Amazon CLF-C02 Online Practice Questions and Exam Preparation

Amazon CLF-C02 Online Questions & Answers

• Question 661:

  Which of the following is an AWS key-value database offering consistent single-digit millisecond performance at any scale?

  A. Amazon RDS
  B. Amazon Aurora
  C. Amazon DynamoDB
  D. Amazon Redshift
  C. Amazon DynamoDB

  ---

  Explanation

  Amazon DynamoDB is designed to provide consistent single-digit millisecond latency for any scale of workloads. This consistent performance is a big part of why the Snapchat Stories feature, which includes Snapchat's largest storage write workload, moved to DynamoDB.

• Question 662:

  A company operates a petabyte-scale data warehouse to analyze its data. The company wants a solution that will not require manual hardware and software management.

  Which AWS service will meet these requirements?

  A. Amazon DocumentDB (with MongoDB compatibility)
  B. Amazon Redshift
  C. Amazon Neptune
  D. Amazon ElastiCache
  B. Amazon Redshift

  ---

  Explanation

  Amazon Redshift is a fast, fully managed, petabyte-scale data warehouse service that makes it simple and cost-effective to analyze all your data using your existing business intelligence tools. You can start small with no commitments, and

  scale to petabytes for less than a tenth of the cost of traditional solutions. Amazon Redshift does not require manual hardware and software management, as AWS handles all the tasks such as provisioning, patching, backup, recovery, failure

  detection, and repair. Amazon Redshift also offers serverless capabilities, which allow you to access and analyze data without any configurations or capacity planning. Amazon Redshift automatically scales the data warehouse capacity to

  deliver fast performance for even the most demanding and unpredictable workloads. Therefore, Amazon Redshift meets the requirements of the company, compared to the other options.

  The other options are not suitable for the company's requirements, because:

  Amazon DocumentDB (with MongoDB compatibility) is a fast, scalable, highly available, and fully managed document database service that supports MongoDB workloads. It is not designed for petabyte-scale data warehousing or analytics.

  Amazon Neptune is a fast, reliable, and fully managed graph database service that makes it easy to build and run applications that work with highly connected datasets. It is not designed for petabyte-scale data warehousing or analytics.

  Amazon ElastiCache is a fully managed in-memory data store and cache service that supports Redis and Memcached. It is not designed for petabyte-scale data warehousing or analytics.

  References:

  What is Amazon Redshift? - Amazon Redshift

  Amazon Redshift Features - Amazon Redshift

  Amazon Redshift Serverless - Amazon Redshift

  What Is Amazon DocumentDB (with MongoDB compatibility)? - Amazon DocumentDB (with MongoDB compatibility)

  What Is Amazon Neptune? - Amazon Neptune

  [What Is Amazon ElastiCache for Redis? - Amazon ElastiCache for Redis]

• Question 663:

  Which group shares responsibility with AWS for security and compliance of AWS accounts and resources?

  A. Third-party vendors
  B. Customers
  C. Reseller partners
  D. Internet providers
  B. Customers

  ---

  Explanation

  Customers share responsibility with AWS for security and compliance of AWS accounts and resources. This is part of the AWS shared responsibility model, which defines the division of responsibilities between AWS and the customer for security and compliance. AWS is responsible for the security of the cloud, which includes the physical and environmental controls of the AWS global infrastructure, such as power, cooling, fire suppression, and physical access. The customer is responsible for the security in the cloud, which includes the configuration and management of the AWS resources and applications, such as identity and access management, encryption, firewall, and backup. For more information, see AWS Shared Responsibility Model and AWS Cloud Security.

• Question 664:

  Which of the following is the customer's responsibility under the AWS shared responsibility model? (Choose two.)

  A. Maintain the configuration of infrastructure devices.
  B. Maintain patching and updates within the hardware infrastructure.
  C. Maintain the configuration of guest operating systems and applications.
  D. Manage decisions involving encryption options.
  E. Maintain infrastructure hardware.
  C. Maintain the configuration of guest operating systems and applications.
  D. Manage decisions involving encryption options.

  ---

  Explanation

• Question 665:

  A software engineer wants to launch a virtual machine (VM) and MySQL database on AWS.

  Which AWS service will meet these requirements with the LEAST operational effort?

  A. Amazon Elastic Container Service (Amazon ECS)
  B. AWS Elastic Beanstalk
  C. Amazon Lightsail
  D. Amazon EC2
  B. AWS Elastic Beanstalk

  ---

  Explanation

  AWS Elastic Beanstalk is a service that enables you to quickly deploy and manage applications in the AWS Cloud without worrying about the infrastructure that runs those applications. You simply upload your application, and Elastic Beanstalk automatically handles the details of capacity provisioning, load balancing, scaling, and application health monitoring. Elastic Beanstalk supports several platform configurations for Java, .NET, PHP, Node.js, Python, Ruby, Go, and Docker web applications that can run on familiar servers such as Apache, Nginx, Passenger, and IIS. You can also use Elastic Beanstalk to launch a virtual machine (VM) and MySQL database on AWS with the least operational effort. Amazon Elastic Container Service (Amazon ECS) is a fully managed container orchestration service that enables you to easily run, scale, and secure Docker containerized applications on AWS. However, it requires more operational effort than Elastic Beanstalk, as you need to define your application architecture and the specifications of the containers that run it. Amazon Lightsail is an easy-to-use cloud platform that offers everything you need to build an application or website, plus a cost-effective, monthly plan. It is designed for developers who have little or no prior cloud experience and want to launch and manage applications on AWS with minimal complexity. However, it does not support MySQL databases, and it requires more operational effort than Elastic Beanstalk, as you need to configure your VM and database settings. Amazon EC2 is a web service that provides secure, resizable compute capacity in the cloud. It allows you to launch a virtual machine (VM) and MySQL database on AWS, but it requires the most operational effort, as you need to provision, monitor, and manage your EC2 instances and database.

