Amazon Amazon Certifications CLF-C02 Questions & Answers

• Question 461:

  A company plans to migrate its on-premises workload to AWS. Before the migration, the company needs to estimate its future AWS service costs.

  Which AWS service or tool should the company use to meet this requirement?

  A. AWS Trusted Advisor

  B. AWS Budgets

  C. AWS Pricing Calculator

  D. AWS Cost Explorer

  Correct Answer: C

  AWS Pricing Calculator is the AWS service or tool that the company should use to estimate its future AWS service costs before the migration. AWS Pricing Calculator is a web-based tool that allows the company to create cost estimates for various AWS services and scenarios. AWS Pricing Calculator helps the company to compare the costs of running the workload on premises versus on AWS, and to optimize the costs by choosing the best options for the workload. AWS Pricing Calculator also provides a detailed breakdown of the cost components and a downloadable report. For more information, see [AWS Pricing Calculator] and [Getting Started with AWS Pricing Calculator].

• Question 462:

  A company has set up a VPC in its AWS account and has created a subnet in the VPC. The company wants to make the subnet public.

  Which AWS features should the company use to meet this requirement? (Select TWO.)

  A. Amazon VPC internet gateway

  B. Amazon VPC NAT gateway

  C. Amazon VPC route tables

  D. Amazon VPC network ACL

  E. Amazon EC2 security groups

  Correct Answer: AC

  To make a subnet public, the company should use an Amazon VPC internet gateway and an Amazon VPC route table. An internet gateway is a horizontally scaled, redundant, and highly available VPC component that allows communication between your VPC and the internet. A route table contains a set of rules, called routes, that are used to determine where network traffic from your subnet or gateway is directed. To enable internet access for a subnet, you need to attach an internet gateway to your VPC and add a route to the internet gateway in the route table associated with the subnet.

• Question 463:

  Which AWS service or tool offers consolidated billing?

  A. AWS Artifact

  B. AWS Budgets

  C. AWS Organizations

  D. AWS Trusted Advisor

  Correct Answer: C

  AWS Organizations is a service that enables you to consolidate multiple AWS accounts into an organization that you create and centrally manage. With AWS Organizations, you can create a single payment method for all the AWS accounts in your organization through consolidated billing. Consolidated billing enables you to see a combined view of AWS charges incurred by all accounts in your organization, as well as get a detailed cost report for each individual AWS account associated with your organization. AWS Artifact is a service that provides on-demand access to AWS' security and compliance reports and select online agreements. AWS Budgets is a service that enables you to plan your service usage, service costs, and instance reservations. AWS Trusted Advisor is a service that provides real-time guidance to help you provision your resources following AWS best practices. None of these services or tools offer consolidated billing.

• Question 464:

  Which perspective of the AWS Cloud Adoption Framework (AWS CAF) connects technology and business?

  A. Operations

  B. People

  C. Security

  D. Governance

  Correct Answer: D

  The perspective of the AWS Cloud Adoption Framework (AWS CAF) that connects technology and business is governance. The governance perspective focuses on the alignment of the IT strategy and processes with the business strategy and goals, as well as the management of the IT budget, risk, and compliance. The governance perspective capabilities are portfolio management, business performance management, and IT governance. The governance perspective helps organizations ensure that their cloud adoption delivers the expected business value and outcomes, and that their cloud solutions are secure, reliable, and compliant. Operations, people, and security are other perspectives of the AWS CAF, but they do not directly connect technology and business. The operations perspective focuses on the management and monitoring of the cloud resources and applications, as well as the automation and optimization of the operational processes. The people perspective focuses on the development and empowerment of the human resources, as well as the transformation of the organizational culture and structure. The security perspective focuses on the protection of the information assets and systems in the cloud, as well as the implementation of the security policies and controls.

• Question 465:

  A company wants to use Amazon EC2 instances to run a stateless and restartable process after business hours.

  Which AWS service provides DNS resolution?

  A. Amazon CloudFront

  B. Amazon VPC

  C. Amazon Route 53

  D. AWS Direct Connect

  Correct Answer: C

  Amazon Route 53 is the AWS service that provides DNS resolution. DNS (Domain Name System) is a service that translates domain names into IP addresses. Amazon Route 53 is a highly available and scalable cloud DNS service that offers domain name registration, DNS routing, and health checking. Amazon Route 53 can route the traffic to various AWS services, such as Amazon EC2, Amazon S3, and Amazon CloudFront. Amazon Route 53 can also integrate with other AWS services, such as AWS Certificate Manager, AWS Shield, and AWS WAF. For more information, see [What is Amazon Route 53?] and [Amazon Route 53 Features].

• Question 466:

  Which of the following is the customer's responsibility, according to the AWS shared responsibility model?

