Amazon Amazon Certifications CLF-C02 Questions & Answers

• Question 541:

  Which of the following is an AWS value proposition that describes a user's ability to scale infrastructure based on demand?

  A. Speed of innovation

  B. Resource elasticity

  C. Decoupled architecture

  D. Global deployment

  Correct Answer: B

  Resource elasticity is an AWS value proposition that describes a user's ability to scale infrastructure based on demand. Resource elasticity means that the user can provision or deprovision resources quickly and easily, without any upfront commitment or long-term contract. Resource elasticity can help the user optimize the cost and performance of the application, as well as respond to changing business needs and customer expectations. Resource elasticity can be achieved by using services such as Amazon EC2, Amazon S3, Amazon RDS, Amazon DynamoDB, Amazon ECS, and AWS Lambda. [AWS Cloud Value Framework] AWS Certified Cloud Practitioner - aws.amazon.com

• Question 542:

  Which of the following is a characteristic of the AWS account root user?

  A. The root user is the only user that can be configured with multi-factor authentication (MFA).

  B. The root user is the only user that can access the AWS Management Console.

  C. The root user is the first sign-in identity that is available when an AWS account is created.

  D. The root user has a password that cannot be changed.

  Correct Answer: C

  The AWS account root user is the first sign-in identity that is available when an AWS account is created. It has complete access to all AWS services and resources in the account. The root user email address and password are the same credentials that are used to sign in to the AWS Management Console4. The root user should be used only to perform a few account and service management tasks. For day-to-day tasks, it is recommended to use AWS Identity and Access Management (IAM) users or roles instead.

• Question 543:

  A company needs to identify the last time that a specific user accessed the AWS Management Console.

  Which AWS service will provide this information?

  A. Amazon Cognito

  B. AWS CloudTrail

  C. Amazon Inspector

  D. Amazon GuardDuty

  Correct Answer: B

  AWS CloudTrail is the service that will provide the information about the last time that a specific user accessed the AWS Management Console. AWS CloudTrail is a service that records the API calls and events made by or on behalf of your AWS account. You can use AWS CloudTrail to view, search, and download the history of AWS console sign-in events, which include the user name, date, time, source IP address, and other details of the sign-in activity. Amazon Cognito, Amazon Inspector, and Amazon GuardDuty are not services that will provide this information. Amazon Cognito is a service that provides user authentication and authorization for web and mobile applications. Amazon Inspector is a service that assesses the security and compliance of your applications running on AWS. Amazon GuardDuty is a service that monitors your AWS account and workloads for malicious or unauthorized activity.

• Question 544:

  A company is running applications on Amazon EC2 instances in the same AWS account for several different projects. The company wants to track the infrastructure costs for each of the projects separately. The company must conduct this tracking with the least possible impact to the existing infrastructure and with no additional cost.

  What should the company do to meet these requirements?

  A. Use a different EC2 instance type for each project.

  B. Publish project-specific custom Amazon CloudWatch metrics for each application.

  C. Deploy EC2 instances for each project in a separate AWS account.

  D. Use cost allocation tags with values that are specific to each project.

  Correct Answer: D

  The correct answer is D because cost allocation tags are a way to track the infrastructure costs for each of the projects separately. Cost allocation tags are key-value pairs that can be attached to AWS resources, such as EC2 instances, and used to categorize and group them for billing purposes. The other options are incorrect because they do not meet the requirements of the question. Use a different EC2 instance type for each project does not help to track the costs for each project, and may impact the performance and compatibility of the applications. Publish project-specific custom Amazon CloudWatch metrics for each application does not help to track the costs for each project, and may incur additional charges for using CloudWatch. Deploy EC2 instances for each project in a separate AWS account does help to track the costs for each project, but it impacts the existing infrastructure and incurs additional charges for using multiple accounts. Reference: Using Cost Allocation Tags

• Question 545:

  Which AWS feature or resource is a deployable Amazon EC2 instance template that is prepackaged with software and security requirements?

  A. Amazon Elastic Block Store (Amazon EBS) volume

  B. AWS CloudFormation template

  C. Amazon Elastic Block Store (Amazon EBS) snapshot

  D. Amazon Machine Image (AMI)

  Correct Answer: D

  An Amazon Machine Image (AMI) is a deployable Amazon EC2 instance template that is prepackaged with software and security requirements. It provides the information required to launch an instance, which is a virtual server in the cloud. You can use an AMI to launch as many instances as you need. You can also create your own custom AMIs or use AMIs shared by other AWS users1.

