain name registration, DNS routing, and health checking. Amazon Route 53 can route the traffic to various AWS services, such as Amazon EC2, Amazon S3, and Amazon CloudFront. Amazon Route 53 can also integrate with other AWS services, such as AWS Certificate Manager, AWS Shield, and AWS WAF. For more information, see [What is Amazon Route 53?] and [Amazon Route 53 Features].

• Question 230:

  Which AWS service or tool offers consolidated billing?

  A. AWS Artifact
  B. AWS Budgets
  C. AWS Organizations
  D. AWS Trusted Advisor
  C. AWS Organizations

  ---

  Explanation

  AWS Organizations is a service that enables you to consolidate multiple AWS accounts into an organization that you create and centrally manage. With AWS Organizations, you can create a single payment method for all the AWS accounts in your organization through consolidated billing. Consolidated billing enables you to see a combined view of AWS charges incurred by all accounts in your organization, as well as get a detailed cost report for each individual AWS account associated with your organization. AWS Artifact is a service that provides on-demand access to AWS' security and compliance reports and select online agreements. AWS Budgets is a service that enables you to plan your service usage, service costs, and instance reservations. AWS Trusted Advisor is a service that provides real-time guidance to help you provision your resources following AWS best practices. None of these services or tools offer consolidated billing.