• Question 666:

  A company needs to store infrequently used data for data archives and long-term backups.

  A company needs a history report about how its Amazon EC2 instances were modified last month.

  Which AWS service can be used to meet this requirement?

  A. AWS Service Catalog
  B. AWS Config
  C. Amazon CloudWatch
  D. AWS Artifact
  B. AWS Config

  ---

  Explanation

  AWS Config is a service that enables you to assess, audit, and evaluate the configurations of your AWS resources. AWS Config continuously monitors and records your AWS resource configurations and allows you to automate the evaluation of recorded configurations against desired configurations. AWS Config can also track changes to your EC2 instances over time and provide a history report of the modifications. AWS Service Catalog, Amazon CloudWatch, and AWS Artifact are not the best services to meet this requirement. AWS Service Catalog is a service that allows you to create and manage catalogs of IT services that are approved for use on AWS. Amazon CloudWatch is a service that monitors your AWS resources and applications and provides metrics, alarms, dashboards, and logs. AWS Artifact is a service that provides on-demand access to AWS security and compliance reports and online agreements

• Question 667:

  Which AWS service requires the customer to patch the guest operating system?

  A. AWS Lambda
  B. Amazon OpenSearch Service
  C. Amazon EC2
  D. Amazon ElastiCache
  C. Amazon EC2

  ---

  Explanation

  The AWS service that requires the customer to patch the guest operating system is Amazon EC2. Amazon EC2 is a service that provides scalable compute capacity in the cloud, and allows customers to launch and run virtual servers, called instances, with a variety of operating systems, configurations, and specifications. The customer is responsible for patching and updating the guest operating system and any applications that run on the EC2 instances, as part of the security in the cloud. AWS Lambda, Amazon OpenSearch Service, and Amazon ElastiCache are not services that require the customer to patch the guest operating system. AWS Lambda is a serverless compute service that allows customers to run code without provisioning or managing servers. Amazon OpenSearch Service is a fully managed service that makes it easy to deploy, operate, and scale OpenSearch clusters in the AWS Cloud. Amazon ElastiCache is a fully managed service that provides in-memory data store and cache solutions, such as Redis and Memcached. These services are managed by AWS, and AWS is responsible for patching and updating the underlying infrastructure and software.

• Question 668:

  Which AWS service provides the ability to manage infrastructure as code?

  A. AWS CodePipeline
  B. AWS CodeDeploy
  C. AWS Direct Connect
  D. AWS CloudFormation
  D. AWS CloudFormation

  ---

  Explanation

  The AWS service that provides the ability to manage infrastructure as code is AWS CloudFormation. Infrastructure as code is a process of defining and provisioning AWS resources using code or templates, rather than manual actions or scripts. AWS CloudFormation allows you to create and update stacks of AWS resources based on predefined templates that describe the desired state and configuration of the resources. AWS CloudFormation automates and simplifies the deployment and management of AWS resources, and ensures consistency and repeatability across different environments and regions. AWS CloudFormation also supports rollback, change sets, drift detection, and nested stacks features that help you to monitor and control the changes to your infrastructure.

• Question 669:

  Which of the following is entirely the responsibility of AWS, according to the AWS shared responsibility model?

  A. Security awareness and training
  B. Development of an IAM password policy
  C. Patching of the guest operating system
  D. Physical and environmental controls
  D. Physical and environmental controls

  ---

  Explanation

  Physical and environmental controls are entirely the responsibility of AWS, according to the AWS shared responsibility model. The AWS shared responsibility model defines the division of responsibilities between AWS and the customer for security and compliance. AWS is responsible for the security of the cloud, which includes the physical and environmental controls of the AWS global infrastructure, such as power, cooling, fire suppression, and physical access. The customer is responsible for the security in the cloud, which includes the configuration and management of the AWS resources and applications. For more information, see [AWS Shared Responsibility Model] and [AWS Cloud Security].

• Question 670:

  Which AWS service or feature enables users to encrypt data at rest in Amazon S3?

  A. IAM policies
  B. Server-side encryption
  C. Amazon GuardDuty
  D. Client-side encryption
  B. Server-side encryption

  ---

  Explanation

  Server-side encryption is an encryption option that Amazon S3 provides to encrypt data at rest in Amazon S3. With server-side encryption, Amazon S3 encrypts an object before saving it to disk in its data centers and decrypts it when you download the objects. You have three server-side encryption options to choose from: SSE-S3, SSE-C, and SSE-KMS. SSE-S3 uses keys that are managed by Amazon S3. SSE-C allows you to manage your own encryption keys. SSE-KMS uses keys that are managed by AWS Key Management Service (AWS KMS)5.