Amazon Amazon Certifications CLF-C02 Questions & Answers

• Question 261:

  A company's IT team is managing MySQL database server clusters. The IT team has to patch the database and take backup snapshots of the data in the clusters. The company wants to move this workload to AWS so that these tasks will be completed automatically.

  What should the company do to meet these requirements?

  A. Deploy MySQL database server clusters on Amazon EC2 instances.

  B. Use Amazon RDS with a MySQL database.

  C. Use an AWS CloudFormation template to deploy MySQL database servers on Amazon EC2 instances.

  D. Migrate all the MySQL database data to Amazon S3.

  Correct Answer: B

  Amazon RDS is a service that makes it easy to set up, operate, and scale a relational database in the cloud. Amazon RDS supports MySQL as one of the database engines. By using Amazon RDS with a MySQL database, the company can offload the tasks of patching the database and taking backup snapshots to AWS. Amazon RDS automatically patches the database software and operating system of the database instances. Amazon RDS also automatically backs up the database and retains the backups for a user-defined retention period. The company can also restore the database to any point in time within the retention period. Deploying MySQL database server clusters on Amazon EC2 instances, using an AWS CloudFormation template to deploy MySQL database servers on Amazon EC2 instances, or migrating all the MySQL database data to Amazon S3 are not the best options to meet the requirements. These options would not automate the tasks of patching the database and taking backup snapshots, and would require more operational overhead from the company3

• Question 262:

  A company is assessing its AWS Business Support plan to determine if the plan still meets the company's needs. The company is considering switching to AWS Enterprise Support.

  Which additional benefit will the company receive with AWS Enterprise Support?

  A. A full set of AWS Trusted Advisor checks

  B. Phone, email, and chat access to cloud support engineers 24 hours a day, 7 days a week

  C. A designated technical account manager (TAM) to assist in monitoring and optimization

  D. A consultative review and architecture guidance for the company's applications

  Correct Answer: C

  AWS Enterprise Support provides customers with a designated technical account manager (TAM) who is a single point of contact for all technical and operational issues. The TAM provides consultative architectural and operational guidance delivered in the context of the customer's applications and use-cases to help them achieve the greatest value from AWS. The TAM also helps customers with proactive services, such as strategic business reviews, security improvement programs, guided Well-Architected reviews, cost optimization workshops, and more1. A full set of AWS Trusted Advisor checks is not an additional benefit of AWS Enterprise Support, as it is also included in the AWS Business Support plan2. AWS Trusted Advisor is a tool that provides best practice recommendations for cost optimization, performance, security, fault tolerance, and service limits. Phone, email, and chat access to cloud support engineers 24 hours a day, 7 days a week is not an additional benefit of AWS Enterprise Support, as it is also included in the AWS Business Support plan2. Cloud support engineers can help customers with technical issues, such as troubleshooting, configuration, usage, and service features. A consultative review and architecture guidance for the company's applications is not an additional benefit of AWS Enterprise Support, as it is also included in the AWS Business Support plan2. Customers can request a consultative review from a solutions architect who will provide best practices and recommendations based on the customer's use-cases and goals.

• Question 263:

  A company needs to run some of its workloads on premises to comply with regulatory guidelines. The company wants to use the AWS Cloud to run workloads that are not required to be on premises. The company also wants to be able to use the same API calls for the on-premises workloads and the cloud workloads.

  Which AWS service or feature should the company use to meet these requirements?

  A. Dedicated Hosts

  B. AWS Outposts

  C. Availability Zones

  D. AWS Wavelength

  Correct Answer: B

  AWS Outposts is a fully managed service that extends AWS infrastructure, AWS services, APIs, and tools to virtually any datacenter, co-location space, or on- premises facility for a truly consistent hybrid experience1. AWS Outposts enables customers to run workloads on premises using the same AWS APIs, tools, and services that they use in the cloud2. Dedicated Hosts are physical servers with EC2 instance capacity fully dedicated to a customer's use3. Availability Zones are one or more discrete data centers, each with redundant power, networking, and connectivity, housed in separate facilities within an AWS Region4. AWS Wavelength is an AWS Infrastructure offering optimized for mobile edge computing applications.

