πŸ”

CLF-C02 β€” questions

Page 27 of 36 Β· 719 total questions.

Topic 1 Β· Question 521 Β· Select all that apply

A retail company is building a new mobile app. The company is evaluating whether to build the app at an on-premises data center or in the AWS Cloud. Which of the following are benefits of building this app in the AWS Cloud? (Choose two.)

  • AA large, upfront capital expense and low variable expenses
  • BIncreased speed for trying out new projects (correct answer)
  • CComplete control over the physical security of the infrastructure
  • DFlexibility to scale up in minutes as the application becomes popular (correct answer)
  • EAbility to pick the specific data centers that will host the application servers
Reveal answer & explanation
Correct answer: B, D

The correct answer is B, D. Option B: Increased speed for trying out new projects Option D: Flexibility to scale up in minutes as the application becomes popular.

Topic 1 Β· Question 522

A company must archive its documents by using a write-once, read-many (WORM) model to meet legal and compliance obligations. Which feature of Amazon S3 can the company use to meet this requirement?

  • AS3 Versioning
  • BS3 bucket policy
  • CS3 Glacier Vault Lock (correct answer)
  • DS3 multi-factor authentication (MFA) delete
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: S3 Glacier Vault Lock

Explanation

Amazon S3 Glacier offers low-cost archival storage for infrequently accessed data. Amazon S3 provides durable, scalable object storage that is fully managed.

Topic 1 Β· Question 523

A company has batch workloads that need to run for short periods of time on Amazon EC2. The workloads can handle interruptions and can start again from where they ended. What is the MOST cost-effective EC2 instance purchasing option to meet these requirements?

  • AReserved Instances
  • BSpot Instances (correct answer)
  • CDedicated Instances
  • DOn-Demand Instances
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Spot Instances

Explanation

Spot Instances use spare capacity at a large discount, ideal for fault-tolerant or interruptible workloads. This option delivers the requirement at the lowest cost.

Topic 1 Β· Question 524

A company needs to deploy a PostgreSQL database into Amazon RDS. The database must be highly available and fault tolerant. Which AWS solution should the company use to meet these requirements?

  • AAmazon RDS with a single Availability Zone
  • BAmazon RDS snapshots
  • CAmazon RDS with multiple Availability Zones (correct answer)
  • DAWS Database Migration Service (AWS DMS)
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: Amazon RDS with multiple Availability Zones

Explanation

Amazon RDS is a managed relational database that handles patching, backups and failover. By spanning multiple Availability Zones / adding redundancy, this option provides the high availability and resilience required.

Topic 1 Β· Question 525

What is the MOST secure way to store passwords on AWS?

  • AStore passwords in an Amazon S3 bucket.
  • BStore passwords as AWS CloudFormation parameters.
  • CStore passwords in AWS Storage Gateway.
  • DStore passwords in AWS Secrets Manager. (correct answer)
Reveal answer & explanation
Correct answer: D

The correct answer is D. Option D: Store passwords in AWS Secrets Manager.

Explanation

Amazon RDS is a managed relational database that handles patching, backups and failover. AWS Secrets Manager stores and automatically rotates secrets such as database credentials.

Topic 1 Β· Question 526 Β· Select all that apply

Which statements accurately describe the relationships among components of AWS global infrastructure? (Choose two.)

  • AThere are more AWS Regions than Availability Zones.
  • BThere are more edge locations than AWS Regions. (correct answer)
  • CAn edge location is an Availability Zone.
  • DThere are more AWS Regions than edge locations.
  • EThere are more Availability Zones than AWS Regions. (correct answer)
Reveal answer & explanation
Correct answer: B, E

The correct answer is B, E. Option B: There are more edge locations than AWS Regions. Option E: There are more Availability Zones than AWS Regions.

Topic 1 Β· Question 527

Which AWS service provides DNS resolution?

  • AAmazon CloudFront
  • BAmazon VPC
  • CAmazon Route 53 (correct answer)
  • DAWS Direct Connect
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: Amazon Route 53

Explanation

Amazon Route 53 provides DNS with health checks and routing policies for availability and latency.

Topic 1 Β· Question 528

A company needs to host an application in a specific geographic area to comply with regulations. Which feature of the AWS global infrastructure will help the company meet this requirement?

  • AScalability
  • BGlobal footprint (correct answer)
  • CAvailability
  • DPerformance
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Global footprint.

Topic 1 Β· Question 529 Β· Select all that apply

An ecommerce company plans to move its data center workload to the AWS Cloud to support highly dynamic usage patterns. Which benefits make the AWS Cloud cost-effective for the migration of this type of workload? (Choose two.)

  • AReliability
  • BSecurity
  • CElasticity (correct answer)
  • DPay-as-you-go resource (correct answer)
  • EHigh availability
Reveal answer & explanation
Correct answer: C, D

The correct answer is C, D. Option C: Elasticity Option D: Pay-as-you-go resource This option delivers the requirement at the lowest cost.

