Amazon Amazon Certifications CLF-C02 Questions & Answers

• Question 231:

  Which benefits can customers gain by using AWS Marketplace? (Select TWO.)

  A. Speed of business

  B. Fewer legal objections

  C. Ability to pay with credit cards

  D. No requirement for product licenses for any products

  E. Free use of all services for the first hour

  Correct Answer: AB

  AWS Marketplace is a digital catalog that offers thousands of software products and solutions from independent software vendors (ISVs) and AWS partners. Customers can use AWS Marketplace to find, buy, and deploy software on AWS.

  Some of the benefits of using AWS Marketplace are:

  Speed of business: You can quickly and easily discover and deploy software that meets your business needs, without having to go through lengthy procurement processes. You can also use AWS Marketplace to test and compare different

  solutions before making a purchase decision.

  Fewer legal objections: You can benefit from standardized contract terms and conditions that are pre-negotiated between AWS and the ISVs. This reduces the time and effort required to review and approve legal agreements.

• Question 232:

  A company wants to use guidelines from the AWS Well-Architected Framework to limit human error and facilitate consistent responses to events.

  Which of the following is a Well-Architected design principle that will meet these requirements?

  A. Use AWS CodeDeploy.

  B. Perform operations as code.

  C. Migrate workloads to a Dedicated Host.

  D. Use AWS Compute Optimizer.

  Correct Answer: B

  This is a design principle of the operational excellence pillar of the AWS Well-Architected Framework. Performing operations as code means using scripts, templates, or automation tools to perform routine tasks, such as provisioning, configuration, deployment, and monitoring. This reduces human error, increases consistency, and enables faster recovery from failures. You can learn more about the operational excellence pillar from this whitepaper or this digital course.

• Question 233:

  A company needs to set up user authentication for a new application. Users must be able to sign in directly with a user name and password, or through a third-party provider.

  Which AWS service should the company use to meet these requirements?

  A. AWS IAM Identity Center (AWS Single Sign-On)

  B. AWS Signer

  C. Amazon Cognito

  D. AWS Directory Service

  Correct Answer: C

  Amazon Cognito is a service that provides user authentication and authorization for web and mobile applications. You can use Amazon Cognito to enable users to sign in directly with a user name and password, or through a third-party provider, such as Facebook, Google, or Amazon. You can also use Amazon Cognito to manage user profiles, preferences, and security settings3

• Question 234:

  Which AWS service or feature offers security for a VPC by acting as a firewall to control traffic in and out of subnets?

  A. AWS Security Hub

  B. Security groups

  C. Network ACL

  D. AWSWAF

  Correct Answer: C

  A network access control list (network ACL) is a feature that acts as a firewall for controlling traffic in and out of one or more subnets in a virtual private cloud (VPC). Network ACLs can be configured with rules that allow or deny traffic based on the source and destination IP addresses, ports, and protocols1. AWS Security Hub is a service that provides a comprehensive view of the security posture of AWS accounts and resources2. Security groups are features that act as firewalls for controlling traffic at the instance level3. AWS WAF is a web application firewall that helps protect web applications from common web exploits4.

• Question 235:

  AWS has the ability to achieve lower pay-as-you-go pricing by aggregating usage across hundreds of thousands of users.

  This describes which advantage of the AWS Cloud?

  A. Launch globally in minutes

  B. Increase speed and agility

  C. High economies of scale

  D. No guessing about compute capacity

  Correct Answer: C

  AWS has the ability to achieve lower pay-as-you-go pricing by aggregating usage across hundreds of thousands of users. This means that AWS can leverage its massive scale and purchasing power to reduce the costs of infrastructure, hardware, software, and operations. These savings are then passed on to the customers, who only pay for the resources they use. You can learn more about the AWS pricing model from [this webpage] or [this digital course].

• Question 236:

  A company is using a central data platform to manage multiple types of data for its customers. The company wants to use AWS services to discover, transform, and visualize the data.

  Which combination of AWS services should the company use to meet these requirements? (Select TWO.)

  A. AWS Glue

  B. Amazon Elastic File System (Amazon EFS)

  C. Amazon Redshift

  D. Amazon QuickSight

  E. Amazon Quantum Ledger Database (Amazon QLDB)

  Correct Answer: AD

  AWS Glue is a serverless data integration service that makes it easier to discover, prepare, move, and integrate data from multiple sources for analytics, machine learning (ML), and application development.

  https://aws.amazon.com/glue/

  Amazon QuickSight powers data-driven organizations with unified business intelligence (BI) at hyperscale. With QuickSight, all users can meet varying analytic needs from the same source of truth through modern interactive dashboards,

  paginated reports, embedded analytics, and natural language queries.

  https://aws.amazon.com/quicksight/

• Question 237:

  A software engineer wants to launch a virtual machine (VM) and MySQL database on AWS. Which AWS service will meet these requirements with the LEAST operational effort?