• Question 264:

  Which AWS service provides threat detection by monitoring for malicious activities and unauthorized actions to protect AWS accounts, workloads, and data that is stored in Amazon S3?

  A. AWS Shield

  B. AWS Firewall Manager

  C. Amazon GuardDuty

  D. Amazon Inspector

  Correct Answer: C

  Amazon GuardDuty is a service that provides intelligent threat detection and continuous monitoring for your AWS accounts, workloads, and data. Amazon GuardDuty analyzes and processes data sources, such as VPC Flow Logs, AWS CloudTrail event logs, and DNS logs, to identify malicious activities and unauthorized actions, such as reconnaissance, instance compromise, account compromise, and data exfiltration. Amazon GuardDuty can also detect threats to your data stored in Amazon S3, such as API calls from unusual locations or disabling of preventative controls. Amazon GuardDuty generates findings that summarize the details of the detected threats and provides recommendations for remediation. AWS Shield, AWS Firewall Manager, and Amazon Inspector are not the best services to meet this requirement. AWS Shield is a service that provides protection against distributed denial of service (DDoS) attacks. AWS Firewall Manager is a service that allows you to centrally configure and manage firewall rules across your accounts and resources. Amazon Inspector is a service that assesses the security and compliance of your applications running on EC2 instances.

• Question 265:

  A company wants to migrate a database from an on-premises environment to Amazon RDS.

  After the migration is complete, which management task will the company still be responsible for?

  A. Hardware lifecycle management

  B. Application optimization

  C. Server maintenance

  D. Power, network, and cooling provisioning

  Correct Answer: B

  Amazon RDS is a managed database service that handles most of the common database administration tasks, such as hardware provisioning, server maintenance, backup and recovery, patching, scaling, and replication. However, Amazon

  RDS does not optimize the application that interacts with the database. The company is still responsible for tuning the performance, security, and availability of the application according to its business requirements and best practices12.

  References:

  What is Amazon Relational Database Service (Amazon RDS)? Perform common DBA tasks for Amazon RDS DB instances

• Question 266:

  A developer who has no AWS Cloud experience wants to use AWS technology to build a web application.

  Which AWS service should the developer use to start building the application?

  A. Amazon SageMaker

  B. AWS Lambda

  C. Amazon Lightsail

  D. Amazon Elastic Container Service (Amazon ECS)

  Correct Answer: C

  Amazon Lightsail is an easy-to-use cloud platform that offers everything you need to build an application or website, plus a cost-effective, monthly plan1. It is designed for developers who have little or no prior cloud experience and want to launch and manage applications on AWS with minimal complexity2. Amazon SageMaker is a service for building, training, and deploying machine learning models3. AWS Lambda is a service that lets you run code without provisioning or managing servers4. Amazon Elastic Container Service (Amazon ECS) is a fully managed container orchestration service.

• Question 267:

  A company wants to set AWS spending targets and track costs against those targets.

  Which AWS tool or feature should the company use to meet these requirements?

  A. AWS Cost Explorer

  B. AWS Budgets

  C. AWS Cost and Usage Report

  D. Savings Plans

  Correct Answer: B

  AWS Budgets is a tool that allows users to set AWS spending targets and track costs against those targets. Users can create budgets for various dimensions, such as service, linked account, tag, and more. Users can also receive alerts when the actual or forecasted costs exceed or are projected to exceed the budgeted amount. AWS Cost Explorer, AWS Cost and Usage Report, and Savings Plans are other AWS tools or features that can help users manage and optimize their AWS costs, but they do not enable users to set and track spending targets .

