Amazon Amazon Certifications CLF-C02 Questions & Answers

• Question 551:

  A company wants its Amazon EC2 instances to operate in a highly available environment, even if there is a natural disaster in a particular geographic area.

  Which solution achieves this goal?

  A. Use EC2 instances in a single Availability Zone.

  B. Use EC2 instances in multiple AWS Regions.

  C. Use EC2 instances in multiple edge locations.

  D. Use Amazon CloudFront with the EC2 instances configured as the source.

  Correct Answer: B

  To achieve high availability in the event of a natural disaster, the company should use EC2 instances in multiple AWS Regions. AWS Regions are geographically isolated areas that consist of multiple Availability Zones. Availability Zones are physically separate locations within an AWS Region that are engineered to be isolated from failures. By using EC2 instances in multiple AWS Regions, the company can ensure that its applications can continue to run even if one Region is affected by a disaster. AWS Global InfrastructureAWS Well-Architected Framework

• Question 552:

  Which activity is a customer responsibility in the AWS Cloud according to the AWS shared responsibility model?

  A. Ensuring network connectivity from AWS to the internet

  B. Patching and fixing flaws within the AWS Cloud infrastructure

  C. Ensuring the physical security of cloud data centers

  D. Ensuring Amazon EBS volumes are backed up

  Correct Answer: D

  The AWS shared responsibility model describes how AWS and the customer share responsibility for security and compliance of the AWS environment. AWS is responsible for the security of the cloud, which includes the physical security of AWS facilities, the infrastructure, hardware, software, and networking that run AWS services. The customer is responsible for security in the cloud, which includes the configuration of security groups, the encryption of customer data on AWS, the management of AWS Lambda infrastructure, and the management of network throughput of each AWS Region. One of the customer responsibilities is to ensure that Amazon EBS volumes are backed up.

• Question 553:

  Which AWS service or feature is used to Troubleshoot network connectivity issues between Amazon EC2 instances?

  A. AWS Certificate Manager (ACM)

  B. Internet gateway

  C. VPC Flow Logs

  D. AWS CloudHSM

  Correct Answer: C

  VPC Flow Logs is the AWS service or feature that is used to troubleshoot network connectivity issues between Amazon EC2 instances. VPC Flow Logs is a feature that enables users to capture information about the IP traffic going to and from network interfaces in their VPC. VPC Flow Logs can help users monitor and diagnose network- related issues, such as traffic not reaching an instance, or an instance not responding to requests. VPC Flow Logs can be published to Amazon CloudWatch Logs, Amazon S3, or Amazon Kinesis Data Firehose for analysis and storage.

• Question 554:

  Which AWS Support plan assigns an AWS concierge agent to a company's account?

  A. AWS Basic Support

  B. AWS Developer Support

  C. AWS Business Support

  D. AWS Enterprise Support

  Correct Answer: D

  AWS Enterprise Support is the AWS Support plan that assigns an AWS concierge agent to a company's account. AWS Enterprise Support is the highest level of support that AWS offers, and it provides the most comprehensive and personalized assistance. An AWS concierge agent is a dedicated technical account manager who acts as a single point of contact for the company and helps to optimize the AWS environment, resolve issues, and access AWS experts. For more information, see [AWS Support Plans] and [AWS Concierge Support].

• Question 555:

  Which of the following are components of an AWS Site-to-Site VPN connection? (Select TWO.)

  A. AWS Storage Gateway

  B. Virtual private gateway

  C. NAT gateway

  D. Customer gateway

  E. Internet gateway

  Correct Answer: BD

  The correct answers are B and D because a virtual private gateway and a customer gateway are components of an AWS Site-to-Site VPN connection. A virtual private gateway is the AWS side of the VPN connection that attaches to the customer's VPC. A customer gateway is the customer side of the VPN connection that resides in the customer's network. The other options are incorrect because they are not components of an AWS Site-to-Site VPN connection. AWS Storage Gateway is a service that connects on- premises software applications with cloud-based storage. NAT gateway is a service that enables instances in a private subnet to connect to the internet or other AWS services, but prevents the internet from initiating a connection with those instances. Internet gateway is a service that enables communication between instances in a VPC and the internet. Reference: [What is AWS Site-to-Site VPN?]

• Question 556:

  Which AWS service should a cloud engineer use to view API calls to AWS services?

  A. Amazon CloudWatch

  B. AWS CloudTrail

  C. AWS Config

  D. AWS Artifact

  Correct Answer: B

  The correct answer is B because AWS CloudTrail is an AWS service that a cloud engineer can use to view API calls to AWS services. AWS CloudTrail is a service that enables customers to track user activity and API usage across their AWS account. AWS CloudTrail records the details of every API call made to AWS services, such as the identity of the caller, the time of the call, the source IP address of the caller, the parameters and responses of the call, and more. Customers can use AWS CloudTrail to audit, monitor, and troubleshoot their AWS resources and actions. The other options are incorrect because they are not AWS services that a cloud engineer can use to view API calls to AWS services. Amazon CloudWatch is an AWS service that enables customers to collect, analyze, and visualize metrics, logs, and events from their AWS resources and applications. AWS Config is an AWS service that enables customers to assess, audit, and evaluate the configurations of their AWS resources. AWS Artifact is an AWS service that provides customers with on-demand access to AWS compliance reports and select online agreements. Reference: AWS CloudTrail FAQs

• Question 557:

  A company has an application with robust hardware requirements. The application must be accessed by students who are using lightweight, low-cost laptops.

