Amazon CLF-C02 Online Practice Questions and Exam Preparation

Amazon CLF-C02 Online Questions & Answers

• Question 411:

  Which VPC component provides a layer of security at the subnet level?

  A. Security groups
  B. Network ACLs
  C. NAT gateways
  D. Route tables
  B. Network ACLs

  ---

  Explanation

  Network ACLs are a feature that provide a layer of security at the subnet level by acting as a firewall to control traffic in and out of one or more subnets. Network ACLs can be configured with rules that allow or deny traffic based on the source and destination IP addresses, ports, and protocols5. Security groups are a feature that provide a layer of security at the instance level by acting as a firewall to control traffic to and from one or more instances. Security groups can be configured with rules that allow or deny traffic based on the source and destination IP addresses, ports, protocols, and security groups. NAT gateways are a feature that enable instances in a private subnet to connect to the internet or other AWS services, but prevent the internet from initiating a connection with those instances. Route tables are a feature that determine where network traffic from a subnet or gateway is directed.

• Question 412:

  A developer needs to build an application for a retail company. The application must provide real-time product recommendations that are based on machine learning.

  Which AWS service should the developer use to meet this requirement?

  A. AWS Health Dashboard
  B. Amazon Personalize
  C. Amazon Forecast
  D. Amazon Transcribe
  B. Amazon Personalize

  ---

  Explanation

  Amazon Personalize is a fully managed machine learning service that customers can use to generate personalized recommendations for their users. It can also generate user segments based on the users' affinity for certain items or item metadata. Amazon Personalize uses the customers' data to train and deploy custom recommendation models that can be integrated into their applications. Therefore, the correct answer is

  B. You can learn more about Amazon Personalize and its use cases from this page.

• Question 413:

  Which AWS service will help a company plan a migration to AWS by collecting the configuration, usage, and behavior data of on-premises data centers?

  A. AWS Resource Groups
  B. AWS Application Discovery Service
  C. AWS Service Catalog
  D. AWS Systems Manager
  B. AWS Application Discovery Service

  ---

  Explanation

• Question 414:

  A company plans to migrate its custom marketing application and order-processing application to AWS. The company needs to deploy the applications on different types of instances with various configurations of CPU, memory, storage, and networking capacity.

  Which AWS service should the company use to meet these requirements?

  A. AWS Lambda
  B. Amazon Cognito
  C. Amazon Athena
  D. Amazon EC2
  D. Amazon EC2

  ---

  Explanation

  Amazon EC2 (Elastic Compute Cloud) provides scalable computing capacity in the AWS Cloud, allowing customers to run virtual servers (instances) with different configurations of CPU, memory, storage, and networking capacity. This flexibility is ideal for applications that require specific infrastructure configurations, such as custom marketing and order-processing applications.

  A. AWS Lambda: Incorrect, as it is a serverless compute service that automatically manages the computing resources needed to run code but does not offer the flexibility of choosing different instance types.

  B. Amazon Cognito: Incorrect, as it is used for user authentication and authorization, not for deploying applications.

  C. Amazon Athena: Incorrect, as it is an interactive query service for analyzing data in Amazon S3 using standard SQL.

• Question 415:

  A company needs to organize its resources and track AWS costs on a detailed level. The company needs to categorize costs by business department, environment, and application.

  Which solution will meet these requirements?

  A. Access the AWS Cost Management console to organize resources, set an AWS budget, and receive notifications of unintentional usage.
  B. Use tags to organize the resources. Activate cost allocation tags to track AWS costs on a detailed level.
  C. Create Amazon CloudWatch dashboards to visually organize and track costs individually.
  D. Access the AWS Billing and Cost Management dashboard to organize and track resource consumption on a detailed level.
  B. Use tags to organize the resources. Activate cost allocation tags to track AWS costs on a detailed level.

  ---

  Explanation

  AWS recommends using tags to organize resources effectively and to activate cost allocation tags to enable detailed tracking of costs by categories such as department, environment, and application. This approach provides the granularity needed for tracking and managing AWS costs accurately. AWS Cost Management and Billing tools provide insights but do not inherently categorize costs without tags.

• Question 416:

  What are characteristics of AWS IAM users and groups? (Select TWO.)

  A. Groups can be nested and can contain other groups.
  B. A user can be a member of multiple groups
  C. Groups can contain users only and cannot be nested
  D. A user can only be a member of a single group at one time.
  E. All new users are automatically added to a default group
  B. A user can be a member of multiple groups
  C. Groups can contain users only and cannot be nested

  ---

  Explanation

• Question 417:

  A company is setting up AWS Identity and Access Management (IAM) on an AWS account. Which recommendation complies with IAM security best practices?

  A. Use the account root user access keys for administrative tasks.
  B. Grant broad permissions so that all company employees can access the resources they need.
  C. Turn on multi-factor authentication (MFA) for added security during the login process.
  D. Avoid rotating credentials to prevent issues in production applications.
  C. Turn on multi-factor authentication (MFA) for added security during the login process.

  ---

  Explanation

  Enabling multi-factor authentication (MFA) for user accounts, especially for users with administrative or high-privilege access, is a crucial security best practice. MFA adds an additional layer of security by requiring users to provide two or more verification factors (typically something they know, like a password, and something they have, like a temporary MFA code from a hardware token or mobile app) before gaining access. This significantly reduces the risk of unauthorized access, even if login credentials are compromised.

• Question 418:

  A company's application has high customer usage during certain times of the day. The company wants to reduce the number of Amazon EC2 instances that run when application usage is low.

  Which AWS service or instance purchasing option should the company use to meet this requirement?

  A. EC2 Instance Savings Plans
  B. Spot Instances
  C. Reserved Instances
  D. Amazon EC2 Auto Scaling
  D. Amazon EC2 Auto Scaling

  ---

  Explanation

  Amazon EC2 Auto Scaling is an AWS service that can help users reduce the number of Amazon EC2 instances that run when application usage is low. Amazon EC2 Auto Scaling allows users to create scaling policies that automatically adjust the number of EC2 instances based on the demand or a schedule. EC2 Instance Savings Plans, Spot Instances, and Reserved Instances are instance purchasing options that can help users save money on EC2 usage, but they do not automatically scale the number of instances according to the application usage .

• Question 419:

  Which task is the customer's responsibility, according to the AWS shared responsibility model?

  A. Maintain the security of the AWS Cloud.
  B. Configure firewalls and networks.
  C. Patch the operating system of Amazon RDS instances.
  D. Implement physical and environmental controls.
  B. Configure firewalls and networks.

  ---

  Explanation

  According to the AWS shared responsibility model, the customer is responsible for the security in the cloud, which includes configuring firewalls and networks. AWS provides security groups and network access control lists (NACLs) as firewall features that customers can use to control the traffic to and from their AWS resources. Customers are also responsible for managing their own virtual private clouds (VPCs), subnets, route tables, internet gateways, and other network components. AWS is responsible for the security of the cloud, which includes the physical security of the facilities, the host operating system and virtualization layer, and the AWS global network infrastructure.

  References: Shared Responsibility Model - Amazon Web Services (AWS) Shared responsibility model - Amazon Web Services: Risk and Compliance

• Question 420:

  A company wants to design its cloud architecture so that its workloads are resilient can consistently perform their intended functions correctly and can recover from failure quickly. Which pillar of the AWS Well-Architected Framework does this architecture represent?

  A. Security
  B. Performance efficiency
  C. Operational excellence
  D. Reliability
  D. Reliability

  ---

  Explanation