Amazon Amazon Certifications CLF-C02 Questions & Answers

• Question 931:

  A company is running multiple workloads in the AWS Cloud and recently began investigating ways to reduce costs. The company is already running fault-tolerant workloads on Amazon EC2 that perform periodic checkpoints in case of an outage.

  Which AWS service or pricing model can provide the GREATEST cost savings?

  A. Capacity Reservations

  B. Amazon Lightsail

  C. Spot Instances

  D. Dedicated Hosts

  Correct Answer: C

• Question 932:

  How can a user protect an Amazon EC2 instance from a suspicious IP address?

  A. Block the IP on the inbound rule of a network ACL.

  B. Block the IP on the outbound rule of a security group.

  C. Block the IP on the inbound rule of a security group and network ACL.

  D. Block the IP on the outbound rule of a security group and network ACL.

  Correct Answer: A

• Question 933:

  Which of the following is the customer responsible for updating and patching, according to the AWS shared responsibility model?

  A. Amazon FSx for Windows File Server

  B. Amazon Workspaces virtual Windows desktop

  C. AWS Directory Service for Microsoft Active Directory

  D. Amazon RDS for Microsoft SQL Server

  Correct Answer: B

• Question 934:

  A company distributes traffic evenly among a fleet of Amazon EC2 instances. The EC2 instances must accommodate unpredictable increases in traffic.

  Which benefit does the AWS Cloud provide to meet this requirement?

  A. Scalability

  B. Resilience

  C. Security

  D. Agility

  Correct Answer: A

• Question 935:

  A retail company is building a new mobile app. The company is evaluating whether to build the app at an on-premises data center or in the AWS Cloud. Which of the following are benefits of building this app in the AWS Cloud? (Select TWO.)

  A. A large, upfront capital expense and low variable expenses

  B. Increased speed for trying out new projects

  C. Complete control over the physical security of the infrastructure

  D. Flexibility to scale up in minutes as the application becomes popular

  E. Ability to pick the specific data centers that will host the application servers

  Correct Answer: AD

• Question 936:

  Which of the following gives a company the ability to fake advantage of tiered pricing tor services across multiple AWS member accounts?

  A. AWS Organizations service control policies (SCPs)

  B. AWS Organizations consolidated billing

  C. All Upfront Reserved instances

  D. Cost Explorer utilization reports

  Correct Answer: B

• Question 937:

  A company runs applications that process credit card information. Auditors have asked if the AWS environment has changed since the previous audit. If the AWS environment has changed, the auditors want to know how it has changed. Which AWS services can provide this information? (Select TWO.)

  A. AWS Artifact

  B. AWS Trusted Advisor

  C. AWS Config

  D. AWS Cloud Trail

  E. AWS Identity and Access Management (IAM)

  Correct Answer: CD

  Explanation: AWS Artifact is your go-to, central resource for compliance-related information that matters to you. It provides on-demand access to AWS' security and compliance reports and select online agreements. AWS Trusted Advisor

  provides recommendations that help you follow AWS best practices. Trusted Advisor evaluates your account by using checks. These checks identify ways to optimize your AWS infrastructure, improve security and performance, reduce costs,

  and monitor service quotas.

  AWS Config is a service that enables you to assess, audit, and evaluate the configurations of your AWS resources. Config continuously monitors and records your AWS resource configurations and allows you to automate the evaluation of

  recorded configurations against desired configurations.

  AWS CloudTrail enables auditing, security monitoring, and operational troubleshooting by tracking user activity and API usage. CloudTrail logs, continuously monitors, and retains account activity related to actions across your AWS

  infrastructure, giving you control over storage, analysis, and remediation actions.

  AWS Identity and Access Management (IAM) provides fine-grained access control across all of AWS. With IAM, you can specify who can access which services and resources, and under which conditions. With IAM policies, you manage

  permissions to your workforce and systems to ensure least-privilege permissions.

• Question 938:

  A company's procurement department wants volume discounts on AWS services for the company but numerous departments have separate AWS accounts. Which AWS service or tool can the company use to receive volume discounts across multiple AWS accounts?

  A. Cost Explore'

  B. AWS Budgets

  C. AWS Cost and Usage Report

  D. AWS Organizations

  Correct Answer: D

• Question 939:

  A company uses Amazon EC2 infrastructure to host steady-stale workloads and needs to achieve significant cost savings. Which EC2 instance pricing model should the company select?

  A. Reserved instances

  B. On-Demand instances

  C. Spot Instances

  D. Dedicated Hosts

  Correct Answer: A

  Explanation: Instances that must be online all the time and have steady or predictable traffic Any baseline usage, while using On-Demand or Spot Instances for bursts Applications that might require reserved capacity Customers who can commit to using EC2 over a one-year or 3-year term https://aws.amazon.com/blogs/startups/optimizing-your-costs-for-aws-services-part-1/

• Question 940:

  A company wants to deploy, scale, and manage third-party virtual appliances in a cluster in the AWS Cloud. These applications include firewalls, intrusion detection and prevention systems, and deep packet inspection systems.

  Which AWS service or resource will meet these requirements?

  A. Application Load Balancer

  B. Gateway Load Balancer

  C. Network Load Balancer

  D. AWS Global Accelerator

  Correct Answer: B

  Explanation: https://docs.aws.amazon.com/prescriptive-guidance/latest/integrate-third- party-services/resources.html