Amazon CLF-C02 Online Practice Questions and Exam Preparation

Amazon CLF-C02 Online Questions & Answers

• Question 631:

  Which of the following are ways to improve security on AWS? (Choose two.)

  A. Using AWS Artifact
  B. Granting the broadest permissions to all IAM roles
  C. Running application code with AWS Cloud
  D. Enabling multi-factor authentication (MFA) with Amazon Cognito
  E. Using AWS Trusted Advisor security checks
  D. Enabling multi-factor authentication (MFA) with Amazon Cognito
  E. Using AWS Trusted Advisor security checks

  ---

  Explanation

• Question 632:

  A user needs the ability to access as many resources as are needed. The user also needs the ability to scale up and scale down with only a few minutes of notice. Which benefit of the AWS Cloud describes these abilities?

  A. Ratability
  B. Economy of scale
  C. Elasticity
  D. Pay-as-you-go pricing
  C. Elasticity

  ---

  Explanation

• Question 633:

  In which ways does the AWS Cloud offer lower total cost of ownership (TCO) of computing resources than on-premises data centers? (Choose two.)

  A. AWS replaces upfront capital expenditures with pay-as-you-go costs.
  B. AWS is designed for high availability, which eliminates user downtime.
  C. AWS eliminates the need for on-premises IT staff.
  D. AWS uses economies of scale to continually reduce prices.
  E. AWS offers a single pricing model for Amazon EC2 instances.
  A. AWS replaces upfront capital expenditures with pay-as-you-go costs.
  D. AWS uses economies of scale to continually reduce prices.

  ---

  Explanation

• Question 634:

  Which action will provide documentation to help a company evaluate whether its use of the AWS Cloud is compliant with local regulatory standards?

  A. Running Amazon GuardDuty
  B. Using AWS Artifact
  C. Creating an AWS Support ticket
  D. AWS Cloud Trail logs
  B. Using AWS Artifact

  ---

  Explanation

• Question 635:

  A company has a single Amazon EC2 instance. The company wants to adopt a highly available architecture.

  What can the company do to meet this requirement?

  A. Scale vertically to a larger EC2 instance size.
  B. Scale horizontally across multiple Availability Zones.
  C. Purchase an EC2 Dedicated Instance.
  D. Change the EC2 instance family to a compute optimized instance.
  B. Scale horizontally across multiple Availability Zones.

  ---

  Explanation

  Scaling horizontally across multiple Availability Zones is a way to adopt a highly available architecture, as it increases the fault tolerance and resilience of the application. Scaling vertically to a larger EC2 instance size is a way to improve the performance of the application, but it does not improve the availability. Purchasing an EC2 Dedicated Instance is a way to isolate the instance from other AWS customers, but it does not improve the availability. Changing the EC2 instance family to a compute optimized instance is a way to optimize the instance type for the workload, but it does not improve the availability. These concepts are explained in the AWS Well-Architected Framework2.

• Question 636:

  A company wants to manage sign-in security for workforce users. The company needs to create workforce users and centrally manage their access across all the company's AWS accounts and applications.

  Which AWS service will meet these requirements?

  A. AWS Audit Manager
  B. Amazon Cognito
  C. AWS Security Hub
  D. AWS IAM Identity Center (AWS Single Sign-On)
  D. AWS IAM Identity Center (AWS Single Sign-On)

  ---

  Explanation

• Question 637:

  Who enables encryption of data at rest for Amazon Elastic Block Store (Amazon EBS)?

  A. AWS Support
  B. AWS customers
  C. AWS Key Management Service (AWS KMS)
  D. AWS Trusted Advisor
  B. AWS customers

  ---

  Explanation

  AWS customers are responsible for enabling encryption of data at rest for Amazon Elastic Block Store (Amazon EBS). Amazon EBS encryption offers a simple encryption solution for your EBS volumes that does not require you to build, maintain, and secure your own key management infrastructure. You can encrypt both the boot and data volumes of your EC2 instances. You can use AWS Key Management Service (AWS KMS) customer master keys (CMKs) or your own CMKs to encrypt your volumes2.

• Question 638:

  Which Amazon EC2 pricing model provides the MOST cost savings for an always-up, right-sized database server running for a project that will last 1 year?

  A. On-Demand Instances
  B. Convertible Reserved Instances
  C. Spot Instances
  D. Standard Reserved Instances
  D. Standard Reserved Instances

  ---

  Explanation

• Question 639:

  A company wants to use application stacks to run a workload in the AWS Cloud. The company wants to use pre-configured instances.

  Which AWS service will meet these requirements?

  A. Amazon Lightsail
  B. Amazon Athena
  C. AWS Outposts
  D. Amazon EC2
  A. Amazon Lightsail

  ---

  Explanation

• Question 640:

  A company is running a workload in the AWS Cloud.

  Which AWS best practice ensures the MOST cost-effective architecture for the workload?

  A. Loose coupling
  B. Rightsizing
  C. Caching
  D. Redundancy
  B. Rightsizing

  ---

  Explanation

  The AWS best practice that ensures the most cost-effective architecture for the workload is rightsizing. Rightsizing means selecting the most appropriate instance type or resource configuration that matches the needs of the workload. Rightsizing can help optimize performance and reduce costs by avoiding over-provisioning or under- provisioning of resources1. Loose coupling, caching, and redundancy are other AWS best practices that can improve the scalability, availability, and performance of the workload, but they do not necessarily ensure the most cost-effective architecture.