Amazon Amazon Certifications CLF-C02 Questions & Answers

• Question 571:

  A company has a social media platform in which users upload and share photos with other users. The company wants to identify and remove inappropriate photos. The company has no machine learning (ML) scientists and must build this

  detection capability with no ML expertise.

  Which AWS service should the company use to build this capability?

  A. Amazon SageMaker

  B. Amazon Textract

  C. Amazon Rekognition

  D. Amazon Comprehend

  Correct Answer: C

  Amazon Rekognition is the AWS service that the company should use to build the capability of identifying and removing inappropriate photos. Amazon Rekognition is a service that uses deep learning technology to analyze images and videos for various purposes, such as face detection, object recognition, text extraction, and content moderation. Amazon Rekognition can help users detect unsafe or inappropriate content in images and videos, such as nudity, violence, or drugs, and provide confidence scores for each label. Amazon Rekognition does not require any machine learning expertise, and users can easily integrate it with other AWS services

• Question 572:

  Which task is the responsibility of a company that is using Amazon RDS?

  A. Provision the underlying infrastructure.

  B. Create IAM policies to control administrative access to the service.

  C. Install the cables to connect the hardware for compute and storage.

  D. Install and patch the RDS operating system.

  Correct Answer: B

  The correct answer is B because AWS IAM policies can be used to control administrative access to the Amazon RDS service. The other options are incorrect because they are the responsibilities of AWS, not the company that is using Amazon RDS. AWS manages the provisioning, cabling, installation, and patching of the underlying infrastructure for Amazon RDS. Reference: Amazon RDS FAQs

• Question 573:

  Company wants to protect its AWS Cloud information, systems, and assets while performing risk assessment and mitigation tasks.

  Which pillar of the AWS Well-Architected Framework is supported by these goals?

  A. Reliability

  B. Security

  C. Operational excellence

  D. Performance efficiency

  Correct Answer: B

  The pillar of the AWS Well-Architected Framework that is supported by the goals of protecting AWS Cloud information, systems, and assets while performing risk assessment and mitigation tasks is security. Security is the ability to protect information, systems, and assets while delivering business value through risk assessments and mitigation strategies. The security pillar covers topics such as identity and access management, data protection, infrastructure protection, detective controls, incident response, and compliance

• Question 574:

  Which services can be used to deploy applications on AWS? (Select TWO.)

  A. AWS Elastic Beanstalk

  B. AWS Config

  C. AWS OpsWorks

  D. AWS Application Discovery Service

  E. Amazon Kinesis

  Correct Answer: AC

  The services that can be used to deploy applications on AWS are: AWS Elastic Beanstalk. This is a service that simplifies the deployment and management of web applications on AWS. Users can upload their application code and Elastic Beanstalk automatically handles the provisioning, scaling, load balancing, monitoring, and health checking of the resources needed to run the application. Users can also retain full control and access to the underlying resources and customize their configuration settings. Elastic Beanstalk supports multiple platforms, such as Java, .NET, PHP, Node.js, Python, Ruby, Go, and Docker. [AWS Elastic Beanstalk Overview] AWS Certified Cloud Practitioner - aws.amazon.com AWS OpsWorks. This is a service that provides configuration management and automation for AWS resources. Users can define the application architecture and the configuration of each resource using Chef or Puppet, which are popular open- source automation platforms. OpsWorks then automatically creates and configures the resources according to the user's specifications. OpsWorks also provides features such as auto scaling, monitoring, and integration with other AWS services. OpsWorks has two offerings: OpsWorks for Chef Automate and OpsWorks for Puppet Enterprise. [AWS OpsWorks Overview] AWS Certified Cloud Practitioner - aws.amazon.com

• Question 575:

  Which statement describes a characteristic of the AWS global infrastructure?

  A. Edge locations contain multiple AWS Regions.

  B. AWS Regions contain multiple Regional edge caches.

  C. Availability Zones contain multiple data centers.

  D. Each data center contains multiple edge locations.

  Correct Answer: C

  Availability Zones contain multiple data centers. This is a characteristic of the AWS global infrastructure, which consists of AWS Regions, Availability Zones, and edge locations. AWS Regions are geographically isolated areas that contain multiple Availability Zones. Availability Zones are physically separate locations within an AWS Region that are engineered to be isolated from failures and connected by low-latency, high- throughput, and highly redundant networking. Each Availability Zone contains one or more data centers that house the servers and storage devices that run AWS services. Edge locations are sites that are located closer to the end users and provide caching and content delivery services. AWS Global InfrastructureAWS Certified Cloud Practitioner - aws.amazon.com

• Question 576:

  A company has been storing monthly reports in an Amazon S3 bucket. The company exports the report data into comma-separated values (.csv) files. A developer wants to write a simple query that can read all of these files and generate a summary report.

