Amazon CLF-C02 Online Practice Questions and Exam Preparation

Amazon CLF-C02 Online Questions & Answers

• Question 71:

  Which of the following are benefits that a company receives when it moves an on-premises internet-lacing website to the AWS Cloud? (Select TWO.)

  A. Data that is stored in the AWS Cloud is automatically encrypted.
  B. Website capacity can expand or contract as website traffic changes.
  C. AWS automatically provides the company with the lowest-cost pricing model.
  D. The website shows up with higher priority in internet search engines
  E. The company can take advantage of the pay-as-you-go pricing model
  B. Website capacity can expand or contract as website traffic changes.
  E. The company can take advantage of the pay-as-you-go pricing model

  ---

  Explanation

• Question 72:

  Which encryption types can be used to protect objects at rest in Amazon S3? (Select TWO.)

  A. Server-side encryption with AmazonS3 managed encryption keys (SSE-S3)
  B. Server-side encryption with AWS KMSmanaged keys (SSE-KMS)
  C. TLS
  D. SSL
  E. Transparent Data Encryption (TDE)
  A. Server-side encryption with AmazonS3 managed encryption keys (SSE-S3)
  B. Server-side encryption with AWS KMSmanaged keys (SSE-KMS)

  ---

  Explanation

  Server-side encryption with Amazon S3 managed encryption keys (SSE-S3) and server-side encryption with AWS KMS managed keys (SSE-KMS) are the encryption types that can be used to protect objects at rest in Amazon S3. Server-side encryption means that Amazon S3 encrypts the objects before saving them on disks and decrypts them when they are downloaded. SSE-S3 uses one master key per bucket that is managed by Amazon S3. SSE-KMS uses a customer master key (CMK) that is stored in AWS Key Management Service (AWS KMS) and provides additional benefits, such as audit trails and key rotation. For more information, see Protecting Data Using Server-Side Encryption and Protecting Data Using Encryption.

• Question 73:

  A company wants to use the AWS Cloud as an offsite backup location for its on-premises infrastructure.

  Which AWS service will meet this requirement MOST cost-effectively?

  A. Amazon S3
  B. Amazon Elastic File System (Amazon EFS)
  C. Amazon FSx
  D. Amazon Elastic Block Store (Amazon EBS)
  A. Amazon S3

  ---

  Explanation

  Amazon S3 is the most cost-effective service for storing offsite backups of on-premises infrastructure. Amazon S3 offers low-cost, durable, and scalable storage that can be accessed from anywhere over the internet. Amazon S3 also supports lifecycle policies, versioning, encryption, and cross-region replication to optimize the backup and recovery process. Amazon EFS, Amazon FSx, and Amazon EBS are more suitable for storing data that requires high performance, low latency, and frequent access12

• Question 74:

  Which AWS services provide high availability across multiple Availability Zones by default? (Select TWO.)

  A. Amazon EC2
  B. Amazon Elastic Block Store (Amazon EBS)
  C. Amazon Elastic File System (Amazon EFS)
  D. Amazon Redshift
  E. Amazon S3
  C. Amazon Elastic File System (Amazon EFS)
  E. Amazon S3

  ---

  Explanation

  Amazon Elastic File System (Amazon EFS) and Amazon S3 are both designed to provide high availability and durability by default. Amazon EFS automatically stores data across multiple Availability Zones within a region to provide high availability and durability, while Amazon S3 stores data across multiple facilities and multiple devices within those facilities to provide high availability and durability.

  A. Amazon EC2 provides high availability by using Auto Scaling groups and Elastic Load Balancing to distribute traffic across multiple instances in multiple Availability Zones, but it requires configuration to achieve high availability.

  B. Amazon Elastic Block Store (Amazon EBS) provides high availability by replicating data within an Availability Zone, but it does not replicate data across multiple Availability Zones by default.

  D. Amazon Redshift is a data warehouse service that provides high availability by replicating data within an Availability Zone, but it does not replicate data across multiple Availability Zones by default.

• Question 75:

  Which capabilities are in the platform perspective of the AWS Cloud Adoption Framework (AWS CAF)? (Select TWO.)

