Amazon Amazon Certifications CLF-C02 Questions & Answers

• Question 291:

  A company wants its AWS usage to be more sustainable. The company wants to track, measure, review, and forecast polluting emissions that result from its AWS applications.

  Which AWS service or tool can the company use to meet these requirements?

  A. AWS Health Dashboard

  B. AWS customer carbon footprint tool

  C. AWS Support Center

  D. Amazon QuickSight

  Correct Answer: B

  AWS customer carbon footprint tool is a tool that helps customers measure and manage their carbon emissions from their AWS usage. It provides data on the carbon intensity, energy consumption, and estimated emissions of AWS services across regions and time periods. It also enables customers to review and forecast their emissions, and compare them with industry benchmarks. AWS Health Dashboard is a service that provides personalized information about the health and performance of AWS services and resources. AWS Support Center is a service that provides access to AWS support resources, such as cases, forums, and documentation. Amazon QuickSight is a service that provides business intelligence and analytics for AWS data sources.

• Question 292:

  Which AWS services are supported by Savings Plans? (Select TWO.)

  A. Amazon EC2

  B. Amazon RDS

  C. Amazon SageMaker

  D. Amazon Redshift

  E. Amazon DynamoDB

  Correct Answer: AC

  The AWS services that are supported by Savings Plans are:

  Amazon EC2: Amazon EC2 is a service that provides scalable computing capacity in the AWS cloud. You can use Amazon EC2 to launch virtual servers, configure security and networking, and manage storage. Amazon EC2 is eligible for

  both Compute Savings Plans and EC2 Instance Savings Plans12. Amazon SageMaker: Amazon SageMaker is a service that helps you build and deploy machine learning models. You can use Amazon SageMaker to access Jupyter

  notebooks, use common machine learning algorithms, train and tune models, and deploy them to a hosted environment. Amazon SageMaker is eligible for SageMaker Savings Plans13.

  The other options are not supported by Savings Plans. Amazon RDS, Amazon Redshift, and Amazon DynamoDB are database services that are eligible for Reserved Instances, but not Savings Plans4.

• Question 293:

  A company wants to migrate its workloads to AWS, but it lacks expertise in AWS Cloud computing.

  Which AWS service or feature will help the company with its migration?

  A. AWS Trusted Advisor

  B. AWS Consulting Partners

  C. AWS Artifacts

  D. AWS Managed Services

  Correct Answer: D

  AWS Managed Services is a service that provides operational management for AWS infrastructure and applications. It helps users migrate their workloads to AWS and provides ongoing support, security, compliance, and automation. AWS Trusted Advisor is a service that provides best practices and recommendations for cost optimization, performance, security, and fault tolerance. AWS Consulting Partners are professional services firms that help customers design, architect, build, migrate, and manage their workloads and applications on AWS. AWS Artifacts is a service that provides on-demand access to AWS compliance reports and select online agreements.

• Question 294:

  A company has designed its AWS Cloud infrastructure to run its workloads effectively. The company also has protocols in place to continuously improve supporting processes.

  Which pillar of the AWS Well-Architected Framework does this scenario represent?

  A. Security

  B. Performance efficiency

  C. Cost optimization

  D. Operational excellence

  Correct Answer: D

  The scenario represents the operational excellence pillar of the AWS Well- Architected Framework, which focuses on running and monitoring systems to deliver business value and continually improve supporting processes and procedures1. Security, performance efficiency, cost optimization, and reliability are the other four pillars of the framework1.

• Question 295:

  A company needs a graph database service that is scalable and highly available.

  Which AWS service meets these requirements?

  A. Amazon Aurora

  B. Amazon Redshift

  C. Amazon DynamoDB

  D. Amazon Neptune

  Correct Answer: D

  The AWS service that meets the requirements of providing a graph database service that is scalable and highly available is Amazon Neptune. Amazon Neptune is a fast, reliable, and fully managed graph database service that supports property graph and RDF graph models. Amazon Neptune is designed to store billions of relationships and query the graph with milliseconds latency. Amazon Neptune also offers high availability and durability by replicating six copies of the data across three Availability Zones and continuously backing up the data to Amazon S35. Amazon Aurora, Amazon Redshift, and Amazon DynamoDB are other AWS services that provide relational or non- relational database solutions, but they do not support graph database models.

