Amazon CLF-C02 Online Practice Questions and Exam Preparation

Amazon CLF-C02 Online Questions & Answers

• Question 521:

  Which AWS services or features can control VPC traffic? (Select TWO.)

  A. Security groups
  B. AWS Direct Connect
  C. Amazon GuardDuty
  D. Network ACLs
  E. Amazon Connect
  A. Security groups
  D. Network ACLs

  ---

  Explanation

  The AWS services or features that can control VPC traffic are security groups and network ACLs. Security groups are stateful firewalls that control the inbound and outbound traffic at the instance level. You can assign one or more security groups to each instance in a VPC, and specify the rules that allow or deny traffic based on the protocol, port, and source or destination. Network ACLs are stateless firewalls that control the inbound and outbound traffic at the subnet level. You can associate one network ACL with each subnet in a VPC, and specify the rules that allow or deny traffic based on the protocol, port, and source or destination. AWS Direct Connect, Amazon GuardDuty, and Amazon Connect are not services or features that can control VPC traffic. AWS Direct Connect is a service that establishes a dedicated network connection between your premises and AWS. Amazon GuardDuty is a service that monitors your AWS account and workloads for malicious or unauthorized activity. Amazon Connect is a service that provides a cloud-based contact center solution.

• Question 522:

  A company is using a central data platform to manage multiple types of data for its customers. The company wants to use AWS services to discover, transform, and visualize the data. Which combination of AWS services should the company use to meet these requirements? (Choose two.)

  A. AWS Glue
  B. Amazon Elastic File System (Amazon EFS)
  C. Amazon Redshift
  D. Amazon QuickSight
  E. Amazon Quantum Ledger Database (Amazon QLDB)
  A. AWS Glue
  D. Amazon QuickSight

  ---

  Explanation

  AWS Glue is a serverless data integration service that makes it easier to discover, prepare, move, and integrate data from multiple sources for analytics, machine learning (ML), and application development.

  https://aws.amazon.com/glue/

  Amazon QuickSight powers data-driven organizations with unified business intelligence (BI) at hyperscale. With QuickSight, all users can meet varying analytic needs from the same source of truth through modern interactive dashboards,

  paginated reports, embedded analytics, and natural language queries.

  https://aws.amazon.com/quicksight/

• Question 523:

  A company runs MySQL database workloads on self-managed servers in an on-premises data center. The company wants to migrate the database workloads to an AWS managed service. Which migration strategy should the company use?

  A. Rehost
  B. Repurchase
  C. Refactor
  D. Replatform
  D. Replatform

  ---

  Explanation

• Question 524:

  Which option is a perspective that includes foundational capabilities of the AWS Cloud Adoption Framework (AWS CAF)?

  A. Sustainability
  B. Operations
  C. Performance efficiency
  D. Reliability
  B. Operations

  ---

  Explanation

  Operations is an option that is a perspective that includes foundational capabilities of the AWS Cloud Adoption Framework (AWS CAF). Operations is one of the six perspectives of the AWS CAF, along with business, people, governance, platform, and security. Operations focuses on the processes and procedures to support the ongoing management and maintenance of the cloud-based IT assets. It covers topics such as monitoring, backup and recovery, change management, incident management, and automation5. Sustainability is not a perspective of the AWS CAF, but a concept that refers to the ability of a system to operate in an environmentally friendly and socially responsible manner. Performance efficiency is not a perspective of the AWS CAF, but a pillar of the AWS Well-Architected Framework. It focuses on using the right resources and services for the workload, monitoring performance, and continuously improving the efficiency of the solution. Reliability is not a perspective of the AWS CAF, but a pillar of the AWS Well- Architected Framework. It focuses on the ability of a system to recover from infrastructure or service disruptions, dynamically acquire computing resources to meet demand, and mitigate disruptions such as misconfigurations or transient network issues.

• Question 525:

  A company wants to make an upfront commitment for continued use of its production Amazon EC2 instances in exchange for a reduced overall cost. Which pricing options meet these requirements with the LOWEST cost? (Select TWO.)

  A. Spot Instances
  B. On-Demand Instances
  C. Reserved Instances
  D. Savings Plans
  E. Dedicated Hosts
  C. Reserved Instances
  D. Savings Plans

  ---

  Explanation

  Reserved Instances (RIs) are a pricing model that allows you to reserve EC2 instances for a specified period of time (one or three years) and receive a significant discount compared to On-Demand pricing. RIs are suitable for workloads that have predictable usage patterns and require a long-term commitment. You can choose between three payment options: All Upfront, Partial Upfront, or No Upfront. The more you pay upfront, the greater the discount. Savings Plans are a flexible pricing model that can help you reduce your EC2 costs by up to 72% compared to On-Demand pricing, in exchange for a commitment to a consistent amount of usage (measured in $/hour) for a one or three year term. Savings Plans apply to usage across EC2, AWS Lambda, and AWS Fargate. You can choose between two types of Savings Plans: Compute Savings Plans and EC2 Instance Savings Plans. Compute Savings Plans offer the most flexibility and apply to any instance family, size, OS, tenancy, or region. EC2 Instance Savings Plans offer the highest discount and apply to a specific instance family within a region. Spot Instances are a pricing model that allows you to bid for unused EC2 capacity in the AWS cloud and are available at a discount of up to 90% compared to On-Demand pricing. Spot Instances are suitable for fault-tolerant or stateless workloads that can run on heterogeneous hardware and have flexible start and end times. However, Spot Instances are not guaranteed and can be interrupted by AWS at any time if the demand for capacity increases or your bid price is lower than the current Spot price. On-Demand Instances are a pricing model that allows you to pay for compute capacity by the hour or second with no long-term commitments. On-Demand Instances are suitable for short-term, spiky, or unpredictable workloads that cannot be interrupted, or for applications that are being developed or tested on EC2 for the first time. However, On-Demand Instances are the most expensive option among the four pricing models. Dedicated Hosts are physical EC2 servers fully dedicated for your use. Dedicated Hosts can help you reduce costs by allowing you to use your existing server-bound software licenses, such as Windows Server, SQL Server, and SUSE Linux Enterprise Server. Dedicated Hosts can be purchased On-Demand or as part of Savings Plans. Dedicated Hosts are suitable for workloads that need to run on dedicated physical servers or have strict licensing requirements. However, Dedicated Hosts are not the lowest cost option among the four pricing models.

