Amazon Amazon Certifications CLF-C02 Questions & Answers

• Question 341:

  A company wants to integrate natural language processing (NLP) into business intelligence (Bl) dashboards. The company wants to ask questions and receive answers with relevant visualizations.

  Which AWS service or tool will meet these requirements?

  A. Amazon Macie

  B. Amazon Rekognition

  C. Amazon QuickSight Q

  D. Amazon Lex

  Correct Answer: C

  Amazon QuickSight Q is a natural language query feature that lets you ask questions about your data using everyday language and get answers in seconds. You can type questions such as "What are the total sales by region?" or "How did marketing campaign A perform?" and get answers in the form of relevant visualizations, such as charts or tables. You can also use Q to drill down into details, filter data, or perform calculations. Q uses machine learning to understand your data and your intent, and provides suggestions and feedback to help you refine your questions.

• Question 342:

  Which AWS service or feature is an example of a relational database management system?

  A. Amazon Athena

  B. Amazon Redshift

  C. Amazon S3 Select

  D. Amazon Kinesis Data Streams

  Correct Answer: B

  Amazon Redshift is a fully managed, petabyte-scale data warehouse service in the cloud. You can start with just a few hundred gigabytes of data and scale to a petabyte or more. This enables you to use your data to acquire new insights for your business and customers. Amazon Redshift is a relational database management system (RDBMS), so it is compatible with other RDBMS applications. You can use standard SQL to query the data.

• Question 343:

  A company is operating several factories where it builds products. The company needs the ability to process data, store data, and run applications with local system interdependencies that require low latency.

  Which AWS service should the company use to meet these requirements?

  A. AWS loT Greengrass

  B. AWS Lambda

  C. AWS Outposts

  D. AWS Snowball Edge

  Correct Answer: C

  AWS Outposts is a service that provides fully managed AWS infrastructure and services on premises. It allows users to run applications that require low latency and local data processing, while seamlessly connecting to the AWS Cloud for a consistent hybrid experience. AWS IoT Greengrass is a service that provides local compute, messaging, data caching, sync, and ML inference capabilities for connected devices. AWS Lambda is a service that allows users to run code without provisioning or managing servers. AWS Snowball Edge is a device that provides a petabyte-scale data transport and edge computing solution.

• Question 344:

  Which AWS service can identify when an Amazon EC2 instance was terminated?

  A. AWS Identity and Access Management (IAM)

  B. AWS CloudTrail

  C. AWS Compute Optimizer

  D. Amazon EventBridge

  Correct Answer: B

  AWS CloudTrail is the AWS service that can identify when an Amazon EC2 instance was terminated. AWS CloudTrail is a service that records API calls and events for AWS accounts and resources. AWS CloudTrail can capture the TerminateInstances event, which is triggered when an EC2 instance is terminated by a user or an AWS service. The event contains information such as the instance ID, the user identity, the source IP address, the time, and the reason for the termination12. Customers can use the CloudTrail console, the AWS CLI, or the AWS SDKs to view and search for the TerminateInstances events in their event history or in their S3 buckets where they store their CloudTrail logs13.

• Question 345:

  Which AWS service provides encryption at rest for Amazon RDS and for Amazon Elastic Block Store (Amazon EBS) volumes?

  A. AWS Lambda

  B. AWS Key Management Service (AWS KMS)

  C. AWSWAF

  D. Amazon Rekognition

  Correct Answer: B

  AWS Key Management Service (AWS KMS) is a managed service that enables you to easily encrypt your data. AWS KMS provides you with centralized control of the encryption keys used to protect your data. You can use AWS KMS to encrypt data in Amazon RDS and Amazon EBS volumes12

• Question 346:

  Which of the following is a pillar of the AWS Well-Architected Framework?

  A. Redundancy

  B. Operational excellence

  C. Availability

  D. Multi-Region

  Correct Answer: B

  The AWS Well-Architected Framework helps cloud architects build secure, high-performing, resilient, and efficient infrastructure for their applications and workloads. Based on five pillars -- operational excellence, security, reliability, performance efficiency, and cost optimization -- the Framework provides a consistent approach for customers and partners to evaluate architectures, and implement designs that can scale over time. Operational excellence is one of the pillars of the Framework, and it focuses on running and monitoring systems to deliver business value, and continually improving processes and procedures.

• Question 347:

  According to the AWS shared responsibility model, who is responsible for the virtualization layer down to the physical security of the facilities in which AWS services operate?

  A. It is the sole responsibility of the customer.

  B. It is the sole responsibility of AWS.

  C. It is a shared responsibility between AWS and the customer.

  D. The customer's AWS Support plan tier determines who manages the configuration.

  Correct Answer: B

  According to the AWS shared responsibility model, AWS is responsible for the security of the cloud, which includes the virtualization layer down to the physical security of the facilities in which AWS services operate1. The customer is responsible for the security in the cloud, which includes the configuration and management of the AWS resources and applications that they use1.

• Question 348:

  A company is moving an on-premises data center to the AWS Cloud. The company must migrate 50 petabytes of file storage data to AWS with the least possible operational overhead.

