Amazon CLF-C02 Online Practice Questions and Exam Preparation

Amazon CLF-C02 Online Questions & Answers

• Question 871:

  Which design principle is achieved by following the reliability pillar of the AWS Well- Architected Framework?

  A. Vertical scaling
  B. Manual failure recovery
  C. Testing recovery procedures
  D. Changing infrastructure manually
  C. Testing recovery procedures

  ---

  Explanation

  Testing recovery procedures is the design principle that is achieved by following the reliability pillar of the AWS Well-Architected Framework. The reliability pillar focuses on the ability of a system to recover from failures and prevent disruptions. Testing recovery procedures helps to ensure that the system can handle different failure scenarios and restore normal operations as quickly as possible. Testing recovery procedures also helps to identify and mitigate any risks or gaps in the system design and implementation. For more information, see [Reliability Pillar] and [Testing for Reliability].

• Question 872:

  Which of the following are benefits of using AWS Trusted Advisor? (Choose two.)

  A. Providing high-performance container orchestration
  B. Creating and rotating encryption keys
  C. Detecting underutilized resources to save costs
  D. Improving security by proactively monitoring the AWS environment
  E. Implementing enforced tagging across AWS resources
  C. Detecting underutilized resources to save costs
  D. Improving security by proactively monitoring the AWS environment

  ---

  Explanation

  C and D are correct.

  Benefits of Trusted Advisor:

  Cost optimization - Trusted Advisor can help you save cost with actionable recommendations by analyzing usage, configuration and spend. ?Performance - Trusted Advisor can help improve the performance of your services with actionable

  recommendations by analyzing usage and configuration. ?Security - Trusted Advisor can help improve the security of your AWS environment by suggesting foundational security best practices curated by security experts.

  Fault tolerance - Trusted Advisor can help improve the reliability of your services.

  Service quotas - Service quotas are the maximum number of resources that you can create in an AWS account.

  https://aws.amazon.com/premiumsupport/technology/trusted-advisor/

• Question 873:

  A company wants to migrate its on-premises workloads to the AWS Cloud. The company wants to separate workloads for chargeback to different departments.

  Which AWS services or features will meet these requirements? (Choose two.)

  A. Placement groups
  B. Consolidated billing
  C. Edge locations
  D. AWS Config
  E. Multiple AWS accounts
  B. Consolidated billing
  E. Multiple AWS accounts

  ---

  Explanation

  Consolidated billing is a feature of AWS Organizations that enables customers to consolidate billing and payment for multiple AWS accounts. With consolidated billing, customers can group multiple AWS accounts under one payer account,

  making it easier to manage billing and track costs across multiple accounts. Consolidated billing also offers benefits such as volume discounts, Reserved Instance discounts, and Savings Plans discounts. Consolidated billing is offered at no

  additional cost. Multiple AWS accounts is a feature of AWS Organizations that enables customers to create and manage multiple AWS accounts from a central location. With multiple AWS accounts, customers can isolate workloads for

  different departments, projects, or environments, and apply granular access controls and policies to each account. Multiple AWS accounts also helps customers improve security, compliance, and governance of their AWS resources.

  References:

  Consolidated billing for AWS Organizations - AWS Billing,

  Understanding Consolidated Bills - AWS Billing,

  AWS Consolidated Billing:

  Tutorial and Best Practices,

  Simplifying Your Bills With Consolidated Billing on AWS - Aimably,

  AWS Consolidated Billing - W3Schools

• Question 874:

  A company needs to transfer data between an Amazon S3 bucket and an on-premises application. Who is responsible for the security of this data, according to the AWS shared responsibility model?

  A. The company
  B. AWS
  C. Firewall vendor
  D. AWS Marketplace partner
  A. The company

  ---

  Explanation

• Question 875:

  Which controls are shared under the AWS shared responsibility model? (Select TWO.)

  A. Awareness and training
  B. Patching of Amazon RDS
  C. Configuration management
  D. Physical and environmental controls
  E. Service and communications protection or security
  A. Awareness and training
  C. Configuration management

  ---

  Explanation

  In the AWS shared security model, a shared control, AWS provides the requirements for the infrastructure and the customer must provide their own control implementation within their use of AWS services.

  Examples of shared controls include:

  *Patch Management ?AWS is responsible for patching and fixing flaws within the infrastructure, but customers are responsible for patching their guest OS and applications. *Configuration Management ?AWS maintains the configuration of its

  infrastructure devices, but a customer is responsible for configuring their own guest operating systems, databases, and applications.

  *Awareness and Training ?AWS trains AWS employees, but a customer must train their own employees.