  Which AWS service will help the company deploy the application without investing in backend infrastructure or high end client hardware?

  A. Amazon AppStream 2.0

  B. AWS AppSync

  C. Amazon WorkLink

  D. AWS Elastic Beanstalk

  Correct Answer: A

  The correct answer is A because Amazon AppStream 2.0 is a service that will help the company deploy the application without investing in backend infrastructure or high end client hardware. Amazon AppStream 2.0 is a fully managed, secure application streaming service that allows customers to stream desktop applications from AWS to any device running a web browser. Amazon AppStream 2.0 handles the provisioning, scaling, patching, and maintenance of the backend infrastructure, and delivers high performance and responsive user experience. The other options are incorrect because they are not services that will help the company deploy the application without investing in backend infrastructure or high end client hardware. AWS AppSync is a service that enables customers to create flexible APIs for synchronizing data across multiple data sources. Amazon WorkLink is a service that enables customers to provide secure, one-click access to internal websites and web apps from mobile devices. AWS Elastic Beanstalk is a service that enables customers to deploy and manage web applications using popular platforms such as Java, .NET, PHP, and Node.js. Reference: [Amazon AppStream 2.0 FAQs]

• Question 558:

  When a user wants to utilize their existing per-socket, per-core, or per-virtual machine software licenses for a Microsoft Windows server running on AWS, which Amazon EC2 instance type is required?

  A. Spot Instances

  B. Dedicated Instances

  C. Dedicated Hosts

  D. Reserved Instances

  Correct Answer: C

  The correct answer is C because Dedicated Hosts are Amazon EC2 instances that are required when a user wants to utilize their existing per-socket, per-core, or per-virtual machine software licenses for a Microsoft Windows server running on AWS. Dedicated Hosts are physical servers that are dedicated to a single customer. Dedicated Hosts allow customers to use their existing server-bound software licenses, such as Windows Server, SQL Server, and SUSE Linux Enterprise Server, subject to their license terms. The other options are incorrect because they are not Amazon EC2 instances that are required when a user wants to utilize their existing per-socket, per-core, or per-virtual machine software licenses for a Microsoft Windows server running on AWS. Spot Instances are spare Amazon EC2 instances that are available at up to 90% discount compared to On-Demand prices. Spot Instances are suitable for stateless, fault-tolerant, and flexible workloads that can recover from interruptions easily. Dedicated Instances are Amazon EC2 instances that run on hardware that is dedicated to a single customer, but not to a specific physical server. Dedicated Instances do not allow customers to use their existing server-bound software licenses. Reserved Instances are Amazon EC2 instances that are reserved for a specific period of time (one or three years) in exchange for a lower hourly rate. Reserved Instances are suitable for steady-state or predictable workloads that run for a long duration. Reserved Instances do not allow customers to use their existing server-bound software licenses. Reference: Dedicated Hosts, Amazon EC2 Instance Purchasing Options

• Question 559:

  A large company wants to track the combined AWS usage costs of all of its linked accounts.

  How can this be accomplished?

  A. Use AWS Trusted Advisor to generate customized summary reports.

  B. Use AWS Organizations to generate consolidated billing reports.

  C. Use AWS Budgets to set utilization targets and receive summary reports.

  D. Use the AWS Control Tower dashboard to get a summary report of all linked account costs.

  Correct Answer: B

  The company can use AWS Organizations to track the combined AWS usage costs of all of its linked accounts. AWS Organizations is a service that enables you to consolidate multiple AWS accounts into an organization that you can manage centrally. You can use AWS Organizations to create a consolidated billing report that shows the charges incurred by each account in your organization as well as the total charges across all accounts. You can also use AWS Organizations to apply policies and controls to your accounts to help you manage costs and security5.

• Question 560:

  Which of the following are design principles for reliability in the AWS Cloud? (Select TWO.)

  A. Build architectures with tightly coupled resources.

  B. Use AWS Trusted Advisor to meet security best practices.

  C. Use automation to recover immediately from failure.

  D. Rightsize Amazon EC2 instances to ensure optimal performance.

  E. Simulate failures to test recovery processes.

  Correct Answer: CE

  The design principles for reliability in the AWS Cloud are: Test recovery procedures. The best way to ensure that systems can recover from failures is to regularly test them using simulated scenarios. This can help identify gaps and improve the recovery process. Automatically recover from failure. By using automation, systems can detect and correct failures without human intervention. This can reduce the impact and duration of failures and improve the availability of the system. Scale horizontally to increase aggregate system availability. By adding more redundant resources to the system, the impact of individual resource failures can be reduced. This can also improve the performance and scalability of the system. Stop guessing capacity. By using monitoring and automation, systems can adjust the capacity based on the demand and performance metrics. This can prevent failures due to insufficient or excessive capacity and optimize the cost and efficiency of the system. Manage change in automation. By using automation, changes to the system can be applied in a consistent and controlled manner. This can reduce the risk of human errors and configuration drifts that can cause failures. AWS Well-Architected Framework