Amazon CLF-C02 Online Practice Questions and Exam Preparation

Amazon CLF-C02 Online Questions & Answers

• Question 841:

  A company needs to run an application on Amazon EC2 instances without interruption.

  Which EC2 instance purchasing option will meet this requirement MOST cost-effectively?

  A. Standard Reserved Instances
  B. Convertible Reserved Instances
  C. On-Demand Instances
  D. Spot Instances
  A. Standard Reserved Instances

  ---

  Explanation

• Question 842:

  In the AWS shared responsibility model, which tasks are the responsibility of AWS? (Select TWO.)

  A. Patch an Amazon EC2 instance operating system.
  B. Configure a security group.
  C. Monitor the health of an Availability Zone.
  D. Protect the infrastructure that runs Amazon EC2 instances.
  E. Manage access to the data in an Amazon S3 bucket
  C. Monitor the health of an Availability Zone.
  D. Protect the infrastructure that runs Amazon EC2 instances.

  ---

  Explanation

  According to the AWS shared responsibility model, AWS is responsible for the security of the cloud, which includes the tasks of monitoring the health of an Availability Zone and protecting the infrastructure that runs Amazon EC2 instances. An Availability Zone is a physically isolated location within an AWS Region that has its own power, cooling, and network connectivity. AWS monitors the health and performance of each Availability Zone and notifies customers of any issues or disruptions. AWS also protects the infrastructure that runs AWS services, such as Amazon EC2, by implementing physical, environmental, and operational security measures. AWS is not responsible for patching an Amazon EC2 instance operating system, configuring a security group, or managing access to the data in an Amazon S3 bucket. These are the customer's responsibilities for security in the cloud. The customer must ensure that the operating system and applications on their EC2 instances are up to date and secure. The customer must also configure the security group rules that control the inbound and outbound traffic for their EC2 instances. The customer must also manage the access permissions and encryption settings for their S3 buckets and objects2

• Question 843:

  A company wants to receive alerts when resources that are launched in the company's AWS account reach 80% of their service quotas. Which AWS service should the company use to meet this requirement?

  A. AWS CloudTrail
  B. AWS Trusted Advisor
  C. AWS Config
  D. Amazon inspector
  B. AWS Trusted Advisor

  ---

  Explanation

• Question 844:

  Which tasks are customer responsibilities, according to the AWS shared responsibility model? (Select TWO.)

  A. Configure the AWS provided security group firewall.
  B. Classify company assets in the AWS Cloud.
  C. Determine which Availability Zones to use for Amazon S3 buckets.
  D. Patch or upgrade Amazon DynamoDB.
  E. Select Amazon EC2 instances to run AWS Lambda on.
  F. AWS Config
  A. Configure the AWS provided security group firewall.
  B. Classify company assets in the AWS Cloud.

  ---

  Explanation

  According to the AWS shared responsibility model, the customer is responsible for security in the cloud, which includes the tasks of configuring the AWS provided security group firewall and classifying company assets in the AWS Cloud. A security group is a virtual firewall that controls the inbound and outbound traffic for one or more EC2 instances. The customer must configure the security group rules to allow or deny traffic based on protocol, port, or source and destination IP address2 Classifying company assets in the AWS Cloud means identifying the types, categories, and sensitivity levels of the data and resources that the customer stores and processes on AWS. The customer must also determine the applicable compliance requirements and regulations that apply to their assets, and implement the appropriate security controls and measures to protect them

• Question 845:

  Which AWS services or features give users the ability to create a network connection between two VPCs? (Choose two.)

  A. VPC endpoints
  B. Amazon Route 53
  C. VPC peering
  D. AWS Direct Connect
  E. AWS Transit Gateway
  C. VPC peering
  E. AWS Transit Gateway

  ---

  Explanation

  VPC peering and AWS Transit Gateway are two AWS services or features that give users the ability to create a network connection between two VPCs. VPC peering is a networking connection between two VPCs that enables you to route traffic between them privately. You can create a VPC peering connection between your own VPCs, with a VPC in another AWS account, or with a VPC in a different AWS Region. Traffic between peered VPCs never traverses the public internet. VPC peering does not support transitive peering relationships, which means that if VPC A is peered with VPC B, and VPC B is peered with VPC C, then VPC A and VPC C are not automatically peered789. AWS Transit Gateway is a networking service that acts as a regional router for your VPCs and on- premises networks. You can attach up to 5,000 VPCs and VPN connections to a single transit gateway and route traffic between them. AWS Transit Gateway simplifies the management and scalability of your network architecture, as you only need to create and manage a single connection from the central transit gateway to each connected network. AWS Transit Gateway supports transitive routing, which means that any network that is attached to the transit gateway can communicate with any other network that is attached to the same transit gateway .

• Question 846:

  Which AWS service is a hybrid cloud storage service that provides on-premises users access to virtually unlimited cloud storage?

  A. AWS DataSync
  B. Amazon S3 Glacier
  C. AWS Storage Gateway
  D. Amazon Elastic Block Store (Amazon EBS)
  C. AWS Storage Gateway

  ---

  Explanation

  AWS Storage Gateway is a hybrid cloud storage service that enables on-premises applications to seamlessly access AWS Cloud-based storage. It provides a local cache for frequently accessed data to ensure low-latency access, while also storing data in the cloud for durability and scalability.

• Question 847:

  A company has a MariaDB database on premises. The company wants to move the data to the AWS Cloud. Which AWS service will host this database with the LEAST amount of operational overhead?

  A. Amazon RDS
  B. Amazon Neptune
  C. Amazon S3
  D. Amazon DynamoDB
  A. Amazon RDS

  ---

  Explanation

  Amazon RDS provides a managed database service that supports MariaDB with minimal operational overhead. It handles routine database tasks such as backups, patching, and scaling, reducing the burden on users. Amazon Neptune and DynamoDB are not compatible with MariaDB, and Amazon S3 is not a relational database service.

• Question 848:

  Which AWS service supports the analysis, investigation, and identification of the root cause of security events and suspicious activities in an AWS account?

  A. Amazon Inspector
  B. Amazon Macie
  C. Amazon Detective
  D. Amazon CloudWatch
  C. Amazon Detective

  ---

  Explanation

• Question 849:

  Which AWS service provides serverless compute for use with containers?

  A. Amazon Simple Queue Service (Amazon SQS)
  B. AWS Fargate
  C. AWS Elastic Beanstalk
  D. Amazon SageMaker
  B. AWS Fargate

  ---

  Explanation

• Question 850:

  A company is releasing a business-critical application. Before the release, the company needs strategic planning assistance from AWS. During the release, the company needs AWS infrastructure event management and real-time support. What should the company do to meet these requirement?

  A. Access AWS Trusted Advisor.
  B. Contact the AWS Partner Network (APN).
  C. Sign up for AWS Enterprise Support.
  D. Contact AWS Professional Services.
  C. Sign up for AWS Enterprise Support.

  ---

  Explanation

  AWS Enterprise Support provides strategic planning assistance, infrastructure event management, and real-time support, which are necessary for business-critical applications. Trusted Advisor and APN do not offer direct strategic support, and while AWS Professional Services can assist with complex solutions, Enterprise Support specifically includes ongoing operational support and event management.