Amazon CLF-C02 Online Practice Questions and Exam Preparation

Amazon CLF-C02 Online Questions & Answers

• Question 731:

  A company is considering a move to the AWS Cloud. The company wants to be able to scale its compute resources as needed to accommodate changing loads.

  Which benefit of the AWS Cloud does this scenario describe?

  A. Global deployment in minutes
  B. Cost savings
  C. Agility
  D. Elasticity
  D. Elasticity

  ---

  Explanation

• Question 732:

  A company needs a firewall that will control network connections to and from a single Amazon EC2 instance. This firewall will not control network connections to and from other instances that are in the same subnet. Which AWS service or feature can the company use to meet these requirements?

  A. Network ACL
  B. AWS WAF
  C. Route table
  D. Security group
  D. Security group

  ---

  Explanation

  A Security Group acts as a virtual firewall for your Amazon EC2 instances to control inbound and outbound traffic. It provides granular control over network connections to and from a specific EC2 instance or set of instances. Unlike Network ACLs, which operate at the subnet level, Security Groups operate at the instance level, allowing control over network traffic for individual instances.

  A. Network ACL: Incorrect, as it controls traffic at the subnet level and not for individual instances.

  B. AWS WAF: Incorrect, as AWS WAF is a web application firewall that helps protect web applications from common web exploits but is not designed for controlling instance-level traffic.

  C. Route table: Incorrect, as route tables are used for network routing within a VPC and do not act as firewalls.

  AWS Cloud

  References:

  AWS Security Groups

• Question 733:

  A development team wants to deploy multiple test environments for an application in a fast, repeatable manner. Which AWS service should the team use?

  A. Amazon EC2
  B. AWS CloudFormation
  C. Amazon QuickSight
  D. Amazon Elastic Container Service (Amazon ECS)
  B. AWS CloudFormation

  ---

  Explanation

• Question 734:

  A company has set up a VPC in its AWS account and has created a subnet in the VPC.

  The company wants to make the subnet public.

  Which AWS features should the company use to meet this requirement? (Select TWO.)

  A. Amazon VPC internet gateway
  B. Amazon VPC NAT gateway
  C. Amazon VPC route tables
  D. Amazon VPC network ACL
  E. Amazon EC2 security groups
  A. Amazon VPC internet gateway
  C. Amazon VPC route tables

  ---

  Explanation

  To make a subnet public, the company should use an Amazon VPC internet gateway and an Amazon VPC route table. An internet gateway is a horizontally scaled, redundant, and highly available VPC component that allows communication between your VPC and the internet. A route table contains a set of rules, called routes, that are used to determine where network traffic from your subnet or gateway is directed. To enable internet access for a subnet, you need to attach an internet gateway to your VPC and add a route to the internet gateway in the route table associated with the subnet.

• Question 735:

  Which pillar of the AWS Well-Architected Framework aligns with the ability to make frequent, small, and reversible changes to AWS Cloud architecture?

  A. Security
  B. Cost optimization
  C. Operational excellence
  D. Performance efficiency
  C. Operational excellence

  ---

  Explanation

• Question 736:

  A company wants to monitor its workload performance. The company wants to ensure that the cloud services are delivered at a level that meets its business needs.

  Which AWS Cloud Adoption Framework (AWS CAF) perspective will meet these requirements?

  A. Business
  B. Governance
  C. Platform
  D. Operations
  D. Operations

  ---

  Explanation

  The Operations perspective helps you monitor and manage your cloud workloads to ensure that they are delivered at a level that meets your business needs. Common stakeholders include chief operations officer (COO), cloud director, cloud operations manager, and cloud operations engineers1. The Operations perspective covers capabilities such as workload health monitoring, incident management, change management, release management, configuration management, and disaster recovery2. The Business perspective helps ensure that your cloud investments accelerate your digital transformation ambitions and business outcomes. Common stakeholders include chief executive officer (CEO), chief financial officer (CFO), chief information officer (CIO), and chief technology officer (CTO). The Business perspective covers capabilities such as business case development, value realization, portfolio management, and stakeholder management3. The Governance perspective helps you orchestrate your cloud initiatives while maximizing organizational benefits and minimizing transformation-related risks. Common stakeholders include chief transformation officer, CIO, CTO, CFO, chief data officer (CDO), and chief risk officer (CRO). The Governance perspective covers capabilities such as governance framework, budget and cost management, compliance management, and data governance4. The Platform perspective helps you build an enterprise-grade, scalable, hybrid cloud platform, modernize existing workloads, and implement new cloud-native solutions. Common stakeholders include CTO, technology leaders, architects, and engineers. The Platform perspective covers capabilities such as platform design and implementation, workload migration and modernization, cloud-native development, and DevOps5.

  References: AWS Cloud Adoption Framework: Operations Perspective AWS Cloud Adoption Framework - Operations Perspective AWS Cloud Adoption Framework: Business Perspective AWS Cloud Adoption Framework: Governance Perspective AWS Cloud Adoption Framework: Platform Perspective

• Question 737:

  Which AWS network services or features allow CIDR block notation when providing an IP address range? (Choose two.)

  A. Security groups
  B. Amazon Machine Image (AMI)
  C. Network access control list (network ACL)
  D. AWS Budgets
  E. Amazon Elastic Block Store (Amazon EBS)
  A. Security groups
  C. Network access control list (network ACL)

  ---

  Explanation

• Question 738:

  Which AWS services are delivered globally instead of regionally? (Select TWO.)

  A. Amazon EC2
  B. Amazon CloudFront
  C. Amazon Route 53
  D. Amazon VPC
  E. Amazon RDS
  B. Amazon CloudFront
  C. Amazon Route 53

  ---

  Explanation

• Question 739:

  A company wants to run its application's code without having to provision and manage servers.

  Which AWS service will meet this requirement?

  A. AWS Glue
  B. AWS Lambda
  C. AWS CodeDeploy
  D. Amazon CodeGuru
  B. AWS Lambda

  ---

  Explanation

• Question 740:

  A company wants a unified tool to provide a consistent method to interact with AWS services. Which AWS service or tool will meet this requirement?

  A. AWS CLI
  B. Amazon Elastic Container Service (Amazon ECS)
  C. AWS Cloud9
  D. AWS Virtual Private Network (AWS VPN)
  A. AWS CLI

  ---

  Explanation

  "The AWS Command Line Interface (AWS CLI) is a unified tool to manage your AWS services. With just one tool to download and configure, you can control multiple AWS services from the command line and automate them through scripts."

  https://aws.amazon.com/cli/