Amazon CLF-C02 Online Practice Questions and Exam Preparation

Amazon CLF-C02 Online Questions & Answers

• Question 691:

  Which task is the responsibility of AWS when using AWS services?

  A. Management of IAM user permissions
  B. Creation of security group rules for outbound access
  C. Maintenance of physical and environmental controls
  D. Application of Amazon EC2 operating system patches
  C. Maintenance of physical and environmental controls

  ---

  Explanation

  AWS is responsible for maintaining the physical and environmental controls of the AWS Cloud, such as power, cooling, fire suppression, and physical security1. The customer is responsible for managing the IAM user permissions, creating security group rules for outbound access, applying Amazon EC2 operating system patches, and other aspects of security in the cloud1.

• Question 692:

  A company has been storing monthly reports in an Amazon S3 bucket. The company exports the report data into comma-separated values (.csv) files. A developer wants to write a simple query that can read all of these files and generate a summary report.

  Which AWS service or feature should the developer use to meet these requirements with the LEAST amount of operational overhead?

  A. Amazon S3 Select
  B. Amazon Athena
  C. Amazon Redshift
  D. Amazon EC2
  B. Amazon Athena

  ---

  Explanation

  Amazon Athena is the AWS service that the developer should use to write a simple query that can read all of the .csv files stored in an Amazon S3 bucket and generate a summary report. Amazon Athena is an interactive query service that allows users to analyze data in Amazon S3 using standard SQL. Amazon Athena does not require any server setup or management, and users only pay for the queries they run. Amazon Athena can handle various data formats, including .csv, and can integrate with other AWS services such as Amazon QuickSight for data visualization

• Question 693:

  Which of the following are design principles for reliability in the AWS Cloud? (Select TWO.)

  A. Build architectures with tightly coupled resources.
  B. Use AWS Trusted Advisor to meet security best practices.
  C. Use automation to recover immediately from failure.
  D. Rightsize Amazon EC2 instances to ensure optimal performance.
  E. Simulate failures to test recovery processes.
  C. Use automation to recover immediately from failure.
  E. Simulate failures to test recovery processes.

  ---

  Explanation

  The design principles for reliability in the AWS Cloud are: Test recovery procedures. The best way to ensure that systems can recover from failures is to regularly test them using simulated scenarios. This can help identify gaps and improve the recovery process. Automatically recover from failure. By using automation, systems can detect and correct failures without human intervention. This can reduce the impact and duration of failures and improve the availability of the system. Scale horizontally to increase aggregate system availability. By adding more redundant resources to the system, the impact of individual resource failures can be reduced. This can also improve the performance and scalability of the system. Stop guessing capacity. By using monitoring and automation, systems can adjust the capacity based on the demand and performance metrics. This can prevent failures due to insufficient or excessive capacity and optimize the cost and efficiency of the system. Manage change in automation. By using automation, changes to the system can be applied in a consistent and controlled manner. This can reduce the risk of human errors and configuration drifts that can cause failures. AWS Well-Architected Framework

• Question 694:

  Which VPC component can a company use to set up a virtual firewall at the Amazon EC2 instance level?

  A. Network ACL
  B. Security group
  C. Route table
  D. NAT gateway
  B. Security group

  ---

  Explanation

• Question 695:

  A company is building AWS architecture to deliver real-time data feeds from an on-premises data center into an application that runs on AWS. The company needs a consistent network connection with minimal latency.

  What should the company use to connect the application and the data center to meet these requirements?

  A. AWS Direct Connect
  B. Public internet
  C. AWS VPN
  D. Amazon Connect
  A. AWS Direct Connect

  ---

  Explanation

  AWS Direct Connect provides a dedicated, low-latency, and consistent network connection between on-premises data centers and AWS. This private connection minimizes latency and improves network stability compared to a public internet connection or VPN. AWS Direct Connect is ideal for applications requiring real-time data transfer with minimal latency.

• Question 696:

  Which of the following is a software development framework that a company can use to define cloud resources as code and provision the resources through AWS CloudFormation?

