Amazon Amazon Certifications CLF-C02 Questions & Answers

• Question 911:

  A company is moving its office and must establish an encrypted connection to AWS.

  Which AWS service will help meet this requirement?

  A. AWS VPN

  B. Amazon Route 53

  C. Amazon API Gateway

  D. Amazon Connect

  Correct Answer: A

• Question 912:

  A company stores several terabytes of data in an Amazon S3 bucket. The company needs to query the data by using standard SQL and does not want to set up infrastructure. Which AWS service should the company use to meet these. requirements?

  A. Amazon RDS

  B. Amazon Redshift

  C. Amazon Athena

  D. Amazon EC2

  Correct Answer: C

• Question 913:

  Which AWS service enables the decoupling and scaling of applications?

  A. Amazon Simple Queue Service (Amazon SQS)

  B. AWS Outposts

  C. Amazon S3

  D. Amazon Simple Email Service (Amazon SES)

  Correct Answer: A

  Explanation: Amazon Simple Queue Service (SQS) is a fully managed message queuing service that enables you to decouple and scale microservices, distributed systems, and serverless applications.

• Question 914:

  Which of the following are advantages of moving from on premises to the AWS Cloud? (Select TWO)

  A. Trade variable expenses for capital expenses

  B. Eliminate costs related to running and maintaining data centers.

  C. Benefit from massive economies of scale.

  D. Eliminate the need to train IT staff.

  E. Gain the ability to reserve capacity for 7 years or more

  Correct Answer: AC

• Question 915:

  A company moves a workload to AWS lo run on Amazon EC2 instances. The company needs to run the workload in the most cost-effective way.

  What can the company do lo meet this requirement?

  A. Use AWS Key Management Sen/ice (AWS KMS)

  B. Use multiple AWS accounts and consolidated billing.

  C. Use AWS CloudFormation to deploy the infrastructure.

  D. Rightsize all the EC2 instances that are used in the deployment

  Correct Answer: D

• Question 916:

  A company wants to migrate its on-premises Microsoft SQL Server database server to the AWS Cloud. The company has decided to use Amazon EC2 instances to run this database.

  Which of the following is the company responsible for managing, according to the AWS shared responsibility model?

  A. EC2 hypervisor

  B. Security patching of the guest operating system

  C. Network connectivity of the host server

  D. Uptime service level agreement (SLA) for the EC2 instances

  Correct Answer: B

• Question 917:

  A company manages global applications that require static IP addresses.

  Which AWS service would enable the company to improve the availability and performance of its applications?

  A. Amazon CloudFront

  B. AWS Global Accelerator

  C. Amazon S3 Transfer Acceleration

  D. Amazon API Gateway

  Correct Answer: B

  Explanation: AWS Global Accelerator provides you with a set of static IP addresses that can map to multiple application endpoints across AWS Regions, to improve redundancy.

• Question 918:

  Which AWS service or tool lists all the users in an account and reports on the status of account details, including passwords, access keys, and multi-factor authentication (MFA) devices?

  A. WS Shield

  B. AWS Trusted Advisor

  C. Amazon Inspector

  D. IAM credential report

  Correct Answer: D

  Explanation: You can generate and download a credential report that lists all users in your account and the status of their various credentials, including passwords, access keys, and MFA devices. You can get a credential report from the AWS Management Console, the AWS SDKs and Command Line Tools , or the IAM API.

• Question 919:

  A company wants to analyze streaming user data and respond to customer queries in real time.

  Which AWS service can meet these requirements?

  A. Amazon QuickSight

  B. Amazon Redshift

  C. Amazon Kinesis Data Analytics

  D. AWS Data Pipeline

  Correct Answer: C

  Explanation: Amazon Kinesis is the AWS service that makes it easy to collect, process, and analyze such real-time, streaming data with four different capabilities: Kinesis Data Streams: Enables ingesting, buffering, and custom processing of your streaming data.

• Question 920:

  A company requires an isolated environment within AWS for security purposes. Which action can be taken to accomplish this?

  A. Create a separate Availability Zone to host the resources.

  B. Create a separate VPC to host the resources.

  C. Create a placement group to host the resources.

  D. Create an AWS Direct Connect connection between the company and AWS.

  Correct Answer: B

  Explanation: Network isolation A virtual private cloud (VPC) is a virtual network in your own logically isolated area in the AWS Cloud. Use separate VPCs to isolate infrastructure by workload or organizational entity. A subnet is a range of IP addresses in a VPC. When you launch an instance, you launch it into a subnet in your VPC. Use subnets to isolate the tiers of your application (for example, web, application, and database) within a single VPC. Use private subnets for your instances if they should not be accessed directly from the internet. To call the Amazon EC2 API from your VPC without sending traffic over the public internet, use AWS PrivateLink. https://docs.aws.amazon.com/AWSEC2/latest/WindowsGuide/infrastructure-security.html