Amazon Amazon Certifications CLF-C02 Questions & Answers

• Question 581:

  Which duties are the responsibility of a company that is using AWS Lambda? (Select TWO.)

  A. Security inside of code

  B. Selection of CPU resources

  C. Patching of operating system

  D. Writing and updating of code

  E. Security of underlying infrastructure

  Correct Answer: AD

  The duties that are the responsibility of a company that is using AWS Lambda are security inside of code and writing and updating of code. AWS Lambda is a serverless compute service that allows you to run code without provisioning or managing servers, scaling, or patching. AWS Lambda takes care of the security of the underlying infrastructure, such as the operating system, the network, and the firewall. However, the company is still responsible for the security of the code itself, such as encrypting sensitive data, validating input, and handling errors. The company is also responsible for writing and updating the code that defines the Lambda function, and choosing the runtime environment, such as Node.js, Python, or Java. AWS Lambda does not require the selection of CPU resources, as it automatically allocates them based on the memory configuration34

• Question 582:

  Which of the following are advantages of moving to the AWS Cloud? (Select TWO.)

  A. The ability to turn over the responsibility for all security to AWS.

  B. The ability to use the pay-as-you-go model.

  C. The ability to have full control over the physical infrastructure.

  D. No longer having to guess what capacity will be required.

  E. No longer worrying about users access controls.

  Correct Answer: BD

  The advantages of moving to the AWS Cloud are the ability to use the pay- as-you-go model and no longer having to guess what capacity will be required. The pay-as- you-go model allows the user to pay only for the resources they use, without any upfront or long-term commitments. This reduces the cost and risk of over-provisioning or under- provisioning resources. No longer having to guess what capacity will be required means that the user can scale their resources up or down according to the demand, without wasting money on idle resources or losing customers due to insufficient capacity4.

• Question 583:

  Which of the following are customer responsibilities under the AWS shared responsibility model? (Select TWO.)

  A. Physical security of AWS facilities

  B. Configuration of security groups

  C. Encryption of customer data on AWS

  D. Management of AWS Lambda infrastructure

  E. Management of network throughput of each AWS Region

  Correct Answer: BC

  The AWS shared responsibility model describes how AWS and the customer share responsibility for security and compliance of the AWS environment. AWS is responsible for the security of the cloud, which includes the physical security of AWS facilities, the infrastructure, hardware, software, and networking that run AWS services. The customer is responsible for security in the cloud, which includes the configuration of security groups, the encryption of customer data on AWS, the management of AWS Lambda infrastructure, and the management of network throughput of each AWS Region.

• Question 584:

  A cloud practitioner is analyzing Amazon EC2 instance performance and usage to provide recommendations for potential cost savings.

  Which cloud concept does this analysis demonstrate?

  A. Auto scaling

  B. Rightsizing

  C. Load balancing

  D. High availability

  Correct Answer: B

  Rightsizing is the cloud concept that this analysis demonstrates. Rightsizing is the process of optimizing the performance and cost of your AWS resources by selecting the most appropriate type, size, and configuration based on your workload requirements and usage patterns. Rightsizing can help you achieve potential cost savings by reducing the over-provisioning or under-utilization of your resources. You can use various AWS tools and services, such as AWS Cost Explorer, AWS Compute Optimizer, and AWS Trusted Advisor, to analyze your resource utilization and performance metrics, and receive recommendations for rightsizing.

• Question 585:

  What does the Amazon S3 Intelligent-Tiering storage class offer?

  A. Payment flexibility by reserving storage capacity

  B. Long-term retention of data by copying the data to an encrypted Amazon Elastic Block Store (Amazon EBS) volume

  C. Automatic cost savings by moving objects between tiers based on access pattern changes

  D. Secure, durable, and lowest cost storage for data archival

  Correct Answer: C

  The Amazon S3 Intelligent-Tiering storage class offers automatic cost savings by moving objects between tiers based on access pattern changes. This storage class is designed for data with unknown or changing access patterns. It has two access tiers: frequent access and infrequent access. Objects are stored in the frequent access tier by default, and are moved to the infrequent access tier after 30 consecutive days of no access. If an object in the infrequent access tier is accessed, it is moved back to the frequent access tier. There are no retrieval fees in S3 Intelligent-Tiering, and no additional tiering fees when objects are moved between access tiers within the S3 Intelligent-Tiering storage class1.

• Question 586:

  Which of the following is available to a company that has an AWS Business Support plan?

