Amazon CLF-C02 Online Practice Questions and Exam Preparation

Amazon CLF-C02 Online Questions & Answers

• Question 771:

  A company is moving its on-premises IT services to the AWS Cloud. The company wants to set spending limits and to receive notifications if the limits are exceeded.

  Which AWS service or resource will meet these requirements?

  A. AWS Budgets
  B. AWS Cost and Usage Reports
  C. AWS Cost Explorer
  D. AWS Organizations consolidated billing
  A. AWS Budgets

  ---

  Explanation

• Question 772:

  A company needs to migrate a PostgreSQL database from on-premises to Amazon RDS. Which AWS service or tool should the company use to meet this requirement?

  A. Cloud Adoption Readiness Tool
  B. AWS Migration Hub
  C. AWS Database Migration Service (AWS DMS)
  D. AWS Application Migration Service
  C. AWS Database Migration Service (AWS DMS)

  ---

  Explanation

  AWS Database Migration Service (AWS DMS) is a managed and automated service that helps you migrate your databases from your on-premises or cloud environment to AWS, either as a one-time migration or as a continuous replication. AWS DMS supports migration between 20-plus database and analytics engines, such as PostgreSQL, Oracle, MySQL, SQL Server, MongoDB, Amazon Aurora, Amazon RDS, Amazon Redshift, and Amazon S3. AWS DMS also provides schema conversion and validation tools, as well as monitoring and security features. AWS DMS is a cost-effective and reliable solution for database migration, as you only pay for the compute resources and additional log storage used during the migration process, and you can minimize the downtime and data loss with Multi-AZ and ongoing replication To migrate a PostgreSQL database from on-premises to Amazon RDS using AWS DMS, you need to perform the following steps: Create an AWS DMS replication instance in the same AWS Region as your target Amazon RDS PostgreSQL DB instance. The replication instance is a server that runs the AWS DMS replication software and connects to your source and target endpoints. You can choose the instance type, storage, and network settings based on your migration requirements Create a source endpoint that points to your on-premises PostgreSQL database. You need to provide the connection details, such as the server name, port, database name, user name, and password. You also need to specify the engine name as postgres and the SSL mode as required Create a target endpoint that points to your Amazon RDS PostgreSQL DB instance. You need to provide the connection details, such as the server name, port, database name, user name, and password. You also need to specify the engine name as postgres and the SSL mode as verify-full. Create a migration task that defines the migration settings and options, such as the replication instance, the source and target endpoints, the migration type (full load, full load and change data capture, or change data capture only), the table mappings, the task settings, and the task monitoring role. You can also use the AWS Schema Conversion Tool (AWS SCT) to convert your source schema to the target schema and apply it to the target endpoint before or after creating the migration task. Start the migration task and monitor its progress and status using the AWS DMS console, the AWS CLI, or the AWS DMS API. You can also use AWS CloudFormation to automate the creation and execution of the migration task. The other options are not suitable for migrating a PostgreSQL database from on-premises to Amazon RDS. Cloud Adoption Readiness Tool is a tool that helps you assess your readiness for cloud adoption based on six dimensions: business, people, process, platform, operations, and security. It does not perform any database migration tasks. AWS Migration Hub is a service that helps you track and manage the progress of your application migrations across multiple AWS and partner services, such as AWS DMS, AWS Application Migration Service, AWS Server Migration Service, and CloudEndure Migration. It does not perform any database migration tasks itself, but rather integrates with other migration services. AWS Application Migration Service is a service that helps you migrate your applications from your on-premises or cloud environment to AWS without making any changes to the applications, their architecture, or the migrated servers. It does not support database migration, but rather replicates your servers as Amazon Machine Images (AMIs) and launches them as EC2 instances on AWS.

  References: AWS Database Migration Service, What is AWS Database Migration Service?, Working with an AWS DMS replication instance, Creating source and target endpoints for PostgreSQL, [Creating a target endpoint for Amazon RDS for PostgreSQL], [Creating a migration task for AWS DMS], [AWS Schema Conversion Tool], [Starting a migration task for AWS DMS], [AWS CloudFormation], [Cloud Adoption Readiness Tool], [AWS Migration Hub], [AWS Application Migration Service]

• Question 773:

  A company wants to provide one of its employees with access to Amazon RDS. The company also wants to limit the interaction to only the AWS CLI and AWS software development kits (SDKs).

