Amazon CLF-C02 Online Practice Questions and Exam Preparation

Amazon CLF-C02 Online Questions & Answers

• Question 341:

  Which of the following are components of an AWS Site-to-Site VPN connection? (Select TWO.)

  A. AWS Storage Gateway
  B. Virtual private gateway
  C. NAT gateway
  D. Customer gateway
  E. Internet gateway
  B. Virtual private gateway
  D. Customer gateway

  ---

  Explanation

  The correct answers are B and D because a virtual private gateway and a customer gateway are components of an AWS Site-to-Site VPN connection. A virtual private gateway is the AWS side of the VPN connection that attaches to the customer's VPC. A customer gateway is the customer side of the VPN connection that resides in the customer's network. The other options are incorrect because they are not components of an AWS Site-to-Site VPN connection. AWS Storage Gateway is a service that connects on- premises software applications with cloud-based storage. NAT gateway is a service that enables instances in a private subnet to connect to the internet or other AWS services, but prevents the internet from initiating a connection with those instances. Internet gateway is a service that enables communication between instances in a VPC and the internet.

  [What is AWS Site-to-Site VPN?]

• Question 342:

  A company runs thousands of simultaneous simulations using AWS Batch. Each simulation is stateless, is fault tolerant, and runs for up to 3 hours.

  Which pricing model enables the company to optimize costs and meet these requirements?

  A. Reserved Instances
  B. Spot Instances
  C. On-Demand Instances
  D. Dedicated Instances
  B. Spot Instances

  ---

  Explanation

  The correct answer is B because Spot Instances enable the company to optimize costs and meet the requirements. Spot Instances are spare EC2 instances that are available at up to 90% discount compared to On-Demand prices. Spot Instances are suitable for stateless, fault-tolerant, and flexible applications that can run for any duration. The other options are incorrect because they do not enable the company to optimize costs and meet the requirements. Reserved Instances are EC2 instances that are reserved for a specific period of time (one or three years) in exchange for a lower hourly rate. Reserved Instances are suitable for steady-state or predictable workloads that run for a long duration. On-Demand Instances are EC2 instances that are launched and billed at a fixed hourly rate. On-Demand Instances are suitable for short-term, irregular, or unpredictable workloads that cannot be interrupted. Dedicated Instances are EC2 instances that run on hardware that is dedicated to a single customer. Dedicated Instances are suitable for workloads that require regulatory compliance or data isolation.

  [Amazon EC2 Instance Purchasing Options]

• Question 343:

  Which AWS service will help a company identify the user who deleted an Amazon EC2 instance yesterday?

  A. Amazon CloudWatch
  B. AWS Trusted Advisor
  C. AWS CloudTrail
  D. Amazon Inspector
  C. AWS CloudTrail

  ---

  Explanation

  The correct answer is C because AWS CloudTrail is a service that will help a company identify the user who deleted an Amazon EC2 instance yesterday. AWS CloudTrail is a service that enables users to track user activity and API usage across their AWS account. AWS CloudTrail records the details of every API call made to AWS services, such as the identity of the caller, the time of the call, the source IP address of the caller, the parameters and responses of the call, and more. Users can use AWS CloudTrail to audit, monitor, and troubleshoot their AWS resources and actions. The other options are incorrect because they are not services that will help a company identify the user who deleted an Amazon EC2 instance yesterday. Amazon CloudWatch is a service that enables users to collect, analyze, and visualize metrics, logs, and events from their AWS resources and applications. AWS Trusted Advisor is a service that provides real-time guidance to help users follow AWS best practices for security, performance, cost optimization, and fault tolerance. Amazon Inspector is a service that helps users find security vulnerabilities and deviations from best practices in their Amazon EC2 instances.

  AWS CloudTrail FAQs

• Question 344:

  A company is moving some of its on-premises IT services to the AWS Cloud. The finance department wants to see the entire bill so it can forecast spending limits. Which AWS service can the company use to set spending limits and receive notifications if those limits are exceeded?

  A. AWS Cost and Usage Reports
  B. AWS Budgets
  C. AWS Organizations consolidated billing
  D. Cost Explorer
  B. AWS Budgets

  ---

  Explanation

  AWS Budgets allows organizations to set custom cost and usage budgets and receive notifications when they exceed predefined thresholds. This feature helps the finance department monitor spending and manage budget forecasts effectively. AWS Cost and Usage Reports and Cost Explorer provide detailed billing data but do not include budget notifications. Consolidated billing in AWS Organizations is useful for aggregating billing across accounts but does not provide budget alerts.

• Question 345:

  A company wants to migrate a virtual server running Windows Server from an on-premises data center to AWS. The company wants to automatically convert the existing server so that it runs natively on AWS infrastructure.

  Which AWS service meets this requirement?

