Amazon Amazon Certifications CLF-C02 Questions & Answers

• Question 521:

  Which AWS service or feature captures information about the network traffic to and from an Amazon EC2 instance?

  A. VPC Reachability Analyzer

  B. Amazon Athena

  C. VPC Flow Logs

  D. AWS X-Ray

  Correct Answer: C

  The correct answer is C because VPC Flow Logs is an AWS service or feature that captures information about the network traffic to and from an Amazon EC2 instance. VPC Flow Logs is a feature that enables customers to capture information about the IP traffic going to and from network interfaces in their VPC. VPC Flow Logs can help customers to monitor and troubleshoot connectivity issues, such as traffic not reaching an instance or traffic being rejected by a security group. The other options are incorrect because they are not AWS services or features that capture information about the network traffic to and from an Amazon EC2 instance. VPC Reachability Analyzer is an AWS service or feature that enables customers to perform connectivity testing between resources in their VPC and identify configuration issues that prevent connectivity. Amazon Athena is an AWS service that enables customers to query data stored in Amazon S3 using standard SQL. AWS X-Ray is an AWS service that enables customers to analyze and debug distributed applications, such as those built using a microservices architecture. Reference: VPC Flow Logs

• Question 522:

  Which AWS service is a highly available and scalable DNS web service?

  A. Amazon VPC

  B. Amazon CloudFront

  C. Amazon Route 53

  D. Amazon Connect

  Correct Answer: C

  Amazon Route 53 is a highly available and scalable DNS web service. It is designed to give developers and businesses an extremely reliable and cost-effective way to route end users to Internet applications by translating domain names into the numeric IP addresses that computers use to connect to each other2. Amazon Route 53 also offers other features such as health checks, traffic management, domain name registration, and DNSSEC3.

• Question 523:

  Which AWS Well-Architected Framework concept represents a system's ability to remain functional when the system encounters operational problems?

  A. Consistency

  B. Elasticity

  C. Durability

  D. Latency

  Correct Answer: B

  The AWS Well-Architected Framework is a set of best practices and guidelines for designing and operating systems in the cloud. The framework consists of five pillars: operational excellence, security, reliability, performance efficiency, and cost optimization. The concept of elasticity represents a system's ability to adapt to changes in demand by scaling resources up or down automatically. Therefore, the correct answer is B. You can learn more about the AWS Well-Architected Framework and its pillars from this page.

• Question 524:

  A company's user base needs to remotely access virtual desktop computers from the internet Which AWS service provides this functionality?

  A. Amazon Connect

  B. Amazon Cognito

  C. Amazon Workspaces

  D. Amazon Upstream 2.0

  Correct Answer: C

  Amazon Workspaces is the AWS service that provides the functionality of remotely accessing virtual desktop computers from the internet. Amazon Workspaces is a fully managed, secure desktop-as-a-service (DaaS) solution that allows users to provision cloud-based virtual desktops and access them from anywhere, using any supported device. Amazon Workspaces helps users reduce the complexity and cost of managing and maintaining physical desktops, and provides a consistent and secure user experience

• Question 525:

  Which AWS database service provides in-memory data storage?

  A. Amazon DynamoDB

  B. Amazon ElastiCache

  C. Amazon RDS

  D. Amazon Timestream

  Correct Answer: B

  The correct answer is B because Amazon ElastiCache is a service that provides in-memory data storage. Amazon ElastiCache is a fully managed, scalable, and high-performance service that supports two popular open-source in-memory engines: Redis and Memcached. Amazon ElastiCache allows users to store and retrieve data from fast, low-latency, and high-throughput in-memory systems. Users can use Amazon ElastiCache to improve the performance of their applications by caching frequently accessed data, reducing database load, and enabling real-time data processing. The other options are incorrect because they are not services that provide in-memory data storage. Amazon DynamoDB is a service that provides key-value and document data storage. Amazon RDS is a service that provides relational data storage. Amazon Timestream is a service that provides time series data storage. Reference: Amazon ElastiCache FAQs

• Question 526:

  A company is designing an identity access management solution for an application. The company wants users to be able to use their social media, email, or online shopping accounts to access the application.

  Which AWS service provides this functionality?

