Amazon CLF-C02 Online Practice Questions and Exam Preparation

Amazon CLF-C02 Online Questions & Answers

• Question 931:

  What does "security of the cloud" refer to in the AWS shared responsibility model?

  A. Availability of AWS services such as Amazon EC2
  B. Security of the cloud infrastructure that runs all the AWS services
  C. Implementation of password policies for IAM users
  D. Security of customer environments by using AWS Network Firewall partners
  B. Security of the cloud infrastructure that runs all the AWS services

  ---

  Explanation

  Security of the cloud refers to the security of the cloud infrastructure that runs all the AWS services. This includes the hardware, software, networking, and facilities that AWS operates and manages. AWS is responsible for protecting the security of the cloud as part of the AWS shared responsibility model. Availability of AWS services such as Amazon EC2 refers to the ability of the services to be up and running and to meet the expected performance. Availability is part of the reliability pillar of the AWS Well-Architected Framework and is a shared responsibility between AWS and the customer . Implementation of password policies for IAM users refers to the security of the customer data and applications in the cloud. This includes the configuration and management of IAM user permissions, encryption keys, security group rules, network ACLs, and other aspects of access management. The customer is responsible for protecting the security in the cloud as part of the AWS shared responsibility model. Security of customer environments by using AWS Network Firewall partners refers to the security of the customer data and applications in the cloud. AWS Network Firewall is a managed service that provides network protection for Amazon VPCs. It allows customers to use AWS Marketplace partners to implement firewall rules and policies. The customer is responsible for protecting the security in the cloud as part of the AWS shared responsibility model .

• Question 932:

  A company wants to track its AWS account's service costs. The company also wants to receive notifications when costs are forecasted to reach a specific level.

  Which AWS service or tool provides this functionality?

  A. AWS Budgets
  B. AWS Cost Explorer
  C. Savings Plans
  D. AWS Billing Conductor
  A. AWS Budgets

  ---

  Explanation

  AWS Budgets gives you the ability to set custom budgets that alert you when your costs or usage exceed (or are forecasted to exceed) your budgeted amount. You can also use AWS Budgets to set reservation utilization or coverage targets and receive alerts when your utilization drops below the threshold you define2.

• Question 933:

  What is the LEAST expensive AWS Support plan that provides the full set of AWS Trusted Advisor best practice checks for cost optimization?

  A. AWS Enterprise Support
  B. AWS Business Support
  C. AWS Developer Support
  D. AWS Basic Support
  B. AWS Business Support

  ---

  Explanation

  AWS Business Support is the least expensive AWS Support plan that provides the full set of AWS Trusted Advisor best practice checks for cost optimization. AWS Trusted Advisor is a service that provides best practices and recommendations for cost optimization, performance, security, and fault tolerance. AWS Business Support also provides other benefits, such as 24/7 technical support, unlimited cases, and faster response times. AWS Enterprise Support is the most expensive AWS Support plan that provides the same benefits as AWS Business Support, plus additional benefits, such as a technical account manager and enterprise concierge support. AWS Developer Support and AWS Basic Support are cheaper AWS Support plans that provide only a limited set of AWS Trusted Advisor best practice checks for cost optimization .

• Question 934:

  Which of the following is a pillar of the AWS Well-Architected Framework?

  A. Redundancy
  B. Operational excellence
  C. Availability
  D. Multi-Region
  B. Operational excellence

  ---

  Explanation

  The AWS Well-Architected Framework helps cloud architects build secure, high-performing, resilient, and efficient infrastructure for their applications and workloads. Based on five pillars -- operational excellence, security, reliability, performance efficiency, and cost optimization -- the Framework provides a consistent approach for customers and partners to evaluate architectures, and implement designs that can scale over time. Operational excellence is one of the pillars of the Framework, and it focuses on running and monitoring systems to deliver business value, and continually improving processes and procedures.

• Question 935:

  Which design principles of the AWS WelI-Architected Framework help increase reliability? (Select TWO.)

  A. Automatically recover from failure.
  B. Enable traceability.
  C. Scale horizontally to increase workload availability.
  D. Automate security best practices.
  E. Keep people away from data.
  A. Automatically recover from failure.
  C. Scale horizontally to increase workload availability.

  ---

  Explanation

  ReliabilityThe Reliability pillar encompasses the ability of a workload to perform its intended function correctly and consistently when it's expected to. This includes the ability to operate and test the workload through its total lifecycle. You can find prescriptive guidance on implementation in the Reliability Pillar whitepaper. Design PrinciplesThere are five design principles for reliability in the cloud: Automatically recover from failure Test recovery procedures Scale horizontally to increase aggregate workload availability Stop guessing capacity Manage change in automation

  https://aws.amazon.com/blogs/apn/the-6-pillars-of-the-aws-well-architected-framework/

• Question 936:

  A company needs to consolidate the billing for multiple AWS accounts. The company needs to use one account to pay on behalf of all the other accounts. Which AWS service or tool should the company use to meet this requirement?

  A. AWS Trusted Advisor
  B. AWS Organizations
  C. AWS Budgets
  D. AWS Service Catalog
  B. AWS Organizations

  ---

  Explanation

• Question 937:

  Which AWS service should a company use to create a NoSQL database?

  A. Amazon Aurora
  B. Amazon DynamoDB
  C. Amazon Redshift
  D. Amazon Neptune
  B. Amazon DynamoDB

  ---

  Explanation

• Question 938:

  A company is building an application that requires the ability to send, store, and receive messages between application components. The company has another requirement to process messages in first-in, first-out (FIFO) order. Which AWS service should the company use?

  A. AWS Step Functions
  B. Amazon Simple Notification Service (Amazon SNS)
  C. Amazon Kinesis Data Streams
  D. Amazon Simple Queue Service (Amazon SQS)
  D. Amazon Simple Queue Service (Amazon SQS)

  ---

  Explanation

• Question 939:

  A company is using Amazon RDS.

  Which task is the company's responsibility, according to the AWS shared responsibility model?

  A. Apply encryption options for the database.
  B. Manage the underlying server hardware on which Amazon RDS runs.
  C. Apply patches to the underlying operating system.
  D. Apply minor patches to the database.
  A. Apply encryption options for the database.

  ---

  Explanation

• Question 940:

  Which advantage of cloud computing allows users to scale resources up and down based on the amount of load that an application supports?

  A. Go global in minutes
  B. Stop guessing capacity
  C. Benefit from massive economies of scale
  D. Trade fixed expense for variable expense
  B. Stop guessing capacity

  ---

  Explanation

  The ability to scale resources up and down based on application load is tied to the advantage of "Stop guessing capacity." This feature allows users to scale resources automatically to match the demand, thereby avoiding over-provisioning or under- provisioning of resources. "Go global in minutes," "Benefit from massive economies of scale," and "Trade fixed expense for variable expense" are other advantages of cloud computing, but they do not specifically address scaling resources up and down based on load.