Amazon CLF-C02 Online Practice Questions and Exam Preparation

Amazon CLF-C02 Online Questions & Answers

• Question 281:

  Which Amazon EC2 instan ce pricing model can provide discounts of up to 90%?

  A. Reserved Instances
  B. On-Demand
  C. Dedicated Hosts
  D. Spot Instances
  D. Spot Instances

  ---

  Explanation

  Spot Instances are Amazon EC2 instances that are available at a discounted price compared to On-Demand pricing. Spot Instances use spare EC2 capacity that is not being used by other customers, and the price fluctuates based on supply and demand. Customers can request Spot Instances for their applications and specify the maximum price they are willing to pay per hour. If the Spot price is lower than the customer's bid, the Spot Instance is launched and the customer pays the current Spot price. However, if the Spot price rises above the customer's bid, the Spot Instance is terminated by AWS and the customer is charged for the partial hour of usage. Therefore, Spot Instances can provide discounts of up to 90% or more, but they are not suitable for applications that require continuous or predictable availability. Spot Instances are recommended for applications that are flexible, fault-tolerant, or have low priority, such as batch processing, data analysis, or testing and development.

• Question 282:

  A company needs to store infrequently used data for data archives and long-term backups.

  Which AWS service or storage class will meet these requirements MOST cost-effectively?

  A. Amazon FSx for Lustre
  B. Amazon Elastic Block Store (Amazon EBS)
  C. Amazon Elastic File System (Amazon EFS)
  D. Amazon S3 Glacier Flexible Retrieval
  D. Amazon S3 Glacier Flexible Retrieval

  ---

  Explanation

  Amazon S3 Glacier Flexible Retrieval is optimized for storing infrequently accessed data at a very low cost, making it suitable for data archiving and long-term backups. It provides flexible retrieval options for archived data. Other services like FSx for Lustre, EBS, and EFS are more suited for frequently accessed data and higher- performance use cases, not archival storage.

• Question 283:

  A company wants a key-value NoSQL database that is fully managed and serverless.

  Which AWS service will meet these requirements?

  A. Amazon DynamoDB
  B. Amazon RDS
  C. Amazon Aurora
  D. Amazon Memory DB for Redis
  A. Amazon DynamoDB

  ---

  Explanation

  Amazon DynamoDB is a key-value and document database that delivers single-digit millisecond performance at any scale. It is a fully managed, serverless database that does not require provisioning, patching, or backup. It offers built-in security, backup and restore, and in-memory caching3. Amazon RDS is a relational database service that makes it easy to set up, operate, and scale a relational database in the cloud. It provides cost-efficient and resizable capacity while automating time-consuming administration tasks such as hardware provisioning, database setup, patching, and backups. However, it is not a key-value NoSQL database, and it is not serverless, as it requires you to choose an instance type and size4. Amazon Aurora is a MySQL and PostgreSQL-compatible relational database built for the cloud, that combines the performance and availability of traditional enterprise databases with the simplicity and cost- effectiveness of open source databases. However, it is also not a key-value NoSQL database, and it is not serverless, as it requires you to choose an instance type and size. Amazon MemoryDB for Redis is a Redis-compatible, durable, in-memory database service that delivers ultra-fast performance and multi-AZ reliability for the most demanding applications. However, it is also not a key-value NoSQL database, and it is not serverless, as it requires you to choose a node type and size.

• Question 284:

  Which perspective of the AWS Cloud Adoption Framework (AWS CAF) connects technology and business?

  A. Operations
  B. People
  C. Security
  D. Governance
  D. Governance

  ---

  Explanation

  The perspective of the AWS Cloud Adoption Framework (AWS CAF) that connects technology and business is governance. The governance perspective focuses on the alignment of the IT strategy and processes with the business strategy and goals, as well as the management of the IT budget, risk, and compliance. The governance perspective capabilities are portfolio management, business performance management, and IT governance. The governance perspective helps organizations ensure that their cloud adoption delivers the expected business value and outcomes, and that their cloud solutions are secure, reliable, and compliant. Operations, people, and security are other perspectives of the AWS CAF, but they do not directly connect technology and business. The operations perspective focuses on the management and monitoring of the cloud resources and applications, as well as the automation and optimization of the operational processes. The people perspective focuses on the development and empowerment of the human resources, as well as the transformation of the organizational culture and structure. The security perspective focuses on the protection of the information assets and systems in the cloud, as well as the implementation of the security policies and controls.