• Question 526:

  A company provides a web-based ecommerce service that runs in two Availability Zones within a single AWS Region. The web service distributes content that is stored in the Amazon S3 Standard storage class. The company wants to improve the web service's performance globally.

  What should the company do to meet this requirement?

  A. Change the S3 storage class to S3 Intelligent-Tiering.
  B. Deploy an Amazon CloudFront distribution to cache web server content in edge locations.
  C. Use Amazon API Gateway for the web service.
  D. Migrate the website ecommerce servers to Amazon EC2 with enhanced networking.
  B. Deploy an Amazon CloudFront distribution to cache web server content in edge locations.

  ---

  Explanation

  Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds, all within a developer-friendly environment. CloudFront can cache web server content in edge locations, which are located closer to the end users, to improve the web service's performance globally2.

• Question 527:

  A company has an application workload that is stateless by design and can sustain occasional downtime. The application performs massively parallel computations.

  Which Amazon EC2 pricing model should the company choose for its application to reduce cost?

  A. On-Demand Instances
  B. Spot Instances
  C. Reserved Instances
  D. Dedicated Instances
  B. Spot Instances

  ---

  Explanation

  Amazon EC2 Spot Instances let you take advantage of unused EC2 capacity in the AWS cloud. Spot Instances are available at up to a 90% discount compared to On- Demand prices. You can use Spot Instances for various stateless, fault-tolerant, or flexible applications such as big data, containerized workloads, CI/CD, web servers, high- performance computing (HPC), and other test and development workloads. Spot Instances are well-suited for massively parallel computations, as they can provide large amounts of compute capacity at a low cost, and can be interrupted with a two-minute notice3

• Question 528:

  A company deployed an Amazon EC2 instance last week. A developer realizes that the EC2 instance is no longer running. The developer reviews a list of provisioned EC2 instances, and the EC2 instance is no longer on the list.

  What can the developer do to generate a recent history of the EC2 instance?

  A. Run Cost Explorer to identify the start time and end time of the EC2 instance.
  B. Use Amazon Inspector to find out when the EC2 instance was stopped.
  C. Perform a search in AWS CloudTrail to find all EC2 instance-related events.
  D. Use AWS Secrets Manager to display hidden termination logs of the EC2 instance.
  C. Perform a search in AWS CloudTrail to find all EC2 instance-related events.

  ---

  Explanation

  AWS CloudTrail is a service that enables governance, compliance, operational auditing, and risk auditing of a customer's AWS account. AWS CloudTrail allows customers to track user activity and API usage across their AWS infrastructure. AWS CloudTrail can also provide a history of EC2 instance events, such as launch, stop, terminate, and reboot. Cost Explorer is a tool that enables customers to visualize, understand, and manage their AWS costs and usage over time. Amazon Inspector is an automated security assessment service that helps improve the security and compliance of applications deployed on AWS. AWS Secrets Manager helps customers protect secrets needed to access their applications, services, and IT resources.

• Question 529:

  A cloud engineer wants to store data in Amazon S3. The engineer will access some of the data yearly and some of the data daily.

  Which S3 storage class will meet these requirements MOST cost-effectively?

  A. S3 Standard
  B. S3 Glacier Deep Archive
  C. S3 One Zone-Infrequent Access (S3 One Zone-IA)
  D. S3 Intelligent-Tiering
  D. S3 Intelligent-Tiering

  ---

  Explanation

  S3 Intelligent-Tiering is cost-effective for data with unpredictable access patterns. It automatically moves data between two access tiers (frequent and infrequent) based on access patterns, which is suitable for data accessed daily or infrequently. S3 Glacier Deep Archive is for archival data accessed infrequently, and S3 One Zone-IA is for infrequent access data stored in a single availability zone, which may not be ideal for data accessed daily.

• Question 530:

  Which AWS service or feature provides log information of the inbound and outbound traffic on network interfaces in a VPC?

  A. Amazon CloudWatch Logs
  B. AWS CloudTrail
  C. VPC Flow Logs
  D. AWS Identity and Access Management (IAM)
  C. VPC Flow Logs

  ---

  Explanation

  VPC flow logs is a feature that enables you to capture information about the IP traffic going to and from network interfaces in your VPC. Flow logs data can be published to either Amazon CloudWatch Logs or Amazon S3. You can monitor your VPC flow logs to gain operational visibility about your network dependencies and traffic patterns, detect anomalies and prevent data leakage, or troubleshoot network connectivity and configuration issues. https://aws.amazon.com/vpc/faqs/#:~:text=VPC%20flow%20logs%20is%20a,network%20interfaces%20in%20your%20VPC.