Amazon Amazon Certifications CLF-C02 Questions & Answers

• Question 561:

  Which AWS service or tool provides users with the ability to monitor AWS service quotas?

  A. AWS CloudTrail

  B. AWS Cost and Usage Reports

  C. AWS Trusted Advisor D. AWS Budgets

  Correct Answer: C

  The correct answer is C because AWS Trusted Advisor is an AWS service or tool that provides users with the ability to monitor AWS service quotas. AWS Trusted Advisor is an online tool that provides users with real-time guidance to help them provision their resources following AWS best practices. One of the categories of checks that AWS Trusted Advisor performs is service limits, which monitors the usage of each AWS service and alerts users when they are close to reaching the default limit. The other options are incorrect because they are not AWS services or tools that provide users with the ability to monitor AWS service quotas. AWS CloudTrail is a service that enables users to track user activity and API usage across their AWS account. AWS Cost and Usage Reports is a tool that enables users to access comprehensive information about their AWS costs and usage. AWS Budgets is a tool that enables users to plan their service usage, costs, and reservations. Reference: [AWS Trusted Advisor FAQs]

• Question 562:

  Which AWS service or feature is used to send both text and email messages from distributed applications?

  A. Amazon Simple Notification Service (Amazon SNS)

  B. Amazon Simple Email Service (Amazon SES)

  C. Amazon CloudWatch alerts

  D. Amazon Simple Queue Service (Amazon SQS)

  Correct Answer: A

  Amazon Simple Notification Service (Amazon SNS) is the AWS service or feature that is used to send both text and email messages from distributed applications. Amazon SNS is a fully managed pub/sub messaging service that enables the user to send messages to multiple subscribers or endpoints, such as email addresses, phone numbers, HTTP endpoints, AWS Lambda functions, and more. Amazon SNS can be used to send notifications, alerts, confirmations, and reminders from applications to users or other applications4.

• Question 563:

  Which task is a customer's responsibility, according to the AWS shared responsibility model?

  A. Management of the guest operating systems

  B. Maintenance of the configuration of infrastructure devices

  C. Management of the host operating systems and virtualization

  D. Maintenance of the software that powers Availability Zones A company has refined its workload to use specific AWS services to improve efficiency and reduce cost.

  Correct Answer: A

  Management of the guest operating systems is a customer's responsibility, according to the AWS shared responsibility model. The AWS shared responsibility model defines the different security and compliance responsibilities of AWS and the customer. AWS is responsible for the security of the cloud, which includes the physical infrastructure, hardware, software, and facilities that run the AWS Cloud. The customer is responsible for security in the cloud, which includes the configuration and management of the guest operating systems, applications, data, and network traffic protection

• Question 564:

  Which benefit does Amazon Rekognition provide?

  A. The ability to place watermarks on images

  B. The ability to detect objects that appear in pictures

  C. The ability to resize millions of images automatically

  D. The ability to bid on object detection jobs

  Correct Answer: B

  Amazon Rekognition is a service that provides deep learning-based image and video analysis. One of the benefits of Amazon Rekognition is the ability to detect objects that appear in pictures, such as faces, landmarks, animals, text, and scenes. This can enable applications to perform tasks such as face recognition, face verification, face comparison, face search, celebrity recognition, emotion detection, age range estimation, gender identification, facial analysis, facial expression recognition, and more. Amazon Rekognition OverviewAWS Certified Cloud Practitioner - aws.amazon.com

• Question 565:

  A large company has a workload that requires hardware to remain on premises. The company wants to use the same management and control plane services that it currently uses on AWS.

  Which AWS service should the company use to meet these requirements?

  A. AWS Device Farm

  B. AWS Fargate

  C. AWS Outposts

  D. AWS Ground Station

  Correct Answer: C

  The correct answer is C because AWS Outposts is an AWS service that enables the company to meet the requirements. AWS Outposts is a fully managed service that extends AWS infrastructure, services, APIs, and tools to virtually any datacenter, co- location space, or on-premises facility. AWS Outposts allows customers to run their workloads on the same hardware and software that AWS uses in its cloud, while maintaining local access and control. The other options are incorrect because they are not AWS services that enable the company to meet the requirements. AWS Device Farm is an AWS service that enables customers to test their mobile and web applications on real devices in the AWS Cloud. AWS Fargate is an AWS service that enables customers to run containers without having to manage servers or clusters. AWS Ground Station is an AWS service that enables customers to communicate with satellites and downlink data from orbit. Reference: AWS Outposts FAQs

• Question 566:

  Which of the following acts as an instance-level firewall to control inbound and outbound access?

