Amazon CLF-C02 Online Practice Questions and Exam Preparation

Amazon CLF-C02 Online Questions & Answers

• Question 951:

  A company needs to track the activity in its AWS accounts, and needs to know when an API call is made against its AWS resources.

  Which AWS tool or service can be used to meet these requirements?

  A. Amazon CloudWatch
  B. Amazon Inspector
  C. AWS CloudTrail
  D. AWS IAM
  C. AWS CloudTrail

  ---

  Explanation

  AWS CloudTrail is the service that can be used to meet these requirements. AWS CloudTrail is a service that records AWS API calls for your account and delivers log files to you. The recorded information includes the identity of the API caller, the time of the API call, the source IP address of the API caller, the request parameters, and the response elements returned by the AWS service. You can use CloudTrail to track the activity in your AWS accounts, such as who made an API call, when it was made, and what resources were affected. You can also use CloudTrail to monitor the compliance, security, and governance of your AWS environment. The other services are not designed to track the activity and API calls in your AWS accounts. Amazon CloudWatch is a service that monitors and collects metrics, logs, and events from your AWS resources and applications. You can use CloudWatch to set alarms, visualize data, and automate actions based on predefined thresholds or rules. Amazon Inspector is a service that helps you improve the security and compliance of your applications running on AWS. Inspector automatically assesses applications for exposure, vulnerabilities, and deviations from best practices. AWS IAM is a service that enables you to manage access to AWS services and resources securely. IAM allows you to create and manage AWS users and groups, and use permissions to allow and deny their access to AWS resources.

  References: AWS CloudTrail, AWS CloudTrail ?Capture AWS API Activity, Amazon CloudWatch, Amazon Inspector, [AWS IAM]

• Question 952:

  Which of the following is a cost efficiency principle related to the AWS Cloud?

  A. Right-size services based on capacity requirements.
  B. Use the Billing Dashboard to access information about monthly bills.
  C. Use AWS Organizations to combine the expenses of multiple accounts into a single bill.
  D. Tag all AWS resources.
  A. Right-size services based on capacity requirements.

  ---

  Explanation

  One of the cost efficiency principles related to the AWS Cloud is to right-size services based on capacity requirements. This means choosing the most appropriate type and size of AWS resources to meet the performance and scalability needs of the applications, while avoiding over-provisioning or under-provisioning. By right-sizing services, users can optimize the costs and benefits of using the AWS Cloud1

• Question 953:

  What is a characteristic of Convertible Reserved Instances (RIs)?

  A. Users can exchange Convertible RIs for other Convertible RIs from a different instance family.
  B. Users can exchange Convertible RIs for other Convertible RIs in different AWS Regions.
  C. Users can sell and buy Convertible RIs on the AWS Marketplace.
  D. Users can shorten the term of their Convertible RIs by merging them with other Convertible RIs.
  A. Users can exchange Convertible RIs for other Convertible RIs from a different instance family.

  ---

  Explanation

  Convertible Reserved Instances (RIs) are a type of Reserved Instance that allow you to change the attributes of the RI as long as the exchange results in the creation of Reserved Instances of equal or greater value. You can exchange Convertible RIs for other Convertible RIs from a different instance family, size, platform, tenancy, or scope (Region or Availability Zone)3.

• Question 954:

  Which activity can companies complete by using AWS Organizations?

  A. Troubleshoot the performance of applications.
  B. Manage service control policies (SCPs).
  C. Migrate applications to microservices.
  D. Monitor the performance of applications.
  B. Manage service control policies (SCPs).

  ---

  Explanation

  Managing service control policies (SCPs) is an activity that companies can complete by using AWS Organizations. AWS Organizations is a service that enables the user to consolidate multiple AWS accounts into an organization that can be managed as a single unit. AWS Organizations allows the user to create groups of accounts and apply policies to them, such as service control policies (SCPs) that specify the services and actions that users and roles can access in the accounts. AWS Organizations also enables the user to use consolidated billing, which combines the usage and charges from all the accounts in the organization into a single bill3.

• Question 955:

  A company's cloud environment includes Amazon EC2 instances and Application Load Balancers. The company wants to improve protections for its cloud resources against DDoS attacks. The company also wants to have real-time visibility into any DDoS attacks.

  Which AWS service will meet these requirements?

