Amazon Amazon Certifications CLF-C02 Questions & Answers

• Question 221:

  Which AWS service uses AWS Compute Optimizer to provide sizing recommendations based on workload metrics?

  A. Amazon EC2

  B. Amazon RDS

  C. Amazon Lightsail

  D. AWS Step Functions

  Correct Answer: A

  Amazon EC2 is a web service that provides secure, resizable compute capacity in the cloud. It allows you to launch virtual servers, called instances, with different configurations of CPU, memory, storage, and networking resources. AWS

  Compute Optimizer analyzes the specifications and utilization metrics of your Amazon EC2 instances and generates recommendations for optimal instance types that can reduce costs and improve performance. You can view the

  recommendations on the AWS Compute Optimizer console or the Amazon EC2 console12.

  Amazon RDS, Amazon Lightsail, and AWS Step Functions are not supported by AWS Compute Optimizer. Amazon RDS is a managed relational database service that lets you set up, operate, and scale a relational database in the cloud.

  Amazon Lightsail is an easy- to-use cloud platform that offers everything you need to build an application or website, plus a cost-effective, monthly plan. AWS Step Functions lets you coordinate multiple AWS services into serverless

  workflows so you can build and update apps quickly3 .

• Question 222:

  Which of the following is a benefit of operating in the AWS Cloud?

  A. The ability to migrate on-premises network devices to the AWS Cloud

  B. The ability to expand compute, storage, and memory when needed

  C. The ability to host custom hardware in the AWS Cloud

  D. The ability to customize the underlying hypervisor layer for Amazon EC2

  Correct Answer: B

  One of the benefits of operating in the AWS Cloud is the ability to expand compute, storage, and memory when needed, which enables users to scale their applications and resources up or down based on demand. This also helps users optimize their costs and performance. The ability to migrate on-premises network devices to the AWS Cloud, the ability to host custom hardware in the AWS Cloud, and the ability to customize the underlying hypervisor layer for Amazon EC2 are not benefits of operating in the AWS Cloud, as they are either not possible or not recommended by AWS .

• Question 223:

  A company runs a MySQL database in its on-premises data center. The company wants to run a copy of this database in the AWS Cloud.

  Which AWS service would support this workload?

  A. Amazon RDS

  B. Amazon Neptune

  C. Amazon ElastiCache for Redis

  D. Amazon Quantum Ledger Database (Amazon QLDB)

  Correct Answer: A

  Amazon Relational Database Service (Amazon RDS) is a web service that makes it easier to set up, operate, and scale a relational database in the cloud. It provides cost-efficient and resizable capacity, while automating time-consuming administration tasks such as hardware provisioning, database setup, patching, and backups. Amazon RDS supports six popular database engines: Amazon Aurora, PostgreSQL, MySQL, MariaDB, Oracle Database, and SQL Server. Amazon RDS can support running a copy of a MySQL database in the AWS Cloud, as it offers compatibility, scalability, and availability features.

• Question 224:

  Which AWS service or feature enables users to encrypt data at rest in Amazon S3?

  A. IAM policies

  B. Server-side encryption

  C. Amazon GuardDuty

  D. Client-side encryption

  Correct Answer: B

  Server-side encryption is an encryption option that Amazon S3 provides to encrypt data at rest in Amazon S3. With server-side encryption, Amazon S3 encrypts an object before saving it to disk in its data centers and decrypts it when you download the objects. You have three server-side encryption options to choose from: SSE-S3, SSE-C, and SSE-KMS. SSE-S3 uses keys that are managed by Amazon S3. SSE-C allows you to manage your own encryption keys. SSE-KMS uses keys that are managed by AWS Key Management Service (AWS KMS)5.

• Question 225:

  A company wants to set up a high-speed connection between its data center and its applications that run on AWS. The company must not transfer data over the internet.

  Which action should the company take to meet these requirements?

  A. Transfer data to AWS by using AWS Snowball.

  B. Transfer data to AWS by using AWS Storage Gateway.

  C. Set up a VPN connection between the data center and an AWS Region.

  D. Set up an AWS Direct Connect connection between the company network and AWS.

  Correct Answer: D

  AWS Direct Connect is a cloud service solution that makes it easy to establish a dedicated network connection from a customer's premises to AWS. AWS Direct Connect does not involve the public internet, and therefore can reduce network costs, increase bandwidth throughput, and provide a more consistent network experience than internet-based connections. AWS Snowball is a petabyte-scale data transport service that uses secure devices to transfer large amounts of data into and out of the AWS Cloud. AWS Storage Gateway is a hybrid cloud storage service that gives customers on-premises access to virtually unlimited cloud storage. A VPN connection enables customers to establish a secure and private connection between their network and AWS.

• Question 226:

  A company has an application that runs periodically in an on-premises environment. The application runs for a few hours most days, but runs for 8 hours a day for a week at the end of each month.