  A. Network access control list

  B. Security groups

  C. AWS Trusted Advisor

  D. Virtual private gateways

  Correct Answer: B

  The correct answer is B because security groups are AWS features that act as instance-level firewalls to control inbound and outbound access. Security groups are virtual firewalls that can be attached to one or more Amazon EC2 instances. Users can configure rules for security groups to allow or deny traffic based on protocols, ports, and source or destination IP addresses. The other options are incorrect because they are not AWS features that act as instance-level firewalls to control inbound and outbound access. Network access control list is an AWS feature that acts as a subnet-level firewall to control inbound and outbound access. AWS Trusted Advisor is an AWS service that provides real- time guidance to help users follow AWS best practices for security, performance, cost optimization, and fault tolerance. Virtual private gateways are AWS features that enable users to create a secure and encrypted connection between their VPC and their on-premises network. Reference: Security Groups for Your VPC

• Question 567:

  Which design principles support the reliability pillar of the AWS Well-Architected Framework? (Select TWO.)

  A. Perform operations as code.

  B. Enable traceability.

  C. Automatically scale to meet demand.

  D. Deploy resources globally to improve response time.

  E. Automatically recover from failure.

  Correct Answer: CE

  The design principles that support the reliability pillar of the AWS Well- Architected Framework are: automatically scale to meet demand, and automatically recover from failure. These principles help users design systems that can handle changes in load, avoid disruptions, and resume normal operations quickly. Automatically scaling to meet demand means adjusting the capacity of the system based on the current and anticipated workload, using services such as AWS Auto Scaling, Amazon EC2, and AWS Lambda. Automatically recovering from failure means detecting and resolving issues, using services such as Amazon CloudWatch, AWS CloudFormation, and AWS CloudTrail

• Question 568:

  Which AWS service provides the ability to host a NoSQL database in the AWS Cloud?

  A. Amazon Aurora

  B. Amazon DynamoDB

  C. Amazon RDS

  D. Amazon Redshift

  Correct Answer: B

  Amazon DynamoDB is a fully managed NoSQL database service that provides fast and predictable performance with seamless scalability. It supports both key- value and document data models, and allows you to create tables that can store and retrieve any amount of data, and serve any level of request traffic. You can also use DynamoDB Streams to capture data modification events in DynamoDB tables.

• Question 569:

  A company wants to establish a security layer in its VPC that will act as a firewall to control subnet traffic.

  Which AWS service or feature will meet this requirement?

  A. Routing tables

  B. Network access control lists (network ACLs)

  C. Security groups

  D. Amazon GuardDuty

  Correct Answer: C

  Security groups are the service or feature that meets the requirement of establishing a security layer in a VPC that will act as a firewall to control subnet traffic. Security groups are stateful firewalls that control the inbound and outbound traffic at the instance level. You can assign one or more security groups to each instance in a VPC, and specify the rules that allow or deny traffic based on the protocol, port, and source or destination. Security groups are associated with network interfaces, and therefore apply to all the instances in the subnets that use those network interfaces. Routing tables are used to direct traffic between subnets and gateways, not to filter traffic. Network ACLs are stateless firewalls that control the inbound and outbound traffic at the subnet level, but they are less granular and more cumbersome to manage than security groups. Amazon GuardDuty is a threat detection service that monitors your AWS account and workloads for malicious or unauthorized activity, not a firewall service.

• Question 570:

  Which of the following is an advantage of AWS Cloud computing?

  A. Trade security for elasticity.

  B. Trade operational excellence for agility.

  C. Trade fixed expenses for variable expenses.

  D. Trade elasticity for performance.

  Correct Answer: C

  The correct answer is C because AWS Cloud computing allows customers to trade fixed expenses for variable expenses. This means that customers only pay for the resources they use, and can scale up or down as needed. The other

  options are incorrect because they are not advantages of AWS Cloud computing. Trade security for elasticity means that customers have to compromise on the protection of their data and applications in order to adjust their capacity quickly.

  Trade operational excellence for agility means that customers have to sacrifice the quality and reliability of their operations in order to respond to changing needs faster. Trade elasticity for performance means that customers have to limit their

  ability to scale up or down in order to achieve higher speed and efficiency.

  Reference: What is Cloud Computing?