• Question 285:

  Which option is a benefit of the economies of scale based on the advantages of cloud computing?

  A. The ability to trade variable expense for fixed expense
  B. Increased speed and agility
  C. Lower variable costs over fixed costs
  D. Increased operational costs across data centers
  C. Lower variable costs over fixed costs

  ---

  Explanation

  Economies of scale in cloud computing mean that cloud providers like AWS can purchase infrastructure at large scale and pass the cost savings on to customers. This results in lower variable costs for users compared to the high fixed costs of owning and operating their own data centers. Instead of investing heavily up front in hardware and facilities, customers pay only for what they use, and at a reduced rate due to the provider's scale.

• Question 286:

  A company is hosting a web application on Amazon EC2 instances. The company wants to implement custom conditions to filter and control inbound web traffic.

  Which AWS service will meet these requirements?

  A. Amazon GuardDuty
  B. AWS WAF
  C. Amazon Macie
  D. AWS Shield
  B. AWS WAF

  ---

  Explanation

  The AWS service that will meet the requirements of the company that is hosting a web application on Amazon EC2 instances and wants to implement custom conditions to filter and control inbound web traffic is AWS WAF. AWS WAF is a web application firewall that helps protect web applications from common web exploits that could affect availability, compromise security, or consume excessive resources. The company can use AWS WAF to create custom rules that block malicious requests that match certain patterns, such as SQL injection or cross-site scripting. AWS WAF can be applied to web applications that are behind an Application Load Balancer, Amazon CloudFront, or Amazon API Gateway. Amazon GuardDuty, Amazon Macie, and AWS Shield are not the best services to use for this purpose. Amazon GuardDuty is a threat detection service that monitors for malicious activity and unauthorized behavior across the AWS accounts and resources. Amazon Macie is a data security and data privacy service that uses machine learning and pattern matching to discover, classify, and protect sensitive data stored in Amazon S3. AWS Shield is a managed distributed denial of service (DDoS) protection service that safeguards web applications running on AWS. These services are more useful for detecting and preventing different types of threats and attacks, rather than filtering and controlling inbound web traffic based on custom conditions.

• Question 287:

  A company uses AWS Organizations. The company wants to apply security best practices from the AWS Well-Architected Framework to all of its AWS accounts.

  Which AWS service will meet these requirements?

  A. Amazon Macie
  B. Amazon Detective
  C. AWS Control Tower
  D. AWS Secrets Manager
  C. AWS Control Tower

  ---

  Explanation

  AWS Control Tower is the easiest way to set up and govern a secure, multi- account AWS environment based on best practices established through AWS's experience working with thousands of enterprises as they move to the cloud. With AWS Control Tower, builders can provision new AWS accounts in a few clicks, while you have peace of mind knowing your accounts conform to your organization's policies. AWS Control Tower automates the setup of a baseline environment, or landing zone, that is a secure, well- architected multi-account AWS environment1. AWS Control Tower helps you apply security best practices from the AWS Well-Architected Framework to all of your AWS accounts.

• Question 288:

  A company wants to migrate its on-premises Microsoft SQL Server database server to the AWS Cloud. The company has decided to use Amazon EC2 instances to run this database. Which of the following is the company responsible for managing, according to the AWS shared responsibility model?

  A. EC2 hypervisor
  B. Security patching of the guest operating system
  C. Network connectivity of the host server
  D. Uptime service level agreement (SLA) for the EC2 instances
  B. Security patching of the guest operating system

  ---

  Explanation

• Question 289:

  A company needs to have the ability to set up infrastructure for new applications in minutes.

  Which advantage of cloud computing will help the company meet this requirement?

  A. Trade xed expense for variable expense
  B. Go global in minutes
  C. Increase speed and agility
  D. Stop guessing capacity
  C. Increase speed and agility

  ---

  Explanation

• Question 290:

  A company plans to migrate complex legacy systems to AWS. The company will use several operating systems multiple databases and multiple programming languages. Which benefit of the AWS Cloud does this scenario represent?

  A. Scalability
  B. Flexibility
  C. Reliability
  D. Security
  C. Reliability

  ---

  Explanation