Amazon CLF-C02 Online Practice Questions and Exam Preparation

Amazon CLF-C02 Online Questions & Answers

• Question 301:

  A user discovered that an Amazon EC2 instance is missing an Amazon Elastic Block Store (Amazon EBS) data volume. The user wants to determine when the EBS volume was removed.

  Which AWS service will provide this information?

  A. AWS Config
  B. AWS Trusted Advisor
  C. Amazon Timestream
  D. Amazon QuickSight
  A. AWS Config

  ---

  Explanation

  AWS Config is a service that enables you to assess, audit, and evaluate the configurations of your AWS resources. AWS Config continuously monitors and records your AWS resource configurations and allows you to automate the evaluation of recorded configurations against desired configurations. AWS Config can help you determine when an EBS volume was removed from an EC2 instance by providing a timeline of configuration changes and compliance status. AWS Trusted Advisor, Amazon Timestream, and Amazon QuickSight do not provide the same level of configuration tracking and auditing as AWS Config. Source: AWS Config

• Question 302:

  What is a customer responsibility when using AWS Lambda according to the AWS shared responsibility model?

  A. Managing the code within the Lambda function
  B. Confirming that the hardware is working in the data center
  C. Patching the operating system
  D. Shutting down Lambda functions when they are no longer in use
  A. Managing the code within the Lambda function

  ---

  Explanation

  In the AWS shared responsibility model, AWS is responsible for the infrastructure and security "of" the cloud, while customers are responsible for the security "in" the cloud. When using AWS Lambda, customers are responsible for managing the code and configuration within the Lambda function. This includes writing and updating the code, configuring the function's execution environment, and ensuring that the code complies with security best practices and is free from vulnerabilities.

• Question 303:

  Which AWS service offers a global content delivery network (CDN) that helps companies securely deliver websites, videos, applications, and APIs at high speeds with low latency?

  A. Amazon EC2
  B. Amazon CloudFront
  C. Amazon CloudWatch
  D. AWS CloudFormation
  B. Amazon CloudFront

  ---

  Explanation

  Amazon CloudFront is the AWS service that offers a global content delivery network (CDN) that helps companies securely deliver websites, videos, applications, and APIs at high speeds with low latency. Amazon CloudFront is a web service that speeds up distribution of static and dynamic web content, such as HTML, CSS, JavaScript, and image files, to users. Amazon CloudFront uses a global network of edge locations, located near users' geographic locations, to cache and serve content with high availability and performance. Amazon CloudFront also provides features such as AWS Shield for DDoS protection, AWS Certificate Manager for SSL/TLS encryption, AWS WAF for web application firewall, and AWS Lambda@Edge for customizing content delivery with serverless code. Amazon EC2, Amazon CloudWatch, and AWS CloudFormation are not services that offer a global CDN. Amazon EC2 is a service that provides scalable compute capacity in the cloud. Amazon CloudWatch is a service that provides monitoring and observability for AWS resources and applications. AWS CloudFormation is a service that provides a common language to model and provision AWS resources and their dependencies.

• Question 304:

  A company is storing data that will not be frequently accessed in the AWS Cloud. If the company needs to access the data, the data needs to be retrieved within 12 hours. The company wants a solution that is cost-effective for storage costs

  for each gigabyte.

  Which Amazon S3 storage class will meet these requirements?

  A. S3 Standard
  B. S3 Glacier Flexible Retrieval
  C. S3 One Zone-Infrequent Access (S3 One Zone-IA)
  D. S3 Standard-Infrequent Access (S3 Standard-IA)
  B. S3 Glacier Flexible Retrieval

  ---

  Explanation

• Question 305:

  Which of the following are design principles of the reliability pillar of the AWS Well- Architected Framework? (Select TWO.)

  A. Perform operations as code.
  B. Stop guessing capacity.
  C. Adopt serverless architecture whenever possible.
  D. Use build and deployment management systems.
  E. Make changes to infrastructure by using automation.
  B. Stop guessing capacity.
  E. Make changes to infrastructure by using automation.

  ---

  Explanation

• Question 306:

  Which of the following is a customer responsibility according to the AWS shared responsibility model?