  A. AWS CLI
  B. AWS Developer Center
  C. AWS Cloud Development Kit (AWS CDK)
  D. AWS CodeStar
  C. AWS Cloud Development Kit (AWS CDK)

  ---

  Explanation

  AWS Cloud Development Kit (AWS CDK) is a software development framework that allows you to define cloud resources as code using familiar programming languages, such as TypeScript, Python, Java, .NET, and Go (in Developer Preview). You can use AWS CDK to model your application resources using high-level constructs that provide sensible defaults and best practices, or use low-level constructs that provide full access to the underlying AWS CloudFormation resources. AWS CDK synthesizes your code into AWS CloudFormation templates that you can deploy using the AWS CDK CLI or the AWS Management Console. AWS CDK also integrates with other AWS services, such as AWS CodeCommit, AWS CodeBuild, AWS CodePipeline, AWS Lambda, Amazon EC2, Amazon S3, and more, to help you automate your development and deployment processes. AWS CDK is an open-source framework that you can extend and contribute to.

  References: Cloud Development Framework - AWS Cloud Development Kit - AWS, AWS Cloud Development Kit Documentation, AWS Cloud Development Kit - Wikipedia, AWS CDK Intro Workshop | AWS CDK Workshop

• Question 697:

  Which of the following are advantages of the AWS Cloud? (Select TWO.)

  A. Trade variable expenses for capital expenses
  B. High economies of scale
  C. Launch globally in minutes
  D. Focus on managing hardware infrastructure
  E. Overprovision to ensure capacity
  B. High economies of scale
  C. Launch globally in minutes

  ---

  Explanation

  The correct answers are B and C because they are advantages of the AWS Cloud. High economies of scale means that AWS can achieve lower variable costs than customers can get on their own. Launch globally in minutes means that AWS has a global infrastructure that allows customers to deploy their applications and data across multiple regions and availability zones. The other options are incorrect because they are not advantages of the AWS Cloud. Trade variable expenses for capital expenses means that customers have to invest heavily in data centers and servers before they know how they will use them. Focus on managing hardware infrastructure means that customers have to spend time and money on maintaining and upgrading their physical resources. Overprovision to ensure capacity means that customers have to pay for more resources than they actually need to avoid performance issues.

  What is Cloud Computing?

• Question 698:

  Which of the following are security principles in the AWS Well-Architected Framework? (Select TWO.)

  A. Analyze and attribute expenditures
  B. Monitor, alert and audit actions and changes to AWS resources
  C. Deploy globally in minutes
  D. Protect data in transit and at rest
  E. Perform operations as code
  B. Monitor, alert and audit actions and changes to AWS resources
  D. Protect data in transit and at rest

  ---

  Explanation

• Question 699:

  Which AWS service requires the customer to be fully responsible for applying operating system patches?

  A. Amazon DynamoDB
  B. AWS Lambda
  C. AWS Fargate
  D. Amazon EC2
  D. Amazon EC2

  ---

  Explanation

  Amazon EC2 is the AWS service that requires the customer to be fully responsible for applying operating system patches. Amazon EC2 is a service that provides secure, resizable compute capacity in the cloud. Customers can launch virtual servers called instances and choose from various configurations of CPU, memory, storage, and networking resources1. Customers have full control and access to their instances, which means they are also responsible for managing and maintaining them, including applying operating system patches2. Customers can use AWS Systems Manager Patch Manager, a feature of AWS Systems Manager, to automate the process of patching their EC2 instances with both security-related updates and other types of updates3. A company wants an AWS service to collect and process 10 TB of data locally and transfer the data to AWS. The company has intermittent connectivity. Which AWS service will meet these requirements?

  AWS Database Migration Service (AWS DMS) AWS DataSync AWS Backup AWS Snowball Edge

• Question 700:

  Which database engines does Amazon Aurora support? (Select TWO.)

  A. Oracle
  B. Microsoft SQL Server
  C. MySQL
  D. PostgreSQL
  E. MongoDB
  C. MySQL
  D. PostgreSQL

  ---

  Explanation

  Amazon Aurora is a relational database service that is compatible with MySQL and PostgreSQL engines. It delivers up to five times the performance of MySQL and up to three times the performance of PostgreSQL. It also provides high availability, scalability, security, and durability1