• Question 546:

  A company has a workload that requires data to be collected, analyzed, and stored on premises. The company wants to extend the use of AWS services to run on premises with access to the company network and the company's VPC.

  Which AWS service meets this requirement?

  A. AWS Outposts

  B. AWS Storage Gateway

  C. AWS Direct Connect

  D. AWS Snowball

  Correct Answer: A

  AWS Outposts is an AWS service that meets the requirement of running AWS services on premises with access to the company network and the company's VPC. AWS Outposts is a fully managed service that extends AWS infrastructure, AWS services, APIs, and tools to virtually any datacenter, co-location space, or on-premises facility for a truly consistent hybrid experience. AWS Outposts is ideal for workloads that require low latency access to on-premises systems, local data processing, or local data storage2.

• Question 547:

  A company has two AWS accounts in an organization in AWS Organizations for consolidated billing. All of the company's AWS resources are hosted in one AWS Region.

  Account A has purchased five Amazon EC2 Standard Reserved Instances (RIs) and has four EC2 instances running. Account B has not purchased any RIs and also has four EC2 instances running.

  Which statement is true regarding pricing for these eight instances?

  A. The eight instances will be charged as regular instances.

  B. Four instances will be charged as RIs, and four will be charged as regular instances.

  C. Five instances will be charged as RIs, and three will be charged as regular instances.

  D. The eight instances will be charged as RIs.

  Correct Answer: B

  The statement that is true regarding pricing for these eight instances is: four instances will be charged as RIs, and four will be charged as regular instances. Amazon EC2 Reserved Instances (RIs) are a pricing model that allows users to reserve EC2 instances for a specific term and benefit from discounted hourly rates and capacity reservation. RIs are purchased for a specific AWS Region, and can be shared across multiple accounts in an organization in AWS Organizations for consolidated billing. However, RIs are applied on a first-come, first-served basis, and there is no guarantee that all instances in the organization will be charged at the RI rate. In this case, Account A has purchased five RIs and has four instances running, so all four instances will be charged at the RI rate. Account B has not purchased any RIs and also has four instances running, so all four instances will be charged at the regular rate. The remaining RI in Account A will not be applied to any instance in Account B, and will be wasted.

• Question 548:

  A company wants to centrally manage security policies and billing services within a multi- account AWS environment. Which AWS service should the company use to meet these requirements?

  A. AWS Identity and Access Management (IAM)

  B. AWS Organizations

  C. AWS Resource Access Manager (AWS RAM)

  D. AWS Config

  Correct Answer: B

  AWS Organizations is a service that helps you centrally manage and govern your environment as you grow and scale your AWS resources. You can use AWS Organizations to create groups of accounts and apply policies to them. You can also use AWS Organizations to consolidate billing for multiple accounts. Therefore, the correct answer is B. You can learn more about AWS Organizations and its features from this page.

• Question 549:

  What is an Availability Zone?

  A. A location where users can deploy compute, storage, database, and other select AWS services where no AWS Region currently exists

  B. One or more discrete data centers with redundant power, networking, and connectivity

  C. One or more clusters of servers where new workloads can be deployed

  D. A fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to users globally

  Correct Answer: B

  An Availability Zone is one or more discrete data centers with redundant power, networking, and connectivity. Availability Zones are part of the AWS global infrastructure, which consists of AWS Regions, Availability Zones, and edge locations. Availability Zones are physically separate locations within an AWS Region that are engineered to be isolated from failures and connected by low-latency, high-throughput, and highly redundant networking. Each Availability Zone contains one or more data centers that house the servers and storage devices that run AWS services. Availability Zones enable users to design and operate fault-tolerant and high-availability applications on AWS. AWS Global InfrastructureAWS Certified Cloud Practitioner - aws.amazon.com

• Question 550:

  Which pillar of the AWS Well-Architected Framework includes a design principle about measuring the overall efficiency of workloads in terms of business value?

  A. Operational excellence

  B. Security

  C. Reliability

  D. Cost optimization

  Correct Answer: A

  The operational excellence pillar of the AWS Well-Architected Framework includes a design principle about measuring the overall efficiency of workloads in terms of business value. This principle states that you should monitor and measure key performance indicators (KPIs) and set targets and thresholds that align with your business goals. You should also use feedback loops to continuously improve your processes and procedures1.