  Which combination of actions should the company take to meet these requirements while following the principles of least privilege? (Choose two.)

  A. Create an IAM user and provide AWS Management Console access only.
  B. Create an IAM user and provide programmatic access only.
  C. Create an IAM role and provide AWS Management Console access only.
  D. Create an IAM policy with administrator access and attach it to the IAM user.
  E. Create an IAM policy with Amazon RDS access and attach it to the IAM user.
  B. Create an IAM user and provide programmatic access only.
  E. Create an IAM policy with Amazon RDS access and attach it to the IAM user.

  ---

  Explanation

  To follow the principle of least privilege, the company should create an IAM user with only programmatic access since the access is limited to AWS CLI and SDKs, not the Management Console. Additionally, a custom IAM policy granting specific Amazon RDS permissions should be created and attached to this user to restrict access solely to necessary actions. Providing programmatic access only ensures adherence to security best practices by limiting access to the required interfaces.

• Question 774:

  Where can AWS users find answers to frequently asked questions about security in the AWS Cloud?

  A. AWS Trusted Advisor
  B. AWS Knowledge Center
  C. AWS Support Center
  D. AWS Artifact
  B. AWS Knowledge Center

• Question 775:

  A company has a website on AWS. The company wants to deliver the website to a worldwide audience and provide low-latency response times for global users.

  Which AWS service will meet these requirements?

  A. AWS CloudFormation
  B. Amazon CloudFront
  C. Amazon ElastiCache
  D. Amazon DynamoDB
  B. Amazon CloudFront

  ---

  Explanation

• Question 776:

  A company has deployed a web application to Amazon EC2 instances. The EC2 instances have low usage. Which AWS service or feature should the company use to rightsize the EC2 instances?

  A. AWS Config
  B. AWS Cost Anomaly Detection
  C. AWS Budgets
  D. AWS Compute Optimizer
  D. AWS Compute Optimizer

  ---

  Explanation

  Understanding AWS Compute Optimizer

  AWS Compute Optimizer is a service that analyzes the configuration and utilization metrics of your AWS resources. It provides recommendations to help you select the optimal configurations for your workloads.

  Why Use AWS Compute Optimizer for Rightsizing:

  AWS Compute Optimizer helps identify underutilized or overprovisioned resources, enabling you to optimize costs and performance by rightsizing your AWS resources.

• Question 777:

  Which databases are available on Amazon RDS? (Select TWO.)

  A. Sybase
  B. Microsoft SQL Server
  C. IBM Db2
  D. MongoDB
  E. PostgreSQL
  B. Microsoft SQL Server
  E. PostgreSQL

  ---

  Explanation

• Question 778:

  A company has a compliance requirement to record and evaluate configuration changes, as well as perform remediation actions on AWS resources.

  Which AWS service should the company use?

  A. AWS Config
  B. AWS Secrets Manager
  C. AWS CloudTrail
  D. AWS Trusted Advisor
  A. AWS Config

  ---

  Explanation

  AWS Config is a service that enables you to assess, audit, and evaluate the configurations of your AWS resources. AWS Config continuously monitors and records your AWS resource configurations and allows you to automate the evaluation of recorded configurations against desired configurations. With AWS Config, you can review changes in configurations and relationships between AWS resources, dive into detailed resource configuration histories, and determine your overall compliance against the configurations specified in your internal guidelines. This can help you simplify compliance auditing, security analysis, change management, and operational troubleshooting1.

• Question 779:

  A company is planning to build a workload in the AWS Cloud. The company needs to estimate the costs of the network, compute, storage, and database for the workload. Which AWS service or tool should the company use to generate this estimate?

  A. AWS Budgets
  B. AWS Organizations
  C. Cost Explorer
  D. AWS Pricing Calculator
  D. AWS Pricing Calculator

  ---

  Explanation

  To estimate a bill, use the AWS Pricing Calculator. Choose Create estimate, and then choose your planned resources by service.

• Question 780:

  Which AWS service helps users audit API activity across their AWS account?

  A. AWS CloudTrail
  B. Amazon Inspector
  C. AWS WAF
  D. AWS Config
  A. AWS CloudTrail

  ---

  Explanation