  A. AWS IAM Identity Center (AWS Single Sign-On)

  B. AWS Config

  C. Amazon Cognito

  D. AWS Identity and Access Management (IAM)

  Correct Answer: C

  The correct answer is C because Amazon Cognito provides identity federation and user authentication for web and mobile applications. Amazon Cognito allows users to sign in with their social media, email, or online shopping accounts. The other options are incorrect because they do not provide identity federation or user authentication. AWS IAM Identity Center (AWS Single Sign-On) is a service that enables users to access multiple AWS accounts and applications with a single sign-on experience. AWS Config is a service that enables users to assess, audit, and evaluate the configurations of their AWS resources. AWS Identity and Access Management (IAM) is a service that enables users to manage access to AWS resources using users, groups, roles, and policies. Reference: Amazon Cognito FAQs

• Question 527:

  Which AWS service is a key-value database that provides sub-millisecond latency on a large scale?

  A. Amazon DynamoDB

  B. Amazon Aurora

  C. Amazon DocumentDB (with MongoDB compatibility)

  D. Amazon Neptune

  Correct Answer: A

  The correct answer is A because Amazon DynamoDB is a key-value database that provides sub-millisecond latency on a large scale. Amazon DynamoDB is a fully managed, serverless, and scalable NoSQL database service that supports both key- value and document data models. The other options are incorrect because they are not key-value databases. Amazon Aurora is a relational database that is compatible with MySQL and PostgreSQL. Amazon DocumentDB (with MongoDB compatibility) is a document database that is compatible with MongoDB. Amazon Neptune is a graph database that supports property graph and RDF models. Reference: Amazon DynamoDB FAQs

• Question 528:

  A company wants to manage access and permissions for its third-party software as a service (SaaS) applications. The company wants to use a portal where end users can access assigned AWS accounts and AWS Cloud applications.

  Which AWS service should the company use to meet these requirements?

  A. Amazon Cognito

  B. AWS IAM Identity Center (AWS Single Sign-On)

  C. AWS Identity and Access Management (IAM)

  D. AWS Directory Service for Microsoft Active Directory

  Correct Answer: B

  AWS IAM Identity Center (AWS Single Sign-On) is the AWS service that the company should use to meet the requirements of managing access and permissions for its third-party SaaS applications. AWS Single Sign-On is a cloud-based service that makes it easy to centrally manage single sign-on (SSO) access to multiple AWS accounts and business applications. You can use AWS Single Sign-On to enable your users to sign in to a user portal with their existing corporate credentials and access all of their assigned accounts and applications from one place4.

• Question 529:

  Which of the following is a cost efficiency principle related to the AWS Cloud?

  A. Right-size services based on capacity requirements.

  B. Use the Billing Dashboard to access information about monthly bills.

  C. Use AWS Organizations to combine the expenses of multiple accounts into a single bill.

  D. Tag all AWS resources.

  Correct Answer: A

  One of the cost efficiency principles related to the AWS Cloud is to right-size services based on capacity requirements. This means choosing the most appropriate type and size of AWS resources to meet the performance and scalability needs of the applications, while avoiding over-provisioning or under-provisioning. By right-sizing services, users can optimize the costs and benefits of using the AWS Cloud1

• Question 530:

  A company runs thousands of simultaneous simulations using AWS Batch. Each simulation is stateless, is fault tolerant, and runs for up to 3 hours.

  Which pricing model enables the company to optimize costs and meet these requirements?

  A. Reserved Instances

  B. Spot Instances

  C. On-Demand Instances

  D. Dedicated Instances

  Correct Answer: B

  The correct answer is B because Spot Instances enable the company to optimize costs and meet the requirements. Spot Instances are spare EC2 instances that are available at up to 90% discount compared to On-Demand prices. Spot Instances are suitable for stateless, fault-tolerant, and flexible applications that can run for any duration. The other options are incorrect because they do not enable the company to optimize costs and meet the requirements. Reserved Instances are EC2 instances that are reserved for a specific period of time (one or three years) in exchange for a lower hourly rate. Reserved Instances are suitable for steady-state or predictable workloads that run for a long duration. On-Demand Instances are EC2 instances that are launched and billed at a fixed hourly rate. On-Demand Instances are suitable for short-term, irregular, or unpredictable workloads that cannot be interrupted. Dedicated Instances are EC2 instances that run on hardware that is dedicated to a single customer. Dedicated Instances are suitable for workloads that require regulatory compliance or data isolation. Reference: [Amazon EC2 Instance Purchasing Options]