Amazon Amazon Certifications CLF-C02 Questions & Answers

• Question 301:

  A company wants to build a new web application by using AWS services. The application must meet the on-demand load for periods of heavy activity.

  Which AWS services or resources provide the necessary workload adjustments to meet these requirements? (Select TWO.)

  A. Amazon Machine Image (AMI)

  B. Amazon EC2 Auto Scaling

  C. Amazon EC2 instance

  D. AWS Lambda

  E. EC2 Image Builder

  Correct Answer: BD

  Amazon EC2 Auto Scaling helps you ensure that you have the correct number of Amazon EC2 instances available to handle the load for your application. You create collections of EC2 instances, called Auto Scaling groups. You can specify the minimum number of instances in each Auto Scaling group, and Amazon EC2 Auto Scaling ensures that your group never goes below this size. You can specify the maximum number of instances in each Auto Scaling group, and Amazon EC2 Auto Scaling ensures that your group never goes above this size4. AWS Lambda lets you run code without provisioning or managing servers. You pay only for the compute time you consume. With Lambda, you can run code for virtually any type of application or backend service - all with zero administration. Just upload your code and Lambda takes care of everything required to run and scale your code with high availability. You can set up your code to automatically trigger from other AWS services or call it directly from any web or mobile app.

• Question 302:

  A company needs to categorize and track AWS usage cost based on business categories.

  Which AWS service or feature should the company use to meet these requirements?

  A. Cost allocation tags

  B. AWS Organizations

  C. AWS Security Hub D. AWS Cost and Usage Report

  Correct Answer: A

  The AWS service or feature that the company should use to categorize and track AWS usage cost based on business categories is cost allocation tags. Cost allocation tags are key-value pairs that users can attach to AWS resources to organize and track their AWS costs. Users can use cost allocation tags to filter and group their AWS costs by categories such as project, department, environment, or application. Users can also use cost allocation tags to generate detailed billing reports that show the costs associated with each tag3. AWS Organizations, AWS Security Hub, and AWS Cost and Usage Report are other AWS services or features that can help users with different aspects of their AWS usage, such as managing multiple accounts, monitoring security issues, or analyzing billing data, but they do not enable users to categorize and track AWS costs based on business categories.

• Question 303:

  Which AWS service is a continuous delivery and deployment solution?

  A. AWSAppSync

  B. AWS CodePipeline

  C. AWS Cloud9

  D. AWS CodeCommit

  Correct Answer: B

  AWS CodePipeline is a continuous delivery and deployment service that automates the release process of software applications across different stages, such as source code, build, test, and deploy2. AWSAppSync, AWS Cloud9, and AWS CodeCommit are other AWS services related to application development, but they do not provide continuous delivery and deployment solutions34 .

• Question 304:

  Which AWS service should be used when a company needs to provide its remote employees with virtual desktops?

  A. Amazon Identity and Access Management (IAM)

  B. AWS Directory Service

  C. AWS IAM Identity Center (AWS Single Sign-On)

  D. Amazon Workspaces

  Correct Answer: D

  The AWS service that should be used when a company needs to provide its remote employees with virtual desktops is Amazon WorkSpaces. Amazon WorkSpaces is a fully managed, secure desktop-as-a-service (DaaS) solution that runs on AWS. Amazon WorkSpaces allows users to provision cloud-based virtual desktops and provide their end users access to the documents, applications, and resources they need from any supported device, including Windows and Mac computers, Chromebooks, iPads, Fire tablets, and Android tablets4. Amazon Identity and Access Management (IAM), AWS Directory Service, and AWS IAM Identity Center (AWS Single Sign-On) are other AWS services related to identity and access management, but they do not provide virtual desktops.

• Question 305:

  Which option is an AWS Cloud Adoption Framework (AWS CAF) foundational capability for the operations perspective?

  A. Performance and capacity management

  B. Application portfolio management

  C. Identity and access management

  D. Product management

  Correct Answer: C

  Identity and access management is one of the foundational capabilities for the operations perspective of the AWS Cloud Adoption Framework (AWS CAF). It involves managing the identities, roles, permissions, and credentials of users and systems that interact with AWS resources. Performance and capacity management is a capability for the platform perspective. Application portfolio management is a capability for the business perspective. Product management is a capability for the governance perspective.