  A. Apply security patches for Amazon S3 infrastructure devices.
  B. Provide physical security for AWS datacenters.
  C. Install operating system updates on Lambda@Edge.
  D. Implement multi-factor authentication (MFA) for IAM user accounts.
  D. Implement multi-factor authentication (MFA) for IAM user accounts.

  ---

  Explanation

  According to the AWS Shared Responsibility Model, customers are responsible for managing their data, classifying their assets, and using AWS's identity and access management tools to apply the appropriate permissions. Implementing

  multi-factor authentication (MFA) for IAM user accounts is a customer responsibility to enhance the security of their accounts and protect against unauthorized access.

  Apply security patches for Amazon S3 infrastructure devices: Incorrect. AWS is responsible for managing and patching the underlying infrastructure, including storage devices.

  Provide physical security for AWS data centers: Incorrect. AWS is responsible for the physical security of its data centers.

  Install operating system updates on Lambda@Edge: Incorrect. AWS manages the underlying infrastructure for Lambda@Edge, including operating system updates.

• Question 307:

  A retail company is migrating its IT infrastructure applications from on premises to the AWS Cloud.

  Which costs will the company eliminate with this migration? (Select TWO.)

  A. Cost of data center operations
  B. Cost of application licensing
  C. Cost of marketing campaigns
  D. Cost of physical server hardware
  E. Cost of network management
  A. Cost of data center operations
  D. Cost of physical server hardware

  ---

  Explanation

  The costs that the company will eliminate with this migration are the cost of application licensing and the cost of physical server hardware. The cost of application licensing is the fee that the company has to pay to use the software applications on its on- premises servers. The cost of physical server hardware is the expense that the company has to incur to purchase, maintain, and upgrade the servers and related equipment. By migrating to the AWS Cloud, the company can avoid these costs by using the AWS services and resources that are already licensed and managed by AWS. For more information, see [Cloud Economics] and [AWS Total Cost of Ownership (TCO) Calculator].

• Question 308:

  A company hosts its website on Amazon EC2 instances. The company needs to ensure that the website reaches a global audience and provides minimum latency to users.

  Which AWS service should the company use to meet these requirements?

  A. Amazon Route 53
  B. Amazon CloudFront
  C. Elastic Load Balancing
  D. AWS Lambda
  B. Amazon CloudFront

  ---

  Explanation

  Amazon CloudFront is a content delivery network (CDN) that helps deliver your website content globally with low latency by caching copies of your website content at edge locations around the world. This helps ensure that users receive content from the edge location closest to them, thereby reducing latency and improving user experience.

  A. Amazon Route 53: Incorrect, as it is a DNS web service that routes users to the appropriate endpoint, but it does not cache content or reduce latency.

  C. Elastic Load Balancing: Incorrect, as it distributes incoming application or network traffic across multiple targets, but does not cache content globally.

  D. AWS Lambda: Incorrect, as it is a serverless compute service, not intended for content delivery.

• Question 309:

  Which task must a user perform by using the AWS account root user credentials?

  A. Make changes to AWS production resources.
  B. Change AWS Support plans.
  C. Access AWS Cost and Usage Reports.
  D. Grant auditors' access to an AWS account for a compliance audit.
  B. Change AWS Support plans.

  ---

  Explanation

  Changing AWS Support plans is a task that must be performed by using the AWS account root user credentials. The root user is the email address that you used to sign up for AWS. It has complete access to all AWS services and resources in the account. You should use the root user only to perform a few account and service management tasks, such as changing AWS Support plans, closing the account, or changing the account name or email address. Making changes to AWS production resources, accessing AWS Cost and Usage Reports, and granting auditors access to an AWS account for a compliance audit are tasks that can be performed by using IAM users or roles, which are entities that you create in AWS to delegate permissions to access AWS services and resources.

• Question 310:

  A company is using an Amazon RDS database to run reports that are input/output (I/O) intensive. Which AWS service can be used to improve the database performance?

  A. Amazon DynamoDB Accelerator (DAX)
  B. Amazon EMR
  C. Amazon ElastiCache
  D. Amazon Redshift
  C. Amazon ElastiCache

  ---

  Explanation