  Which AWS service or feature should be used to host the application in the AWS Cloud?

  A. Amazon EC2 Standard Reserved Instances

  B. Amazon EC2 On-Demand Instances

  C. AWS Wavelength

  D. Application Load Balancer

  Correct Answer: B

  Amazon EC2 On-Demand Instances are instances that let you pay for compute capacity by the hour or second (minimum of 60 seconds) with no long-term commitments. This frees you from the costs and complexities of planning, purchasing, and maintaining hardware and transforms what are commonly large fixed costs into much smaller variable costs. On-Demand Instances are suitable for applications with short-term, irregular, or unpredictable workloads that cannot be interrupted, such as periodic applications that run for a few hours most days, but run for 8 hours a day for a week at the end of each month2. Amazon EC2 Standard Reserved Instances are instances that provide you with a significant discount (up to 75%) compared to On-Demand Instance pricing. In exchange, you select a term and make an upfront payment to reserve a certain amount of compute capacity for that term. Reserved Instances are suitable for applications with steady state or predictable usage that require reserved capacity3. AWS Wavelength is a service that enables developers to build applications that deliver ultra-low latency to mobile devices and users by deploying AWS compute and storage at the edge of the 5G network. Wavelength is suitable for applications that require single-digit millisecond latencies, such as game and live video streaming, machine learning inference at the edge, and augmented and virtual reality (AR/VR). Application Load Balancer is a service that operates at the request level (layer 7) and distributes incoming application traffic across multiple targets, such as EC2 instances, containers, Lambda functions, and IP addresses. Application Load Balancer is suitable for applications that need advanced routing capabilities, such as microservices or container-based architectures.

• Question 227:

  A company has created an AWS Cost and Usage Report and wants to visualize the report.

  Which AWS service should the company use to ingest and display this information?

  A. Amazon QuickSight

  B. Amazon Pinpoint

  C. Amazon Neptune

  D. Amazon Kinesis

  Correct Answer: A

  Amazon QuickSight is an AWS service that provides business intelligence and data visualization capabilities. Amazon QuickSight enables you to ingest, analyze, and display data from various sources, such as AWS Cost and Usage Reports, Amazon S3, Amazon Athena, Amazon Redshift, and Amazon RDS. You can use Amazon QuickSight to create interactive dashboards and charts that show insights and trends from your data. You can also share your dashboards and charts with other users or embed them into your applications.

• Question 228:

  A company wants to launch its web application in a second AWS Region. The company needs to determine which services must be regionally configured for this launch.

  Which AWS services can be configured at the Region level? (Select TWO.)

  A. Amazon EC2

  B. Amazon Route 53

  C. Amazon CloudFront

  D. AWS WAF

  E. Amazon DynamoDB

  Correct Answer: BD

  Amazon Route 53 and AWS WAF are AWS services that can be configured at the Region level. Amazon Route 53 is a highly available and scalable cloud Domain Name System (DNS) web service that lets you register domain names, route traffic to resources, and check the health of your resources. AWS WAF is a web application firewall that helps protect your web applications or APIs against common web exploits that may affect availability, compromise security, or consume excessive resources. Amazon EC2, Amazon CloudFront, and Amazon DynamoDB are AWS services that can be configured at the global level or the Availability Zone level .

• Question 229:

  A company wants to integrate natural language processing (NLP) into business intelligence (Bl) dashboards. The company wants to ask questions and receive answers with relevant visualizations.

  Which AWS service or tool will meet these requirements?

  A. Amazon Macie

  B. Amazon Rekognition

  C. Amazon QuickSight Q

  D. Amazon Lex

  Correct Answer: C

  Amazon QuickSight Q is a natural language query feature that allows users to ask questions about their data and receive answers in the form of relevant visualizations1. Amazon Macie is a data security and data privacy service that uses machine learning and pattern matching to discover and protect sensitive data in AWS2. Amazon Rekognition is a computer vision service that can analyze images and videos for faces, objects, scenes, text, and more3. Amazon Lex is a service for building conversational interfaces using voice and text4.

• Question 230:

  A company is looking for a managed machine learning (ML) service that can recommend products based on a customer's previous behaviors.

  Which AWS service meets this requirement?

  A. Amazon Personalize

  B. Amazon SageMaker

  C. Amazon Pinpoint

  D. Amazon Comprehend

  Correct Answer: A

  The AWS service that meets the requirement of providing a managed machine learning (ML) service that can recommend products based on a customer's previous behaviors is Amazon Personalize. Amazon Personalize is a fully managed service that enables developers to create personalized recommendations for customers using their own data. Amazon Personalize can automatically process and examine the data, identify what is meaningful, select the right algorithms, and train and optimize a personalized recommendation model2. Amazon SageMaker, Amazon Pinpoint, and Amazon Comprehend are other AWS services related to machine learning, but they do not provide the specific functionality of product recommendation.