• Question 268:

  A company is expecting a short-term spike in internet traffic for its application. During the traffic increase, the application cannot be interrupted. The company also needs to minimize cost and maximize flexibility.

  A company needs to use a serverless interactive query service to analyze data in Amazon S3. The query service must support standard SQL.

  Which AWS service will meet these requirements?

  A. Amazon Redshift

  B. AWS Glue

  C. Amazon Athena

  D. Amazon Kinesis Data Streams

  Correct Answer: C

  Amazon Athena is a serverless interactive query service that makes it easy to analyze data in Amazon S3 using standard SQL. Athena is ideal for quick, ad-hoc querying but it can also handle complex analysis, including large joins, window functions, and arrays. Athena scales automatically--executing queries in parallel--so results are fast, even with large datasets and complex queries. Amazon Redshift is a fully managed, petabyte-scale data warehouse service that can run complex analytic queries against structured and semi-structured data using standard SQL. However, it is not a serverless service and requires provisioning and managing clusters of nodes. AWS Glue is a fully managed extract, transform, and load (ETL) service that makes it easy to prepare and load your data for analytics. However, it is not a query service and does not support standard SQL. Amazon Kinesis Data Streams is a service that enables you to build custom applications that process or analyze streaming data for specialized needs. However, it is not a query service and does not support standard SQL.

• Question 269:

  A company wants to minimize network latency between its Amazon EC2 instances. The EC2 instances do not need to be highly available.

  Which solution meets these requirements?

  A. Use EC2 instances in a single Availability Zone.

  B. Use Amazon CloudFront as the database for the EC2 instances.

  C. Use EC2 instances in the same edge location and the same Availability Zone.

  D. Use EC2 instances in the same edge location and the same AWS Region.

  Correct Answer: A

  Using EC2 instances in a single Availability Zone is a solution that meets the requirements of minimizing network latency between the EC2 instances and not needing high availability. An Availability Zone is a physically isolated location within an AWS Region that has its own power, cooling, and network connectivity. EC2 instances within the same Availability Zone can communicate with each other using low-latency private IP addresses. However, EC2 instances in a single Availability Zone are not highly available, because they are vulnerable to failures or disruptions that affect the Availability Zone

• Question 270:

  Which AWS service provides a single location to track the progress of application migrations?

  A. AWS Application Discovery Service

  B. AWS Application Migration Service

  C. AWS Service Catalog

  D. AWS Migration Hub

  Correct Answer: D

  AWS Migration Hub is a service that provides a single location to track the progress of application migrations across multiple AWS and partner solutions. It allows you to choose the AWS and partner migration tools that best fit your needs,

  while providing visibility into the status of migrations across your portfolio of applications1. AWS Migration Hub supports migration status updates from the following tools: AWS Application Migration Service, AWS Database Migration Service,

  CloudEndure Migration, Server Migration Service, and Migrate for Compute Engine1.

  The other options are not correct for the following reasons:

  AWS Application Discovery Service is a service that helps you plan your migration projects by automatically identifying servers, applications, and dependencies in your on-premises data centers2. It does not track the progress of application

  migrations, but rather provides information to help you plan and scope your migrations.

  AWS Application Migration Service is a service that helps you migrate and modernize applications from any source infrastructure to AWS with minimal downtime and disruption3. It is one of the migration tools that can send status updates to

  AWS Migration Hub, but it is not the service that provides a single location to track the progress of application migrations. AWS Service Catalog is a service that allows you to create and manage catalogs of IT services that are approved for

  use on AWS4. It does not track the progress of application migrations, but rather helps you manage the provisioning and governance of your IT services.

  References:

  1: What Is AWS Migration Hub? - AWS Migration Hub

  2: What Is AWS Application Discovery Service? - AWS Application Discovery Service

  3: App Migration Tool - AWS Application Migration Service - AWS

  4: What Is AWS Service Catalog? - AWS Service Catalog