  A. Amazon Elastic Container Service (Amazon ECS)

  B. AWS Elastic Beanstalk

  C. Amazon Lightsail

  D. Amazon EC2

  Correct Answer: B

  AWS Elastic Beanstalk is a service that enables you to quickly deploy and manage applications in the AWS Cloud without worrying about the infrastructure that runs those applications. You simply upload your application, and Elastic Beanstalk automatically handles the details of capacity provisioning, load balancing, scaling, and application health monitoring. Elastic Beanstalk supports several platform configurations for Java, .NET, PHP, Node.js, Python, Ruby, Go, and Docker web applications that can run on familiar servers such as Apache, Nginx, Passenger, and IIS. You can also use Elastic Beanstalk to launch a virtual machine (VM) and MySQL database on AWS with the least operational effort. Amazon Elastic Container Service (Amazon ECS) is a fully managed container orchestration service that enables you to easily run, scale, and secure Docker containerized applications on AWS. However, it requires more operational effort than Elastic Beanstalk, as you need to define your application architecture and the specifications of the containers that run it. Amazon Lightsail is an easy-to-use cloud platform that offers everything you need to build an application or website, plus a cost-effective, monthly plan. It is designed for developers who have little or no prior cloud experience and want to launch and manage applications on AWS with minimal complexity. However, it does not support MySQL databases, and it requires more operational effort than Elastic Beanstalk, as you need to configure your VM and database settings. Amazon EC2 is a web service that provides secure, resizable compute capacity in the cloud. It allows you to launch a virtual machine (VM) and MySQL database on AWS, but it requires the most operational effort, as you need to provision, monitor, and manage your EC2 instances and database.

• Question 238:

  A company wants to ensure that all of its Amazon EC2 instances have compliant operating system patches.

  Which AWS service will meet these requirements?

  A. AWS Compute Optimizer

  B. AWS Elastic Beanstalk

  C. AWS AppSync

  D. AWS Systems Manager

  Correct Answer: D

  AWS Systems Manager gives you visibility and control of your infrastructure on AWS. Systems Manager provides a unified user interface so you can view operational data from multiple AWS services and allows you to automate operational tasks across your AWS resources. You can use Systems Manager to apply OS patches, create system images, configure Windows and Linux operating systems, and execute PowerShell commands5. Systems Manager can help you ensure that all of your Amazon EC2 instances have compliant operating system patches by using the Patch Manager feature.

• Question 239:

  Which AWS service helps developers use loose coupling and reliable messaging between microservices?

  A. Elastic Load Balancing

  B. Amazon Simple Notification Service (Amazon SNS)

  C. Amazon CloudFront

  D. Amazon Simple Queue Service (Amazon SQS)

  Correct Answer: D

  Amazon Simple Queue Service (Amazon SQS) is a service that provides fully managed message queues for asynchronous communication between microservices. It helps developers use loose coupling and reliable messaging by allowing them to send, store, and receive messages between distributed components without losing them or requiring each component to be always available1. Elastic Load Balancing is a service that distributes incoming traffic across multiple targets, such as Amazon EC2 instances, containers, and IP addresses. Amazon Simple Notification Service (Amazon SNS) is a service that provides fully managed pub/sub messaging for event-driven and push-based communication between microservices. Amazon CloudFront is a service that provides a fast and secure content delivery network (CDN) for web applications.

• Question 240:

  A company is running an Amazon EC2 instance in a VPC.

  An ecommerce company is using Amazon EC2 Auto Scaling groups to manage a fleet of web servers running on Amazon EC2.

  This architecture follows which AWS Well-Architected Framework best practice?

  A. Secure the workload

  B. Decouple infrastructure components

  C. Design for failure

  D. Think parallel

  Correct Answer: C

  Design for failure is one of the best practices of the AWS Well-Architected Framework. It means that the architecture should be resilient and fault-tolerant, and able to handle failures without impacting the availability and performance of the applications. By using Amazon EC2 Auto Scaling groups, the ecommerce company can design for failure by automatically scaling the number of EC2 instances up or down based on demand or health status. Amazon EC2 Auto Scaling groups can also distribute the EC2 instances across multiple Availability Zones, which are isolated locations within an AWS Region that have independent power, cooling, and network connectivity. This way, the company can ensure that their web servers can handle traffic spikes, recover from failures, and provide a consistent user experience