Amazon CLF-C02 Online Practice Questions and Exam Preparation

Amazon CLF-C02 Online Questions & Answers

• Question 311:

  Which of the following is a recommended design principle for AWS Cloud architecture?

  A. Design tightly coupled components.
  B. Build a single application component that can handle all the application functionality.
  C. Make large changes on fewer iterations to reduce chances of failure.
  D. Avoid monolithic architecture by segmenting workloads.
  D. Avoid monolithic architecture by segmenting workloads.

  ---

  Explanation

• Question 312:

  Which task is a responsibility of AWS, according to the AWS shared responsibility model?

  A. Encryption of application data
  B. Authentication of application users
  C. Protection of physical network infrastructure
  D. Configuration of firewalls
  C. Protection of physical network infrastructure

  ---

  Explanation

• Question 313:

  A company wants to verify if multi-factor authentication (MFA) is enabled for all users within its AWS accounts.

  Which AWS service or resource will meet this requirement?

  A. AWS Cost and Usage Report
  B. IAM credential reports
  C. AWS Artifact
  D. Amazon CloudFront reports
  B. IAM credential reports

  ---

  Explanation

  The AWS service or resource that will meet the requirement of verifying if multi-factor authentication (MFA) is enabled for all users within its AWS accounts is IAM credential reports. IAM credential reports are downloadable reports that list all the users in an AWS account and the status of their various credentials, including passwords, access keys, and MFA devices. Users can use IAM credential reports to audit the security status of their AWS accounts and identify any issues or risks4. AWS Cost and Usage Report, AWS Artifact, and Amazon CloudFront reports are other AWS services or resources that provide different types of information, such as billing, compliance, and content delivery, but they do not show the MFA status of the users.

• Question 314:

  A company needs a centralized, secure way to create and manage cryptographic keys. The company will use the keys across a wide range of AWS services and applications. The company needs to track and document when the keys are created, used, and deleted.

  Which AWS service or feature will meet these requirements?

  A. AWS Secrets Manager
  B. AWS License Manager
  C. AWS Systems Manager Parameter Store
  D. AWS Key Management Service (AWS KMS)
  D. AWS Key Management Service (AWS KMS)

  ---

  Explanation

  AWS Key Management Service (AWS KMS) makes it easy for you to create and manage cryptographic keys and control their use across a wide range of AWS services and in your applications. AWS KMS is a secure and resilient service that uses hardware security modules that have been validated under FIPS 140-2, or are in the process of being validated, to protect your keys. AWS KMS is integrated with AWS CloudTrail to provide you with logs of all key usage to help meet your regulatory and compliance needs.

• Question 315:

  Which solution provides a fast, automated and repeatable method of deploying AWS Cloud infrastructure to multiple AWS Regions?

  A. Use AWS CodeStar to set up a continuous delivery toolchain for automated deployment
  B. Create and launch an Amazon EC2 Amazon Machine Image (AMI) containing the source code with butt-m deployment hooks lo launch other AWS services
  C. Create and use an AWS CloudFormation template
  D. Use AWS Systems Manager to automate management tasks such as creating Amazon EC2 Amazon Machine images (AMIS) and applying patches
  C. Create and use an AWS CloudFormation template

  ---

  Explanation

• Question 316:

  Which AWS service or feature should a company use between two microservices to ensure that messages are sent and received in exact order?

  A. Amazon Simple Email Service (Amazon SES)
  B. Amazon Simple Notification Service (Amazon SNS)
  C. Amazon S3 Event Notifications
  D. Amazon Simple Queue Service (Amazon SQS) FIFO queues
  D. Amazon Simple Queue Service (Amazon SQS) FIFO queues

  ---

  Explanation

• Question 317:

  Which duties are the responsibility of a company that is using AWS Lambda? (Select TWO.)