  Which AWS service or feature should the developer use to meet these requirements with the LEAST amount of operational overhead?

  A. Amazon S3 Select

  B. Amazon Athena

  C. Amazon Redshift

  D. Amazon EC2

  Correct Answer: B

  Amazon Athena is the AWS service that the developer should use to write a simple query that can read all of the .csv files stored in an Amazon S3 bucket and generate a summary report. Amazon Athena is an interactive query service that allows users to analyze data in Amazon S3 using standard SQL. Amazon Athena does not require any server setup or management, and users only pay for the queries they run. Amazon Athena can handle various data formats, including .csv, and can integrate with other AWS services such as Amazon QuickSight for data visualization

• Question 577:

  Using Amazon Elastic Container Service (Amazon ECS) to break down a monolithic architecture into microservices is an example of:

  A. a loosely coupled architecture.

  B. a tightly coupled architecture.

  C. a stateless architecture.

  D. a stateful architecture.

  Correct Answer: A

  Using Amazon Elastic Container Service (Amazon ECS) to break down a monolithic architecture into microservices is an example of a loosely coupled architecture. A loosely coupled architecture is one where the components are independent and can communicate with each other through well-defined interfaces. This allows for greater scalability, flexibility, and resilience. A tightly coupled architecture is one where the components are interdependent and rely on each other for functionality. This can lead to increased complexity, fragility, and difficulty in changing or scaling the system. Amazon ECS OverviewAWS Well-Architected Framework

• Question 578:

  Which benefit is included with an AWS Enterprise Support plan?

  A. AWS Partner Network (APN) support at no cost

  B. Designated support from an AWS technical account manager (TAM)

  C. On-site support from AWS engineers

  D. AWS managed compliance as code with AWS Config

  Correct Answer: B

  AWS offers different support plans to meet the needs of different customers. The AWS Enterprise Support plan is the highest level of support that provides customers with concierge-like service, where the main focus is helping them achieve their outcomes and find success in the cloud. One of the benefits of the AWS Enterprise Support plan is that customers get designated support from an AWS technical account manager (TAM), who provides consultative architectural and operational guidance based on their applications and use cases. Therefore, the correct answer is B. You can learn more about AWS support plans and their benefits from this page.

• Question 579:

  Which of the following is a benefit of decoupling an AWS Cloud architecture?

  A. Reduced latency

  B. Ability to upgrade components independently

  C. Decreased costs

  D. Fewer components to manage

  Correct Answer: B

  A benefit of decoupling an AWS Cloud architecture is the ability to upgrade components independently. Decoupling is a way of designing systems to reduce interdependencies and minimize the impact of changes. Decoupling allows components to interact with each other through well-defined interfaces, rather than direct references. This reduces the risk of failures and errors propagating across the system, and enables greater scalability, availability, and maintainability. By decoupling an AWS Cloud architecture, the user can upgrade or modify one component without affecting the other components5.

• Question 580:

  Which AWS features will meet these requirements? (Select TWO.)

  A. Security groups

  B. Network ACLs

  C. S3 bucket policies

  D. IAM user policies

  E. S3 bucket versioning

  Correct Answer: CD

  The correct answers are C and D because S3 bucket policies and IAM user policies are AWS features that will meet the requirements. S3 bucket policies are access policies that can be attached to Amazon S3 buckets to grant or deny permissions to the bucket and the objects it contains. S3 bucket policies can be used to control who has permission to read, write, or delete objects that the company stores in the S3 bucket. IAM user policies are access policies that can be attached to IAM users to grant or deny permissions to AWS resources and actions. IAM user policies can be used to control who has permission to read, write, or delete objects that the company stores in the S3 bucket. The other options are incorrect because they are not AWS features that will meet the requirements. Security groups and network ACLs are AWS features that act as firewalls to control inbound and outbound traffic to and from Amazon EC2 instances and subnets. Security groups and network ACLs do not control who has permission to read, write, or delete objects that the company stores in the S3 bucket. S3 bucket versioning is an AWS feature that enables users to keep multiple versions of the same object in the same bucket. S3 bucket versioning can be used to recover from accidental overwrites or deletions of objects, but it does not control who has permission to read, write, or delete objects that the company stores in the S3 bucket. Reference: Using Bucket Policies and User Policies, Security Groups for Your VPC, Network ACLs, [Using Versioning]