  A. AWS Application Discovery Service
  B. AWS Application Migration Service
  C. AWS Config
  D. AWS DataSync
  B. AWS Application Migration Service

• Question 346:

  Which of the following is a component of the AWS Global infrastructure?

  A. Amazon Alexa
  B. AWS Regions
  C. Amazon Lightsail
  D. AWS Organizations
  B. AWS Regions

  ---

  Explanation

• Question 347:

  A company wants to deploy its critical application on AWS and maintain high availability. What is an AWS responsibility under the AWS shared responsibility model?

  A. Configure the security group rules that determine which ports are open on an Amazon EC2 Linux instance.
  B. Ensure the security of the internal network in the AWS data centers.
  C. Patch the guest operating system with the latest security patches on Amazon EC2.
  D. Turn on server-side encryption for Amazon S3 buckets.
  B. Ensure the security of the internal network in the AWS data centers.

  ---

  Explanation

  Under the AWS shared responsibility model, AWS is responsible for ensuring the security of the internal network in the AWS data centers, as well as the physical security of the hardware and facilities that run AWS services. AWS customers are responsible for configuring the security group rules that determine which ports are open on an EC2 Linux instance, patching the guest operating system with the latest security patches on EC2, and turning on server-side encryption for S3 buckets. Source: AWS Shared Responsibility Model

• Question 348:

  A company has two AWS accounts in an organization in AWS Organizations for consolidated billing. All of the company's AWS resources are hosted in one AWS Region.

  Account A has purchased five Amazon EC2 Standard Reserved Instances (RIs) and has four EC2 instances running. Account B has not purchased any RIs and also has four EC2 instances running.

  Which statement is true regarding pricing for these eight instances?

  A. The eight instances will be charged as regular instances.
  B. Four instances will be charged as RIs, and four will be charged as regular instances.
  C. Five instances will be charged as RIs, and three will be charged as regular instances.
  D. The eight instances will be charged as RIs.
  B. Four instances will be charged as RIs, and four will be charged as regular instances.

  ---

  Explanation

  The statement that is true regarding pricing for these eight instances is: four instances will be charged as RIs, and four will be charged as regular instances. Amazon EC2 Reserved Instances (RIs) are a pricing model that allows users to reserve EC2 instances for a specific term and benefit from discounted hourly rates and capacity reservation. RIs are purchased for a specific AWS Region, and can be shared across multiple accounts in an organization in AWS Organizations for consolidated billing. However, RIs are applied on a first-come, first-served basis, and there is no guarantee that all instances in the organization will be charged at the RI rate. In this case, Account A has purchased five RIs and has four instances running, so all four instances will be charged at the RI rate. Account B has not purchased any RIs and also has four instances running, so all four instances will be charged at the regular rate. The remaining RI in Account A will not be applied to any instance in Account B, and will be wasted.

• Question 349:

  Which AWS service or feature can be used to control inbound and outbound traffic on an Amazon EC2 instance?

  A. Internet gateways
  B. AWS Identity and Access Management (IAM)
  C. Network ACLs
  D. Security groups
  D. Security groups

  ---

  Explanation

  D is correct because security groups are the AWS service or feature that can be used to control inbound and outbound traffic on an Amazon EC2 instance. Security groups act as a virtual firewall for the EC2 instance, allowing users to specify which protocols, ports, and source or destination IP addresses are allowed or denied. A is incorrect because internet gateways are the AWS service or feature that enable communication between instances in a VPC and the internet. They do not control the traffic on an EC2 instance. B is incorrect because AWS Identity and Access Management (IAM) is the AWS service or feature that enables users to manage access to AWS services and resources securely. It does not control the traffic on an EC2 instance. C is incorrect because network ACLs are the AWS service or feature that provide an optional layer of security for the VPC that acts as a firewall for controlling traffic in and out of one or more subnets. They do not control the traffic on an EC2 instance.

• Question 350:

  Which of the following are advantages of moving from on premises to the AWS Cloud? (Select TWO)

  A. Trade variable expenses for capital expenses
  B. Eliminate costs related to running and maintaining data centers.
  C. Benefit from massive economies of scale.
  D. Eliminate the need to train IT staff.
  E. Gain the ability to reserve capacity for 7 years or more
  B. Eliminate costs related to running and maintaining data centers.
  C. Benefit from massive economies of scale.

  ---

  Explanation

  B. Moving to the AWS Cloud can eliminate the costs associated with running and maintaining on-premises data centers, such as hardware procurement, maintenance, cooling, power, and facility costs.

  C. AWS operates at a massive scale, which allows them to achieve economies of scale that can lead to cost savings for customers. This is especially beneficial for businesses since they can leverage AWS's existing infrastructure and resources to achieve cost efficiency.