  A. Security inside of code
  B. Selection of CPU resources
  C. Patching of operating system
  D. Writing and updating of code
  E. Security of underlying infrastructure
  A. Security inside of code
  D. Writing and updating of code

  ---

  Explanation

  The duties that are the responsibility of a company that is using AWS Lambda are security inside of code and writing and updating of code. AWS Lambda is a serverless compute service that allows you to run code without provisioning or managing servers, scaling, or patching. AWS Lambda takes care of the security of the underlying infrastructure, such as the operating system, the network, and the firewall. However, the company is still responsible for the security of the code itself, such as encrypting sensitive data, validating input, and handling errors. The company is also responsible for writing and updating the code that defines the Lambda function, and choosing the runtime environment, such as Node.js, Python, or Java. AWS Lambda does not require the selection of CPU resources, as it automatically allocates them based on the memory configuration34

• Question 318:

  A company manages factory machines in real time. The company wants to use AWS technology to deploy its monitoring applications as close to the factory machines as possible.

  Which AWS solution will meet these requirements with the LEAST latency?

  A. AWS Outposts
  B. Amazon EC2
  C. AWS App Runner
  D. AWS Batch
  A. AWS Outposts

  ---

  Explanation

  AWS Outposts is a fully managed service that extends AWS infrastructure, AWS services, APIs, and tools to virtually any datacenter, co-location space, or on- premises facility for a truly consistent hybrid experience. AWS Outposts enables you to run AWS services in your on-premises data center1.

• Question 319:

  A company wants to automatically add and remove Amazon EC2 instances. The company wants the EC2 instances to adjust to varying workloads dynamically. Which service or feature will meet these requirements?

  A. Amazon DynamoDB
  B. Amazon EC2 Spot Instances
  C. AWS Snow Family
  D. Amazon EC2 Auto Scaling
  D. Amazon EC2 Auto Scaling

  ---

  Explanation

  Amazon EC2 Auto Scaling is a service that helps you maintain application availability and allows you to automatically add or remove EC2 instances according to definable conditions. You can create collections of EC2 instances, called Auto

  Scaling groups, and specify the minimum and maximum number of instances in each group. You can also define scaling policies that adjust the number of instances based on the demand on your application. Amazon EC2 Auto Scaling helps

  you improve the performance, reliability, and cost-efficiency of your EC2 workloads.

  References:

  1: VDI Desktops - Amazon WorkSpaces Family - AWS,

  2: What is Amazon EC2 Auto Scaling? - Amazon EC2 Auto Scaling,

  3: Discover Amazon EC2 Auto Scaling Unit | Salesforce Trailhead

• Question 320:

  A company needs to run its existing custom, nonproduction workloads in the AWS Cloud quickly and cost-effectively.

  The workloads can recover from interruptions easily.

  Which pricing model should the company use?

  A. Reserved Instances
  B. On-Demand Instances
  C. Spot Instances
  D. Dedicated Hosts
  C. Spot Instances

  ---

  Explanation

  The correct answer is C because Spot Instances are the pricing model that enables the company to run its existing custom, nonproduction workloads in the AWS Cloud quickly and cost-effectively. Spot Instances are spare Amazon EC2 instances that are available at up to 90% discount compared to On-Demand prices. Spot Instances are suitable for stateless, fault-tolerant, and flexible workloads that can recover from interruptions easily. The other options are incorrect because they are not the pricing model that enables the company to run its existing custom, nonproduction workloads in the AWS Cloud quickly and cost-effectively. Reserved Instances are Amazon EC2 instances that are reserved for a specific period of time (one or three years) in exchange for a lower hourly rate. Reserved Instances are suitable for steady-state or predictable workloads that run for a long duration. On-Demand Instances are Amazon EC2 instances that are launched and billed at a fixed hourly rate. On-Demand Instances are suitable for short-term, irregular, or unpredictable workloads that cannot be interrupted. Dedicated Hosts are physical servers that are dedicated to a single customer. Dedicated Hosts are suitable for workloads that require regulatory compliance or data isolation.

  Amazon EC2 Instance Purchasing Options