Topic 1 Β· Question 530

When designing AWS workloads to be operational even when there are component failures, what is an AWS best practice?

  • APerform quarterly disaster recovery tests.
  • BPlace the main component on the us-east-1 Region.
  • CDesign for automatic failover to healthy resources. (correct answer)
  • DDesign workloads to fit on a single Amazon EC2 instance.
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: Design for automatic failover to healthy resources.

Topic 1 Β· Question 531

Which of the following can the AWS Pricing Calculator do?

  • AProject monthly AWS costs. (correct answer)
  • BCalculate historical AWS costs.
  • CProvide in-depth information about AWS pricing strategies.
  • DProvide users with access to their monthly bills.
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: Project monthly AWS costs.

Topic 1 Β· Question 532

Which AWS solution gives companies the ability to use protocols such as NFS to store and retrieve objects in Amazon S3?

  • AAmazon FSx for Lustre
  • BAWS Storage Gateway volume gateway
  • CAWS Storage Gateway file gateway (correct answer)
  • DAmazon Elastic File System (Amazon EFS)
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: AWS Storage Gateway file gateway

Explanation

AWS Storage Gateway bridges on-premises apps to AWS storage with local caching.

Topic 1 Β· Question 533 Β· Select all that apply

A user has been granted permission to change their own IAM user password. Which AWS services can the user use to change the password? (Choose two.)

  • AAWS Command Line Interface (AWS CLI) (correct answer)
  • BAWS Key Management Sen/ice (AWS KMS)
  • CAWS Management Console (correct answer)
  • DAWS Resource Access Manager (AWS RAM)
  • EAWS Secrets Manager
Reveal answer & explanation
Correct answer: A, C

The correct answer is A, C. Option A: AWS Command Line Interface (AWS CLI) Option C: AWS Management Console.

Topic 1 Β· Question 534

Which task is the customer's responsibility, according to the AWS shared responsibility model?

  • APatch a guest operating system that is deployed on an Amazon EC2 instance. (correct answer)
  • BControl physical access to an AWS data center.
  • CControl access to AWS underlying hardware.
  • DPatch a host operating system that is deployed on Amazon S3.
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: Patch a guest operating system that is deployed on an Amazon EC2 instance.

Explanation

Amazon EC2 provides resizable virtual servers when you need full control of the operating system.

Topic 1 Β· Question 535

Which AWS service or feature provides a firewall at the subnet level within a VPC?

  • ASecurity group
  • BNetwork ACL (correct answer)
  • CElastic network interface
  • DAWS WAF
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Network ACL.

Topic 1 Β· Question 536

A company wants to use automated video analysis to identify employees that are accessing its offices. Which AWS service will meet this requirement?

  • AAmazon Rekognition (correct answer)
  • BAmazon Polly
  • CAmazon Cognito
  • DAWS Lambda
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: Amazon Rekognition

Explanation

Amazon Rekognition adds image and video analysis with pre-trained models.

Topic 1 Β· Question 537

A company needs to host a web server on Amazon EC2 instances for at least 1 year. The web server cannot tolerate interruption. Which EC2 instance purchasing option will meet these requirements MOST cost-effectively?

  • AOn-Demand Instances
  • BPartial Upfront Reserved Instances (correct answer)
  • CSpot Instances
  • DNo Upfront Reserved Instances
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Partial Upfront Reserved Instances

Explanation

Reserved Instances lower cost for steady-state, predictable long-running workloads. This option delivers the requirement at the lowest cost.

Topic 1 Β· Question 538 Β· Select all that apply

Which guidelines are best practices for using AWS Identity and Access Management (IAM)? (Choose two.)

  • AShare access keys.
  • BCreate individual IAM users. (correct answer)
  • CUse inline policies instead of customer managed policies.
  • DGrant maximum privileges to IAM users.
  • EUse groups to assign permissions to IAM users. (correct answer)
Reveal answer & explanation
Correct answer: B, E

The correct answer is B, E. Option B: Create individual IAM users. Option E: Use groups to assign permissions to IAM users.

Explanation

AWS IAM controls authenticated and authorized access to AWS resources with fine-grained policies.

Topic 1 Β· Question 539

Which advantage of cloud computing allows users to scale resources up and down based on the amount of load that an application supports?

  • AGo global in minutes
  • BStop guessing capacity (correct answer)
  • CBenefit from massive economies of scale
  • DTrade fixed expense for variable expense
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Stop guessing capacity.

Topic 1 Β· Question 540

A company is requesting Payment Card Industry (PCI) reports that validate the operating effectiveness of AWS security controls. How should the company obtain these reports?

  • AContact AWS Support.
  • BDownload reports from AWS Artifact. (correct answer)
  • CDownload reports from AWS Security Hub.
  • DContact an AWS technical account manager (TAM).
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Download reports from AWS Artifact.

Showing questions 521–540 of 719 Β· Page 27 of 36