  Customer Specific ?Controls which are solely the responsibility of the customer based on the application they are deploying within AWS services.

  Examples of customer specific controls include:

  *Service and Communications Protection or Zone Security which may require a customer to route or zone data within specific security environments.

• Question 876:

  An auditor is preparing for an annual security audit. The auditor requests certification details for a company's AWS hosted resources across multiple Availability Zones in the us- east-1 Region. How should the company respond to the auditor's request?

  A. Open an AWS Support ticket to request that the AWS technical account manager (TAM) respond and help the auditor.
  B. Open an AWS Support ticket to request that the auditor receive approval to conduct an onsite assessment of the AWS data centers in which the company operates.
  C. Explain to the auditor that AWS does not need to be audited because the company's application is hosted in multiple Availability Zones.
  D. Use AWS Artifact to download the applicable report for AWS security controls. Provide the report to the auditor.
  D. Use AWS Artifact to download the applicable report for AWS security controls. Provide the report to the auditor.

  ---

  Explanation

  AWS Artifact is your go-to, central resource for compliance-related information that matters to you. It provides on-demand access to AWS' security and compliance reports and select online agreements. Reports available in AWS Artifact include our Service Organization Control (SOC) reports, Payment Card Industry (PCI) reports, and certifications from accreditation bodies across geographies and compliance verticals that validate the implementation and operating effectiveness of AWS security controls. Agreements available in AWS Artifact include the Business Associate Addendum (BAA) and the Nondisclosure Agreement (NDA). You can use AWS Artifact to download the applicable report for AWS security controls and provide it to the auditor.

• Question 877:

  Which of the following consists of one or more isolated data centers in the same regional area that are interconnected through low-latency networks?

  A. Availability Zone
  B. Edge location
  C. AWS Region
  D. Private networking
  A. Availability Zone

  ---

  Explanation

• Question 878:

  A company is running an order processing system on Amazon EC2 instances. The company wants to migrate microservices-based application.

  Which combination of AWS services can the application use to meet these requirements? (Select TWO.)

  A. Amazon Simple Queue Service (Amazon SQS)
  B. AWS Lambda
  C. AWS Migration Hub
  D. AWS AppSync
  E. AWS Application Migration Service
  A. Amazon Simple Queue Service (Amazon SQS)
  B. AWS Lambda

  ---

  Explanation

  The combination of AWS services that the application can use to migrate to a microservices-based application are Amazon Simple Queue Service (Amazon SQS) and AWS Lambda. Amazon SQS is a fully managed message queuing service that enables customers to decouple and scale microservices, distributed systems, and serverless applications. The application can use Amazon SQS to send, store, and receive messages between the microservices, ensuring that each message is processed only once and in the right order. AWS Lambda is a serverless compute service that allows customers to run code without provisioning or managing servers. The application can use AWS Lambda to create and deploy microservices as functions that are triggered by events, such as messages from Amazon SQS. AWS Migration Hub, AWS AppSync, and AWS Application Migration Service are not the best services to use for migrating to a microservicesbased application. AWS Migration Hub is a service that provides a single location to track the progress of application migrations across multiple AWS and partner solutions. AWS AppSync is a service that simplifies the development of GraphQL APIs for real-time and offline data synchronization. AWS Application Migration Service is a service that enables customers to migrate their on-premises applications to AWS without making any changes to the applications, servers, or databases.

• Question 879:

  A company wants to migrate a database from an on-premises environment to Amazon RDS.

  After the migration is complete, which management task will the company still be responsible for?

  A. Hardware lifecycle management
  B. Application optimization
  C. Server maintenance
  D. Power, network, and cooling provisioning
  B. Application optimization

  ---

  Explanation

  Amazon RDS is a managed database service that handles most of the common database administration tasks, such as hardware provisioning, server maintenance, backup and recovery, patching, scaling, and replication. However, Amazon

  RDS does not optimize the application that interacts with the database. The company is still responsible for tuning the performance, security, and availability of the application according to its business requirements and best practices.

  References:

  What is Amazon Relational Database Service (Amazon RDS)? Perform common DBA tasks for Amazon RDS DB instances

• Question 880:

  Which task can only an AWS account root user perform?

  A. Changing the AWS Support plan
  B. Deleting AWS resources
  C. Creating an Amazon EC2 instance key pair
  D. Configuring AWS WAF
  A. Changing the AWS Support plan

  ---

  Explanation

  The AWS account root user is the email address that you use to sign up for AWS. The root user has complete access to all AWS services and resources in the account. The root user can perform tasks that only the root user can do, such as changing the AWS Support plan, closing the account, and restoring IAM user permissions34