Amazon Amazon Certifications CLF-C02 Questions & Answers

• Question 811:

  A company needs to design an AWS disaster recovery plan to cover multiple geographic areas. Which action will meet this requirement?

  A. Configure multiple AWS accounts.

  B. Configure the architecture across multiple Availability Zones in an AWS Region.

  C. Configure the architecture across multiple AWS Regions.

  D. Configure the architecture among many edge locations.

  Correct Answer: C

• Question 812:

  A company is designing an application. For the data persistence layer, the company wants to use a NoSQL database. Which AWS service should the company use for the database?

  A. Amazon Redshift

  B. AWS DataSync

  C. Amazon Athena

  D. Amazon DynamoDB

  Correct Answer: D

• Question 813:

  Which of the following is an AWS key-value database offering consistent single-digit millisecond performance at any scale?

  A. Amazon RDS

  B. Amazon Aurora

  C. Amazon DynamoDB

  D. Amazon Redshift

  Correct Answer: C

  Explanation: Amazon DynamoDB is designed to provide consistent single-digit millisecond latency for any scale of workloads. This consistent performance is a big part of why the Snapchat Stories feature, which includes Snapchat's largest storage write workload, moved to DynamoDB.

• Question 814:

  Which AWS service can be used to provide an on-demand, cloud-based contact center?

  A. AWS Direct Connect

  B. Amazon Connect

  C. AWS Support Center

  D. AWS Managed Services

  Correct Answer: B

  Explanation: https://aws.amazon.com/connect/

• Question 815:

  Which AWS service can help a company detect an outage of its website servers and redirect users to alternate servers?

  A. Amazon CloudFront

  B. Amazon GuardDuty

  C. Amazon Route 53

  D. AWS Trusted Advisor

  Correct Answer: C

  Explanation: Amazon Route 53 with DNS Failover, Amazon Route 53 can help detect an outage of your website and redirect your end users to alternate locations where your application is operating properly.

• Question 816:

  Which of the following are advantages of moving to the AWS Cloud? (Select TWO.)

  A. Users can implement all AWS services in seconds.

  B. AWS assumes all responsibility for the security of infrastructure and applications.

  C. Users experience increased speed and agility.

  D. Users benefits from massive economies of scale.

  E. Users can more hardware from their data center to the AWS Cloud.

  Correct Answer: CD

• Question 817:

  A company needs to schedule the rotation of database credentials in the AWS Cloud.

  Which AWS service should the company use to perform this task?

  A. AWS Identity and Access Management (IAM)

  B. AWS Managed Services (AMS)

  C. Amazon RDS

  D. AWS Secrets Manager

  Correct Answer: D

  Explanation: AWS Secrets Manager makes it easier to rotate, manage, and retrieve database credentials, API keys, and other secrets throughout their lifecycle. The key features of this service include the ability to:

  1.

  Secure and manage secrets centrally. You can store, view, and manage all your secrets centrally. By default, Secrets Manager encrypts these secrets with encryption keys that you own and control. You can use fine-grained IAM policies or resource-based policies to control access to your secrets. You can also tag secrets to help you discover, organize, and control access to secrets used throughout your organization.

  2.

  Rotate secrets safely. You can configure Secrets Manager to rotate secrets automatically without disrupting your applications. Secrets Manager offers built-in integrations for rotating credentials for all Amazon RDS databases (MySQL, PostgreSQL, Oracle, Microsoft SQL Server, MariaDB, and Amazon Aurora.) You can also extend Secrets Manager to meet your custom rotation requirements by creating an AWS Lambda function to rotate other types of secrets.

  3.

  Transmit securely. Secrets are transmitted securely over Transport Layer Security (TLS) protocol 1.2. You can also use Secrets Manager with Amazon Virtual Private Cloud (Amazon VPC) endpoints powered by AWS Privatelink to keep this communication within the AWS network and help meet your compliance and regulatory requirements to limit public internet connectivity.

  4.

  Pay as you go. Pay for the secrets you store in Secrets Manager and for the use of these secrets; there are no long-term contracts, licensing fees, or infrastructure and personnel costs. For example, a typical production-scale web

  application will generate an estimated monthly bill of $6. If you follow along the instructions in this blog post, your estimated monthly bill for Secrets Manager will be $1. Note: you may incur additional charges for using Amazon RDS and

  Amazon Lambda, if you've already consumed the free tier for these services.

  Now that you're familiar with Secrets Manager features, I'll show you how to store and automatically rotate credentials for an Oracle database hosted on Amazon RDS. I divided these instructions into three phases:

  1.

  Phase 1: Store and configure rotation for the superuser credential

  2.

  Phase 2: Store and configure rotation for the application credential

  3.

  Phase 3: Retrieve the credential from Secrets Manager programmatically

• Question 818:

  A company has acquired several other companies. All the companies host their IT infrastructure in the AWS Cloud. Which AWS service should the acquiring company use to centralize the account management?

  A. AWS Systems Manager

  B. AWS Organizations

  C. AWS Security Hub

  D. Amazon Workspaces

  Correct Answer: B

• Question 819:

  Which of the following are benefits that a company receives when it moves an on-premises internet-lacing website to the AWS Cloud? (Select TWO.)

  A. Data that is stored in the AWS Cloud is automatically encrypted.

  B. Website capacity can expand or contract as website traffic changes.

  C. AWS automatically provides the company with the lowest-cost pricing model.

  D. The website shows up with higher priority in internet search engines

  E. The company can take advantage of the pay-as-you-go pricing model

  Correct Answer: BE

• Question 820:

  Which of the following can be used to identity a specific user who slopped an Amazon EC2 instance?

  A. AWS CloudTrail

  B. Amazon inspector

  C. Amazon CloudWatch

  D. VPC Flow Logs

  Correct Answer: A