  A. Performance and capacity management
  B. Data engineering
  C. Continuous integration and continuous delivery (CI/CD)
  D. Infrastructure protection
  E. Change and release management
  B. Data engineering
  C. Continuous integration and continuous delivery (CI/CD)

  ---

  Explanation

  The platform perspective of the AWS Cloud Adoption Framework (AWS CAF) helps you build an enterprise-grade, scalable, hybrid cloud platform, modernize existing workloads, and implement new cloud-native solutions1. It comprises seven capabilities, two of which are data engineering and CI/CD1. Data engineering: This capability helps you design and evolve a fit-for-purpose data and analytics architecture that can reduce complexity, cost, and technical debt while enabling you to gain actionable insights from exponentially growing data volumes1. It involves selecting key technologies for each of your architectural layers, such as ingestion, storage, catalog, processing, and consumption. It also involves supporting real-time data processing and adopting a Lake House architecture to facilitate data movements between data lakes and purpose-built data stores1. CI/CD: This capability helps you automate the delivery of your cloud solutions using a set of practices and tools that enable faster and more reliable deployments1. It involves establishing a pipeline that can build, test, and deploy your code across multiple environments. It also involves adopting a DevOps culture that fosters collaboration, feedback, and continuous improvement among your development and operations teams1.

  References:

  1: Platform perspective: infrastructure and applications - An Overview of the AWS Cloud Adoption Framework

• Question 76:

  A company is developing a web application that uses containers. The company needs a repository to store and control access to container images.

  A. Amazon Elastic Container Registry (Amazon ECR)
  B. Amazon Elastic Kubernetes Service (Amazon EKS)
  C. Amazon Elastic Container Service (Amazon ECS)
  D. Amazon EC2
  A. Amazon Elastic Container Registry (Amazon ECR)

  ---

  Explanation

• Question 77:

  Which options does AWS make available for customers who want to learn about security in the cloud in an instructor-led setting? (Select TWO.)

  A. AWS Trusted Advisor
  B. AWS Online Tech Talks
  C. AWS Blog
  D. AWS Forums
  E. AWS Classroom Training
  B. AWS Online Tech Talks
  E. AWS Classroom Training

  ---

  Explanation

  The correct answers are B and E because AWS Online Tech Talks and AWS Classroom Training are options that AWS makes available for customers who want to learn about security in the cloud in an instructor-led setting. AWS Online Tech Talks are live, online presentations that cover a broad range of topics at varying technical levels. AWS Online Tech Talks are delivered by AWS experts and feature live QandA sessions with the audience. AWS Classroom Training are in-person or virtual courses that are led by accredited AWS instructors. AWS Classroom Training offer hands-on labs, exercises, and best practices to help customers gain confidence and skills on AWS. The other options are incorrect because they are not options that AWS makes available for customers who want to learn about security in the cloud in an instructor-led setting. AWS Trusted Advisor is an AWS service that provides real-time guidance to help customers follow AWS best practices for security, performance, cost optimization, and fault tolerance. AWS Blog is an AWS resource that provides news, announcements, and insights from AWS experts and customers. AWS Forums are AWS resources that enable customers to interact with other AWS users and get feedback and support.

  AWS Online Tech Talks, AWS Classroom Training

• Question 78:

  A company plans to migrate to the AWS Cloud. The company wants to gather information about its on-premises data center.

  Which AWS service should the company use to meet these requirements?

  A. AWS Application Discovery Service
  B. AWS DataSync
  C. AWS Storage Gateway
  D. AWS Database Migration Service (AWS DMS)
  A. AWS Application Discovery Service

  ---

  Explanation

  AWS Application Discovery Service helps companies gather information about on-premises data centers to support migration planning. It collects data on system configuration, resource utilization, and network dependencies, providing essential insights for migration. AWS DataSync and Storage Gateway are used for data transfer, while AWS DMS is for database migration specifically.

• Question 79:

  Which AWS service or tool can provide rightsizing recommendations for Amazon EC2 resources at no additional cost?

  A. AWS Well-Architected Tool
  B. Amazon CloudWatch
  C. AWS Cost Explorer
  D. Amazon S3 analytics
  C. AWS Cost Explorer

  ---

  Explanation

• Question 80:

  A company needs an event history of which AWS resources the company has created.

  Which AWS service will provide this information?

  A. Amazon CloudWatch
  B. AWS CloudTrail
  C. Amazon Aurora
  D. Amazon EventBridge
  B. AWS CloudTrail

  ---

  Explanation