  A. AWS Support concierge

  B. AWS DDoS Response Team (DRT)

  C. AWS technical account manager (TAM)

  D. AWS Health API

  Correct Answer: D

  AWS Health API is available to a company that has an AWS Business Support plan. The AWS Health API provides programmatic access to the AWS Health information that is presented in the AWS Personal Health Dashboard. The AWS Health API can help users get timely and personalized information about events that can affect the availability and performance of their AWS resources, such as scheduled maintenance, network issues, or service disruptions. The AWS Health API can also integrate with other AWS services, such as Amazon CloudWatch Events and AWS Lambda, to enable automated actions and notifications. AWS Health API OverviewAWS Support Plans

• Question 587:

  A company is configuring its AWS Cloud environment. The company's administrators need to group users together and apply permissions to the group.

  Which AWS service or feature can the company use to meet these requirements?

  A. AWS Organizations

  B. Resource groups

  C. Resource tagging

  D. AWS Identity and Access Management (IAM)

  Correct Answer: D

  The AWS service or feature that the company can use to group users together and apply permissions to the group is AWS Identity and Access Management (IAM). AWS IAM is a service that enables users to create and manage users, groups, roles, and permissions for AWS services and resources. Users can use IAM groups to organize multiple users that have similar access requirements, and attach policies to the groups that define the permissions for the users in the group. This simplifies the management and administration of user access

• Question 588:

  What can a user accomplish using AWS CloudTrail?

  A. Generate an IAM user credentials report.

  B. Record API calls made to AWS services.

  C. Assess the compliance of AWS resource configurations with policies and guidelines.

  D. Ensure that Amazon EC2 instances are patched with the latest security updates. A company uses Amazon Workspaces.

  Correct Answer: B

  AWS CloudTrail is an AWS service that enables users to accomplish the task of recording API calls made to AWS services. AWS CloudTrail is a service that tracks user activity and API usage across the AWS account. AWS CloudTrail records the details of every API call made to AWS services, such as the identity of the caller, the time of the call, the source IP address of the caller, the parameters and responses of the call, and more. Users can use AWS CloudTrail to audit, monitor, and troubleshoot their AWS resources and actions. The other options are incorrect because they are not tasks that users can accomplish using AWS CloudTrail. Generating an IAM user credentials report is a task that users can accomplish using IAM, which is an AWS service that enables users to manage access and permissions to AWS resources and services. Assessing the compliance of AWS resource configurations with policies and guidelines is a task that users can accomplish using AWS Config, which is an AWS service that enables users to assess, audit, and evaluate the configurations of their AWS resources. Ensuring that Amazon EC2 instances are patched with the latest security updates is a task that users can accomplish using AWS Systems Manager, which is an AWS service that enables users to automate operational tasks, manage configuration and compliance, and monitor system health and performance. Reference: AWS CloudTrail FAQs

• Question 589:

  Which of the following promotes AWS Cloud architectural best practices for designing and operating reliable, secure, efficient, and cost-effective systems?

  A. AWS Serverless Application Model framework

  B. AWS Business Support

  C. Principle of least privilege

  D. AWS Well-Architected Framework

  Correct Answer: D

  AWS Well-Architected Framework promotes AWS Cloud architectural best practices for designing and operating reliable, secure, efficient, and cost-effective systems. AWS Well-Architected Framework is a set of guidelines and best practices that help the user to evaluate and improve the architecture of their applications and workloads on AWS. AWS Well-Architected Framework consists of five pillars: operational excellence, security, reliability, performance efficiency, and cost optimization. Each pillar provides a set of design principles, questions, and best practices that help the user to achieve the desired outcomes for their systems.

• Question 590:

  A company wants to deploy and manage a Docker-based application on AWS.

  Which solution meets these requirements with the LEAST amount of operational overhead?

  A. An open-source Docker orchestrator on Amazon EC2 instances

  B. AWS AppSync

  C. Amazon Elastic Container Registry (Amazon ECR)

  D. Amazon Elastic Container Service (Amazon ECS)

  Correct Answer: D

  Amazon Elastic Container Service (Amazon ECS) is a solution that meets the requirements of deploying and managing a Docker-based application on AWS with the least amount of operational overhead. Amazon ECS is a fully managed container orchestration service that makes it easy to run, scale, and secure Docker container applications on AWS. Amazon ECS eliminates the need for you to install, operate, and scale your own cluster management infrastructure. With simple API calls, you can launch and stop container-enabled applications, query the complete state of your cluster, and access many familiar features like security groups, Elastic Load Balancing, EBS volumes, and IAM roles3.