  Which AWS service or resource should the company use to meet these requirements?

  A. AWS Snowmobile

  B. AWS Snowball Edge

  C. AWS Data Exchange

  D. AWS Database Migration Service (AWS DMS)

  Correct Answer: A

  The AWS service that the company should use to meet these requirements is A. AWS Snowmobile.

  AWS Snowmobile is a service that allows you to migrate large amounts of data to AWS using a 45-foot long ruggedized shipping container that can store up to 100 petabytes of data. AWS Snowmobile is designed for situations where you

  need to move massive amounts of data to the cloud in a fast, secure, and cost-effective way. AWS Snowmobile has the least possible operational overhead because it eliminates the need to buy, configure, or manage hundreds or thousands

  of storage devices12. AWS Snowball Edge is a service that allows you to migrate data to AWS using a physical device that can store up to 80 terabytes of data and has compute and storage capabilities to run applications on the device. AWS

  Snowball Edge is suitable for situations where you have limited or intermittent network connectivity, or where bandwidth costs are high. However, AWS Snowball Edge has more operational overhead than AWS Snowmobile because you need

  to request multiple devices and transfer your data onto them using the client3.

  AWS Data Exchange is a service that allows you to find, subscribe to, and use third-party data in the cloud. AWS Data Exchange is not a data migration service, but rather a data marketplace that enables data providers and data consumers

  to exchange data sets securely and efficiently4.

  AWS Database Migration Service (AWS DMS) is a service that helps migrate databases to AWS. AWS DMS does not migrate file storage data, but rather supports various database platforms and engines as sources and targets5.

  References:

  1: AWS Snowmobile ?Move Exabytes of Data to the Cloud in Weeks 2: AWS Snowmobile

  - Amazon Web Services 3: Automated Software Vulnerability Management - Amazon Inspector - AWS 4: AWS Data Exchange - Find, subscribe to, and use third-party data in ...

  5: AWS Database Migration Service ?Amazon Web Services

• Question 349:

  A company is running its application in the AWS Cloud and wants to protect against a DDoS attack. The company's security team wants near real-time visibility into DDoS attacks.

  Which AWS service or traffic filter will meet these requirements with the MOST features for DDoS protection?

  A. AWS Shield Advanced

  B. AWS Shield

  C. Amazon GuardDuty

  D. Network ACLs

  Correct Answer: A

  AWS Shield Advanced is a managed Distributed Denial of Service (DDoS) protection service that safeguards applications running on AWS. AWS Shield Advanced provides you with 24x7 access to the AWS DDoS Response Team (DRT) and protection against DDoS attacks of any size or duration. AWS Shield Advanced also provides near real-time visibility into attacks, advanced attack mitigation capabilities, and integration with AWS WAF and AWS Firewall Manager1. AWS Shield is a standard service that provides always-on detection and automatic inline mitigations to minimize application downtime and latency, but it does not offer the same level of features and support as AWS Shield Advanced2. Amazon GuardDuty is a threat detection service that continuously monitors for malicious activity and unauthorized behavior, but it does not provide DDoS protection3. Network ACLs are stateless filters that can be associated with a subnet to control the traffic to and from the subnet, but they are not designed to protect against DDoS attacks

• Question 350:

  A company wants to monitor its workload performance. The company wants to ensure that the cloud services are delivered at a level that meets its business needs.

  Which AWS Cloud Adoption Framework (AWS CAF) perspective will meet these requirements?

  A. Business

  B. Governance

  C. Platform

  D. Operations

  Correct Answer: D

  The Operations perspective helps you monitor and manage your cloud workloads to ensure that they are delivered at a level that meets your business needs. Common stakeholders include chief operations officer (COO), cloud director, cloud operations manager, and cloud operations engineers1. The Operations perspective covers capabilities such as workload health monitoring, incident management, change management, release management, configuration management, and disaster recovery2. The Business perspective helps ensure that your cloud investments accelerate your digital transformation ambitions and business outcomes. Common stakeholders include chief executive officer (CEO), chief financial officer (CFO), chief information officer (CIO), and chief technology officer (CTO). The Business perspective covers capabilities such as business case development, value realization, portfolio management, and stakeholder management3. The Governance perspective helps you orchestrate your cloud initiatives while maximizing organizational benefits and minimizing transformation-related risks. Common stakeholders include chief transformation officer, CIO, CTO, CFO, chief data officer (CDO), and chief risk officer (CRO). The Governance perspective covers capabilities such as governance framework, budget and cost management, compliance management, and data governance4. The Platform perspective helps you build an enterprise-grade, scalable, hybrid cloud platform, modernize existing workloads, and implement new cloud-native solutions. Common stakeholders include CTO, technology leaders, architects, and engineers. The Platform perspective covers capabilities such as platform design and implementation, workload migration and modernization, cloud-native development, and DevOps5. References: AWS Cloud Adoption Framework: Operations Perspective AWS Cloud Adoption Framework - Operations Perspective AWS Cloud Adoption Framework: Business Perspective AWS Cloud Adoption Framework: Governance Perspective AWS Cloud Adoption Framework: Platform Perspective