Amazon CLF-C02 Online Practice Questions and Exam Preparation

Amazon CLF-C02 Online Questions & Answers

• Question 751:

  Which AWS service or tool will monitor AWS resources and applications in real time?

  A. AWS Trusted Advisor
  B. Amazon CloudWatch
  C. AWS CloudTrail
  D. AWS Cost Explorer
  B. Amazon CloudWatch

  ---

  Explanation

• Question 752:

  Which option is a benefit of using AWS for cloud computing?

  A. Trade variable expense for fixed expense
  B. Pay-as-you-go pricing
  C. Decreased speed and agility
  D. Spending money running and maintaining data centers
  B. Pay-as-you-go pricing

  ---

  Explanation

  The answer is given In the doc "Six advantages of cloud computing." The benefit from massive economies of scale is pay-as-you-go pricing.

  https://docs.aws.amazon.com/whitepapers/latest/aws-overview/six-advantages-of-cloud-computing.html

• Question 753:

  A company often does not use all of its current Amazon EC2 capacity to run stateless workloads. The company wants to optimize its EC2 costs. Which EC2 instance type will meet these requirements?

  A. Spot Instances
  B. Dedicated Instances
  C. Reserved Instances
  D. On-Demand Instances
  A. Spot Instances

  ---

  Explanation

• Question 754:

  A company wants a time-series database service that makes it easier to store and analyze trillions of events each day.

  Which AWS service will meet this requirement?

  A. Amazon Neptune
  B. Amazon Timestream
  C. Amazon Forecast
  D. Amazon DocumentDB (with MongoDB compatibility)
  B. Amazon Timestream

  ---

  Explanation

  Amazon Timestream is a fast, scalable, and serverless time-series database service for IoT and other operational applications that makes it easy to store and analyze trillions of events per day up to 1,000 times faster and at as little as 1/10th the cost of relational databases. Amazon Timestream saves you time and cost in managing the lifecycle of time series data, and its purpose-built query engine lets you access and analyze recent and historical data together with a single query. Amazon Timestream has built-in time series analytics functions, helping you identify trends and patterns in near real time. The other options are not suitable for storing and analyzing trillions of events per day. Amazon Neptune is a graph database service that supports highly connected data sets. Amazon Forecast is a machine learning service that generates accurate forecasts based on historical data. Amazon DocumentDB (with MongoDB compatibility) is a document database service that supports MongoDB workloads.

• Question 755:

  Which AWS service can run a managed PostgreSQL database that provides online transaction processing (OLTP)?

  A. Amazon DynamoDB
  B. Amazon Athena
  C. Amazon RDS
  D. Amazon EMR
  C. Amazon RDS

  ---

  Explanation

  Amazon RDS is a fully managed relational database service that supports several database engines, including PostgreSQL. Amazon RDS can run a managed PostgreSQL database that provides online transaction processing (OLTP), which is a type of database workload that handles frequent read and write operations on small amounts of data. Amazon RDS for PostgreSQL offers high performance, availability, scalability, security, and compatibility with the PostgreSQL community edition. Amazon RDS also provides automated backups, point-in-time recovery, encryption, monitoring, and maintenance for PostgreSQL databases.

  References: Hosted PostgreSQL - Amazon RDS for PostgreSQL OLTP Database, MySQL And PostgreSQL Managed Database - Amazon Aurora PostgreSQL options on AWS: Self- managed, managed, and serverless

• Question 756:

  A company is migrating its applications from on-premises to the AWS Cloud. The company wants to ensure that the applications are assigned only the minimum permissions that are needed to perform all operations. Which AWS service will meet these requirements?

  A. AWS Identity and Access Management (IAM)
  B. Amazon CloudWatch
  C. Amazon Macie
  D. Amazon GuardDuty
  A. AWS Identity and Access Management (IAM)

  ---

  Explanation

  AWS Identity and Access Management (IAM) is a service that helps you securely control access to AWS resources for your users. You use IAM to control who can use your AWS resources (authentication) and what resources they can use and in what ways (authorization). IAM also enables you to follow the principle of least privilege, which means granting only the permissions that are necessary to perform a task.

  References: AWS Identity and Access Management (IAM) - AWS Documentation

• Question 757:

  A company needs steady and predictable performance from its Amazon EC2 instances at the lowest possible cost. The company also needs the ability to scale resources to ensure that it has the right resources available at the right time. Which AWS service or resource will meet these requirements?

  A. Amazon CloudWatch
  B. Application Load Balancer
  C. AWS Batch
  D. Amazon EC2 Auto Scaling
  D. Amazon EC2 Auto Scaling

  ---

  Explanation

  AWS Auto Scaling monitors your applications and automatically adjusts capacity to maintain steady, predictable performance at the lowest possible cost.

• Question 758:

  Which AWS service should be used when a company needs to provide its remote employees with virtual desktops?

  A. Amazon Identity and Access Management (IAM)
  B. AWS Directory Service
  C. AWS IAM Identity Center (AWS Single Sign-On)
  D. Amazon Workspaces
  D. Amazon Workspaces

  ---

  Explanation

  The AWS service that should be used when a company needs to provide its remote employees with virtual desktops is Amazon WorkSpaces. Amazon WorkSpaces is a fully managed, secure desktop-as-a-service (DaaS) solution that runs on AWS. Amazon WorkSpaces allows users to provision cloud-based virtual desktops and provide their end users access to the documents, applications, and resources they need from any supported device, including Windows and Mac computers, Chromebooks, iPads, Fire tablets, and Android tablets4. Amazon Identity and Access Management (IAM), AWS Directory Service, and AWS IAM Identity Center (AWS Single Sign-On) are other AWS services related to identity and access management, but they do not provide virtual desktops.

• Question 759:

  According to security best practices, how should an Amazon EC2 instance be given access to an Amazon S3 bucket?

  A. Hard code an IAM user's secret key and access key directly in the application, and upload the file.
  B. Store the IAM user's secret key and access key in a text file on the EC2 instance, read the keys, then upload the file.
  C. Have the EC2 instance assume a role to obtain the privileges to upload the file.
  D. Modify the S3 bucket policy so that any service can upload to it at any time.
  C. Have the EC2 instance assume a role to obtain the privileges to upload the file.

  ---

  Explanation

  https://repost.aws/knowledge-center/ec2-instance-access-s3-bucket#

• Question 760:

  Which cloud concept is demonstrated by using AWS Compute Optimizer?

  A. Security validation
  B. Rightsizing
  C. Elasticity
  D. Global reach
  B. Rightsizing

  ---

  Explanation

  Rightsizing is the cloud concept that is demonstrated by using AWS Compute Optimizer. Rightsizing is the process of adjusting the type and size of your cloud resources to match the optimal performance and cost for your workloads. AWS Compute Optimizer is a service that analyzes the configuration and utilization metrics of your AWS resources, such as Amazon EC2 instances, Amazon EBS volumes, AWS Lambda functions, and Amazon ECS services on AWS Fargate. It reports whether your resources are optimal, and generates optimization recommendations to reduce the cost and improve the performance of your workloads. AWS Compute Optimizer uses machine learning to analyze your historical utilization data and compare it with the most cost-effective AWS alternatives. You can use the recommendations to evaluate the trade-offs between cost and performance, and decide when to move or resize your resources to achieve the best results.

  References: Workload Rightsizing - AWS Compute Optimizer - AWS, What is AWS Compute Optimizer? - AWS Compute Optimizer