• Question 306:

  A company has a large number of Linux Amazon EC2 instances across several Availability Zones in an AWS Region. Applications that run on the EC2 instances need access to a common set of files.

  Which AWS service or device should the company use to meet this requirement?

  A. AWS Backup

  B. Amazon Elastic File System (Amazon EFS)

  C. Amazon Elastic Block Store (Amazon EBS)

  D. AWS Snowball Edge Storage Optimized

  Correct Answer: B

  Amazon Elastic File System (Amazon EFS) is a service that provides a scalable and elastic file system for Linux-based workloads. It can be mounted on multiple Amazon EC2 instances across different Availability Zones within a region, allowing applications to access a common set of files1. AWS Backup is a service that provides a centralized and automated way to back up data across AWS services. Amazon Elastic Block Store (Amazon EBS) is a service that provides persistent block storage volumes for Amazon EC2 instances. AWS Snowball Edge Storage Optimized is a device that provides a petabyte-scale data transport and edge computing solution.

• Question 307:

  Which task can only an AWS account root user perform?

  A. Changing the AWS Support plan

  B. Deleting AWS resources

  C. Creating an Amazon EC2 instance key pair

  D. Configuring AWS WAF

  Correct Answer: A

  The AWS account root user is the email address that you use to sign up for AWS. The root user has complete access to all AWS services and resources in the account. The root user can perform tasks that only the root user can do, such as changing the AWS Support plan, closing the account, and restoring IAM user permissions34

• Question 308:

  Which AWS service provides this functionality?

  A. AWS IAM Identity Center (AWS Single Sign-On)

  B. AWS Systems Manager

  C. AWS Config

  D. AWS Control Tower

  Correct Answer: D

  AWS Control Tower is a service that provides an easy way to set up and govern a secure, multi-account AWS environment. It automates the creation of accounts, organizational units, policies, and best practices based on the AWS Well-Architected Framework. AWS IAM Identity Center (AWS Single Sign-On) is a service that enables users to centrally manage access to multiple AWS accounts and business applications using a single sign-on experience. AWS Systems Manager is a service that provides operational management for AWS resources and applications. AWS Config is a service that enables users to assess, audit, and evaluate the configurations of AWS resources.

• Question 309:

  A company is running its application in the AWS Cloud. The company wants to periodically review its AWS account for cost optimization opportunities.

  Which AWS service or tool can the company use to meet these requirements?

  A. AWS Cost Explorer

  B. AWS Trusted Advisor

  C. AWS Pricing Calculator

  D. AWS Budgets

  Correct Answer: A

  AWS Cost Explorer is an AWS service or tool that the company can use to periodically review its AWS account for cost optimization opportunities. AWS Cost Explorer is a tool that enables the company to visualize, understand, and manage their AWS costs and usage over time. The company can use AWS Cost Explorer to access interactive graphs and tables that show the breakdown of their costs and usage by service, region, account, tag, and more. The company can also use AWS Cost Explorer to forecast their future costs, identify trends and anomalies, and discover potential savings by using Reserved Instances or Savings Plans.

• Question 310:

  Which option is AWS responsible for under the AWS shared responsibility model?

  A. Network and firewall configuration

  B. Client-side data encryption

  C. Management of user permissions

  D. Hardware and infrastructure

  Correct Answer: D

  Hardware and infrastructure is the option that AWS is responsible for under the AWS shared responsibility model. The AWS shared responsibility model describes how AWS and customers share responsibilities for security and compliance in the cloud. AWS is responsible for security of the cloud, which means protecting the infrastructure that runs all the services offered in the AWS Cloud. This infrastructure is composed of the hardware, software, networking, and facilities that run AWS Cloud services. Customers are responsible for security in the cloud, which means taking care of the security of their own applications, data, and operating systems. This includes network and firewall configuration, client-side data encryption, management of user permissions, and more.