  A. Identity and access management

  B. Hard drive initialization

  C. Protection of data center hardware

  D. Security of Availability Zones

  Correct Answer: A

  Identity and access management is the customer's responsibility, according to the AWS shared responsibility model. This means that the customer is responsible for managing user access to the AWS resources, using tools such as AWS Identity and Access Management (IAM), AWS Single Sign-On (SSO), and AWS Organizations. The customer is also responsible for securing their data in transit and at rest, using encryption, key management, and other methods. Hard drive initialization, protection of data center hardware, and security of Availability Zones are AWS's responsibility, as they are part of the infrastructure, physical security, and network security that AWS provides to the customer12

• Question 467:

  Which benefit of AWS Cloud computing provides lower latency between users and applications?

  A. Agility

  B. Economies of scale

  C. Global reach

  D. Pay-as-you-go pricing

  Correct Answer: C

  Global reach is the benefit of AWS Cloud computing that provides lower latency between users and applications. Global reach means that AWS customers can deploy their applications and data in multiple regions around the world, and deliver them to users with high performance and availability. AWS has the largest global infrastructure of any cloud provider, with 25 geographic regions and 81 Availability Zones, as well as 216 Points of Presence in 84 cities across 42 countries. Customers can choose the optimal locations for their applications and data based on their business requirements, such as compliance, data sovereignty, and customer proximity. Agility, economies of scale, and pay-as-you-go pricing are other benefits of AWS Cloud computing, but they do not directly provide lower latency between users and applications. Agility means that AWS customers can quickly and easily provision and scale up or down AWS resources as needed, without upfront costs or long-term commitments. Economies of scale means that AWS customers can benefit from the lower costs and higher efficiency that AWS achieves by operating at a massive scale and passing the savings to the customers. Pay-as-you-go pricing means that AWS customers only pay for the AWS resources they use, without any upfront costs or long-term contracts.

• Question 468:

  Which statements explain the business value of migration to the AWS Cloud? (Select TWO.)

  A. The migration of enterprise applications to the AWS Cloud makes these applications automatically available on mobile devices.

  B. AWS availability and security provide the ability to improve service level agreements (SLAs) while reducing risk and unplanned downtime.

  C. Companies that migrate to the AWS Cloud eliminate the need to plan for high availability and disaster recovery.

  D. Companies that migrate to the AWS Cloud reduce IT costs related to infrastructure, freeing budget for reinvestment in other areas.

  E. Applications are modernized because migration to the AWS Cloud requires companies to rearchitect and rewrite all enterprise applications.

  Correct Answer: BD

  B and D are correct because AWS availability and security enable customers to improve their SLAs while reducing risk and unplanned downtime1, and AWS reduces IT costs related to infrastructure, allowing customers to reinvest in other areas2. A is incorrect because migrating to the AWS Cloud does not automatically make applications available on mobile devices, as it depends on the application design and compatibility. C is incorrect because companies that migrate to the AWS Cloud still need to plan for high availability and disaster recovery, as AWS is a shared responsibility model3. E is incorrect because migrating to the AWS Cloud does not require companies to rearchitect and rewrite all enterprise applications, as AWS offers different migration strategies depending on the application complexity and business objectives4.

• Question 469:

  Which credential allows programmatic access to AWS resources for use from the AWS CLI or the AWS API?

  A. User name and password

  B. Access keys

  C. SSH public keys

  D. AWS Key Management Service (AWS KMS) keys

  Correct Answer: B

  Access keys are long-term credentials that consist of an access key ID and a secret access key. You use access keys to sign programmatic requests that you make to AWS using the AWS CLI or AWS API1. User name and password are credentials that you use to sign in to the AWS Management Console or the AWS Management Console mobile app2. SSH public keys are credentials that you use to authenticate with EC2 instances that are launched from certain Linux AMIs3. AWS Key Management Service (AWS KMS) keys are customer master keys (CMKs) that you use to encrypt and decrypt your data and to control access to your data across AWS services and in your applications4.

• Question 470:

  Which AWS service or feature can be used to control inbound and outbound traffic on an Amazon EC2 instance?

  A. Internet gateways

  B. AWS Identity and Access Management (IAM)

  C. Network ACLs

  D. Security groups

  Correct Answer: D

  D is correct because security groups are the AWS service or feature that can be used to control inbound and outbound traffic on an Amazon EC2 instance. Security groups act as a virtual firewall for the EC2 instance, allowing users to specify which protocols, ports, and source or destination IP addresses are allowed or denied. A is incorrect because internet gateways are the AWS service or feature that enable communication between instances in a VPC and the internet. They do not control the traffic on an EC2 instance. B is incorrect because AWS Identity and Access Management (IAM) is the AWS service or feature that enables users to manage access to AWS services and resources securely. It does not control the traffic on an EC2 instance. C is incorrect because network ACLs are the AWS service or feature that provide an optional layer of security for the VPC that acts as a firewall for controlling traffic in and out of one or more subnets. They do not control the traffic on an EC2 instance.