• Question 296:

  Which VPC component provides a layer of security at the subnet level?

  A. Security groups

  B. Network ACLs

  C. NAT gateways

  D. Route tables

  Correct Answer: B

  Network ACLs are a feature that provide a layer of security at the subnet level by acting as a firewall to control traffic in and out of one or more subnets. Network ACLs can be configured with rules that allow or deny traffic based on the source and destination IP addresses, ports, and protocols5. Security groups are a feature that provide a layer of security at the instance level by acting as a firewall to control traffic to and from one or more instances. Security groups can be configured with rules that allow or deny traffic based on the source and destination IP addresses, ports, protocols, and security groups. NAT gateways are a feature that enable instances in a private subnet to connect to the internet or other AWS services, but prevent the internet from initiating a connection with those instances. Route tables are a feature that determine where network traffic from a subnet or gateway is directed.

• Question 297:

  According to the AWS shared responsibility model, which task is the customer's responsibility?

  A. Maintaining the infrastructure needed to run AWS Lambda

  B. Updating the operating system of Amazon DynamoDB instances

  C. Maintaining Amazon S3 infrastructure

  D. Updating the guest operating system on Amazon EC2 instances

  Correct Answer: D

  The AWS shared responsibility model describes the division of responsibilities between AWS and the customer for security and compliance. AWS is responsible for the security of the cloud, which includes the hardware, software, networking, and facilities that run AWS services. The customer is responsible for security in the cloud, which includes the customer data, applications, operating systems, and network and firewall configurations. Therefore, updating the guest operating system on Amazon EC2 instances is the customer's responsibility2

• Question 298:

  Which task must a user perform by using the AWS account root user credentials?

  A. Make changes to AWS production resources.

  B. Change AWS Support plans.

  C. Access AWS Cost and Usage Reports.

  D. Grant auditors' access to an AWS account for a compliance audit.

  Correct Answer: B

  Changing AWS Support plans is a task that must be performed by using the AWS account root user credentials. The root user is the email address that you used to sign up for AWS. It has complete access to all AWS services and resources in the account. You should use the root user only to perform a few account and service management tasks, such as changing AWS Support plans, closing the account, or changing the account name or email address. Making changes to AWS production resources, accessing AWS Cost and Usage Reports, and granting auditors access to an AWS account for a compliance audit are tasks that can be performed by using IAM users or roles, which are entities that you create in AWS to delegate permissions to access AWS services and resources.

• Question 299:

  Amazon Elastic File System (Amazon EFS) and Amazon FSx offer which type of storage?

  A. File storage

  B. Object storage

  C. Block storage

  D. Instance store

  Correct Answer: A

  Amazon Elastic File System (Amazon EFS) and Amazon FSx are AWS services that offer file storage. File storage is a type of storage that organizes data into files and folders that can be accessed and shared over a network. File storage is suitable for applications that require shared access to data, such as content management, media processing, and web serving. Amazon EFS provides a simple, scalable, and fully managed elastic file system that can be used with AWS Cloud services and on-premises resources. Amazon FSx provides fully managed third-party file systems, such as Windows File Server and Lustre, with native compatibility and high performance12

• Question 300:

  A company needs to securely store important credentials that an application uses to connect users to a database.

  Which AWS service can meet this requirement with the MINIMAL amount of operational overhead?

  A. AWS Key Management Service (AWS KMS)

  B. AWS Config

  C. AWS Secrets Manager

  D. Amazon GuardDuty

  Correct Answer: C

  AWS Secrets Manager is a service that helps you protect secrets needed to access your applications, services, and IT resources. You can use AWS Secrets Manager to store, rotate, and retrieve database credentials, API keys, and other secrets throughout their lifecycle. AWS Secrets Manager eliminates the need to hardcode sensitive information in plain text, and reduces the risk of unauthorized access or leakage. AWS Secrets Manager also integrates with other AWS services, such as AWS Lambda, Amazon RDS, and AWS CloudFormation, to simplify the management of secrets across your environment5