  A. AWS Shield Standard
  B. AWS Firewall Manager
  C. AWS Shield Advanced
  D. Amazon GuardDuty
  C. AWS Shield Advanced

  ---

  Explanation

• Question 956:

  A company needs to use standard SQL to query and combine exabytes of structured and semi-structured data across a data warehouse, operational database, and data lake.

  Which AWS service meets these requirements?

  A. Amazon DynamoDB
  B. Amazon Aurora
  C. Amazon Athena
  D. Amazon Redshift
  D. Amazon Redshift

  ---

  Explanation

  Amazon Redshift is the service that meets the requirements of using standard SQL to query and combine exabytes of structured and semi-structured data across a data warehouse, operational database, and data lake. Amazon Redshift is a fully managed, petabyte-scale data warehouse service that allows you to run complex analytic queries using standard SQL and your existing business intelligence tools. Amazon Redshift also supports Redshift Spectrum, a feature that allows you to directly query and join data stored in Amazon S3 using the same SQL syntax. Amazon Redshift can scale up or down to handle any volume of data and deliver fast query performance5

• Question 957:

  A company wants to operate a data warehouse to analyze data without managing the data warehouse infrastructure. Which AWS service will meet this requirement?

  A. Amazon Aurora
  B. Amazon Redshift Serverless
  C. AWS Lambda
  D. Amazon RDS
  B. Amazon Redshift Serverless

  ---

  Explanation

  "Amazon Redshift Serverless makes it easy to run analytics workloads of any size without having to manage data warehouse infrastructure."

  https://aws.amazon.com/redshift/redshift-serverless/

• Question 958:

  Which of the following are AWS Cloud design principles? (Select TWO.)

  A. Pay for compute resources in advance.
  B. Make data-driven decisions to determine cloud architectural design.
  C. Emphasize manual processes to allow for changes.
  D. Test systems at production scale.
  E. Refine operational procedures infrequently.
  B. Make data-driven decisions to determine cloud architectural design.
  D. Test systems at production scale.

  ---

  Explanation

  The correct answers are B and D because making data-driven decisions to determine cloud architectural design and testing systems at production scale are AWS Cloud design principles. Making data-driven decisions to determine cloud architectural design means that users should collect and analyze data from their AWS resources and applications to optimize their performance, availability, security, and cost. Testing systems at production scale means that users should simulate real-world scenarios and load conditions to validate the functionality, reliability, and scalability of their systems. The other options are incorrect because they are not AWS Cloud design principles. Paying for compute resources in advance means that users have to invest heavily in data centers and servers before they know how they will use them. This is not a cloud design principle, but rather a traditional IT model. Emphasizing manual processes to allow for changes means that users have to rely on human intervention and coordination to perform operational tasks and updates. This is not a cloud design principle, but rather a source of inefficiency and error. Refining operational procedures infrequently means that users have to stick to the same methods and practices without adapting to the changing needs and feedback. This is not a cloud design principle, but rather a hindrance to innovation and improvement.

  AWS Well-Architected Framework

• Question 959:

  Which AWS service enables the decoupling and scaling of applications?

  A. Amazon Simple Queue Service (Amazon SQS)
  B. AWS Outposts
  C. Amazon S3
  D. Amazon Simple Email Service (Amazon SES)
  A. Amazon Simple Queue Service (Amazon SQS)

  ---

  Explanation

  Amazon Simple Queue Service (SQS) is a fully managed message queuing service that enables you to decouple and scale microservices, distributed systems, and serverless applications.

• Question 960:

  A company is running and managing its own Docker environment on Amazon EC2 instances. The company wants an alternative to help manage cluster size, scheduling, and environment maintenance. Which AWS service meets these requirements?

  A. AWS Lambda
  B. Amazon RDS
  C. AWS Fargate
  D. Amazon Athena
  C. AWS Fargate

  ---

  Explanation

  AWS Fargate is a serverless compute engine for containers that works with both Amazon Elastic Container Service (Amazon ECS) and Amazon Elastic Kubernetes Service (Amazon EKS). AWS Fargate allows you to run containers without having to manage servers or clusters of Amazon EC2 instances. With AWS Fargate, you only pay for the compute resources you use to run your containers, and you don't need to worry about scaling, patching, securing, or maintaining the underlying infrastructure. AWS Fargate simplifies the deployment and management of containerized applications, and enables you to focus on building and running your applications instead of managing the infrastructure.

  References: AWS Fargate, What is AWS Fargate?