Amazon CLF-C02 Online Practice Questions and Exam Preparation

Amazon CLF-C02 Online Questions & Answers

• Question 361:

  A company has an application that runs periodically in an on-premises environment. The application runs for a few hours most days, but runs for 8 hours a day for a week at the end of each month.

  Which AWS service or feature should be used to host the application in the AWS Cloud?

  A. Amazon EC2 Standard Reserved Instances
  B. Amazon EC2 On-Demand Instances
  C. AWS Wavelength
  D. Application Load Balancer
  B. Amazon EC2 On-Demand Instances

  ---

  Explanation

  Amazon EC2 On-Demand Instances are instances that you pay for by the second, with no long-term commitments or upfront payments4. This option is suitable for applications that have unpredictable or intermittent workloads, such as the one described in the question. Amazon EC2 Standard Reserved Instances are instances that you purchase for a one-year or three-year term, and pay a lower hourly rate compared to On-Demand Instances. This option is suitable for applications that have steady state or predictable usage. AWS Wavelength is a service that enables developers to build applications that deliver ultra-low latency to mobile devices and users by deploying AWS compute and storage at the edge of the 5G network. This option is not relevant for the application described in the question. Application Load Balancer is a type of load balancer that operates at the application layer and distributes traffic based on the content of the request. This option is not a service or feature to host the application, but rather to balance the traffic among multiple instances.

• Question 362:

  A company wants to establish a private network connection between AWS and its corporate network.

  Which AWS service or feature will meet this requirement?

  A. Amazon Connect
  B. Amazon Route 53
  C. AWS Direct Connect
  D. VPC peering
  C. AWS Direct Connect

  ---

  Explanation

  AWS Direct Connect is a cloud service solution that makes it easy to establish a dedicated network connection from your premises to AWS. Using AWS Direct Connect, you can establish private connectivity between AWS and your

  datacenter, office, or colocation environment, which in many cases can reduce your network costs, increase bandwidth throughput, and provide a more consistent network experience than internet- based connections.

  References:

  1: Dedicated Network Connection - AWS Direct Connect - AWS,

  2: What is AWS Direct Connect? - AWS Direct Connect

• Question 363:

  Which AWS service helps deliver highly available applications with fast failover for multi-Region and Multi-AZ architectures?

  A. AWS WAF
  B. AWS Global Accelerator
  C. AWS Shield
  D. AWS Direct Connect
  B. AWS Global Accelerator

  ---

  Explanation

  "Deliver highly available applications with fast failover for multi-Region and multi-AZ architectures."

  https://aws.amazon.com/global-accelerator/

• Question 364:

  A user is a new AWS account owner who has no special access requirements. What should this user do with the AWS account root user access keys?

  A. Share the keys with all relevant internal users so that those users can programmatically access AWS services.
  B. Post the keys on GitHub to provide development teams with access to AWS services.
  C. Use the keys for access, but do not share the keys with anyone.
  D. Delete the keys and create IAM users.
  C. Use the keys for access, but do not share the keys with anyone.

  ---

  Explanation

• Question 365:

  A company wants to expand from one AWS Region into a second AWS Region. What does the company need to do to expand into the second Region?

  A. Contact an AWS account manager to sign a new contract.
  B. Move an Availability Zone to the second Region.
  C. Begin to deploy resources in the second Region.
  D. Download the AWS Management Console for the second Region.
  C. Begin to deploy resources in the second Region.

  ---

  Explanation

• Question 366:

  A company wants to save costs by archiving data that is no longer frequently accessed by end users.

  Which Amazon S3 feature will meet this requirement?

  A. S3 Versioning
  B. S3 Lifecycle
  C. S3 Object Lock
  D. S3 Inventory
  B. S3 Lifecycle

  ---

  Explanation

• Question 367:

  A company is using Amazon EC2 instances.

  Which tasks are the company's responsibility, according to the AWS shared responsibility model? (Choose two.)

  A. Choose the initial root password of new Linux instances.
  B. Identify which users can access the EC2 instances, and manage their permissions in the operating system.
  C. Apply the updates of the hypervisor where the EC2 instances are running.
  D. Choose between a Wi-Fi connection and an Ethernet connection for the global internet access.
  E. Identify and manage the users who are allowed to create or delete EC2 instances.
  B. Identify which users can access the EC2 instances, and manage their permissions in the operating system.
  E. Identify and manage the users who are allowed to create or delete EC2 instances.

  ---

  Explanation

• Question 368:

  Wh.cn of lite following is advantages of the AWS Cloud? (Select TWO.)

  A. Trade variable expenses tor capital expenses
  B. High economies of scale
  C. Launch globally in minutes
  D. Focus on managing hardware infrastructure
  E. Over provision to ensure capacity
  B. High economies of scale
  C. Launch globally in minutes

  ---

  Explanation

  https://docs.aws.amazon.com/whitepapers/latest/aws-overview/six-advantages-of-cloud-computing.html

  "Benefit from massive economies of scale

• Question 369:

  A company stores data in an Amazon S3 bucket. The company must control who has permission to read, write, or delete objects that the company stores in the S3 bucket. Which task is the responsibility of AWS, according to the AWS shared responsibility model?

  A. Set up multi-factor authentication (MFA) for each Workspaces user account.
  B. Ensure the environmental safety and security of the AWS infrastructure that hosts Workspaces.
  C. Provide security for Workspaces user accounts through AWS Identity and Access Management (IAM).
  D. Configure AWS CloudTrail to log API calls and user activity.
  B. Ensure the environmental safety and security of the AWS infrastructure that hosts Workspaces.

  ---

  Explanation

  The correct answer is B because ensuring the environmental safety and security of the AWS infrastructure that hosts Workspaces is the responsibility of AWS, according to the AWS shared responsibility model. The AWS shared responsibility model is a framework that defines the division of responsibilities between AWS and the customer for security and compliance. AWS is responsible for the security of the cloud, which includes the global infrastructure, such as the regions, availability zones, and edge locations; the hardware, software, networking, and facilities that run the AWS services; and the virtualization layer that separates the customer instances and storage. The customer is responsible for the security in the cloud, which includes the customer data, the guest operating systems, the applications, the identity and access management, the firewall configuration, and the encryption. The other options are incorrect because they are the responsibility of the customer, according to the AWS shared responsibility model. Setting up multi-factor authentication (MFA) for each Workspaces user account, providing security for Workspaces user accounts through AWS Identity and Access Management (IAM), configuring AWS CloudTrail to log API calls and user activity, and encrypting data at rest and in transit are all tasks that the customer has to perform to secure their Workspaces environment.

  AWS Shared Responsibility Model, Amazon WorkSpaces Security

• Question 370:

  Which of the following promotes AWS Cloud architectural best practices for designing and operating reliable, secure, efficient, and cost-effective systems?

  A. AWS Serverless Application Model framework
  B. AWS Business Support
  C. Principle of least privilege
  D. AWS Well-Architected Framework
  D. AWS Well-Architected Framework

  ---

  Explanation

  AWS Well-Architected Framework promotes AWS Cloud architectural best practices for designing and operating reliable, secure, efficient, and cost-effective systems. AWS Well-Architected Framework is a set of guidelines and best practices that help the user to evaluate and improve the architecture of their applications and workloads on AWS. AWS Well-Architected Framework consists of five pillars: operational excellence, security, reliability, performance efficiency, and cost optimization. Each pillar provides a set of design principles, questions, and best practices that help the user to achieve the desired outcomes for their systems.