ExamGecko
Home Home / Amazon / CLF-C02

Amazon CLF-C02 Practice Test - Questions Answers, Page 19

Question list
Search
Search

List of questions

Search

Related questions











Which group shares responsibility with AWS for security and compliance of AWS accounts and resources?

A.
Third-party vendors
A.
Third-party vendors
Answers
B.
Customers
B.
Customers
Answers
C.
Reseller partners
C.
Reseller partners
Answers
D.
Internet providers
D.
Internet providers
Answers
Suggested answer: B

Explanation:

Customers share responsibility with AWS for security and compliance of AWS accounts and resources. This is part of the AWS shared responsibility model, which defines the division of responsibilities between AWS and the customer for security and compliance. AWS is responsible for the security of the cloud, which includes the physical and environmental controls of the AWS global infrastructure, such as power, cooling, fire suppression, and physical access. The customer is responsible for the security in the cloud, which includes the configuration and management of the AWS resources and applications, such as identity and access management, encryption, firewall, and backup. For more information, see AWS Shared Responsibility Model and AWS Cloud Security.

A company wants to migrate its Microsoft SQL Server database management system from on premises to the AWS Cloud.

Which AWS service should the company use to reduce management overhead for this environment?

A.
Amazon Elastic Container Service (Amazon ECS)
A.
Amazon Elastic Container Service (Amazon ECS)
Answers
B.
Amazon SageMaker
B.
Amazon SageMaker
Answers
C.
Amazon RDS
C.
Amazon RDS
Answers
D.
Amazon Athena
D.
Amazon Athena
Answers
Suggested answer: C

Explanation:

Amazon Relational Database Service (Amazon RDS) is the AWS service that the company should use to migrate its Microsoft SQL Server database management system from on premises to the AWS Cloud. Amazon RDS is a fully managed service that provides a scalable, secure, and highperformance relational database platform. Amazon RDS supports several database engines, including Microsoft SQL Server. Amazon RDS reduces the management overhead for the database environment by taking care of tasks such as provisioning, patching, backup, recovery, and monitoring. For more information, see What is Amazon Relational Database Service (Amazon RDS)? and Amazon RDS for SQL Server.

A company moves a workload to AWS to run on Amazon EC2 instances. The company needs to run the workload in the most cost-effective way.

What can the company do to meet this requirement?

A.
Use AWS Key Management Service (AWS KMS).
A.
Use AWS Key Management Service (AWS KMS).
Answers
B.
Use multiple AWS accounts and consolidated billing.
B.
Use multiple AWS accounts and consolidated billing.
Answers
C.
Use AWS CloudFormation to deploy the infrastructure.
C.
Use AWS CloudFormation to deploy the infrastructure.
Answers
D.
Rightsized all the EC2 instances that are used in the deployment.
D.
Rightsized all the EC2 instances that are used in the deployment.
Answers
Suggested answer: D

Explanation:

Rightsizing all the EC2 instances that are used in the deployment is the best way to run the workload in the most cost-effective way. Rightsizing means choosing the optimal instance type and size for the workload based on the performance and capacity requirements. Rightsizing helps to avoid overprovisioning or under-provisioning of the EC2 instances, which can result in wasted resources or poor performance. Rightsizing also helps to take advantage of the different pricing models and features that AWS offers, such as On-Demand, Reserved, and Spot Instances, and Auto Scaling. For more information, see Rightsizing Your Instances and [Cost Optimization with AWS].

A company needs to launch an Amazon EC2 instance.

Which of the following can the company use during the launch process to configure the root volume of the EC2 instance?

A.
Amazon EC2 Auto Scaling
A.
Amazon EC2 Auto Scaling
Answers
B.
Amazon Data Lifecycle Manager (Amazon DLM)
B.
Amazon Data Lifecycle Manager (Amazon DLM)
Answers
C.
Amazon Machine Image (AMI)
C.
Amazon Machine Image (AMI)
Answers
D.
Amazon Elastic Block Store (Amazon EBS) volume
D.
Amazon Elastic Block Store (Amazon EBS) volume
Answers
Suggested answer: C

Explanation:

Amazon Machine Image (AMI) is the option that the company can use during the launch process to configure the root volume of the EC2 instance. An AMI is a template that contains the software configuration, such as the operating system, applications, and settings, required to launch an EC2 instance. An AMI also specifies the volume size and type of the root device for the instance. The company can choose an AMI provided by AWS, the AWS Marketplace, or the AWS community, or create a custom AMI. For more information, see [Amazon Machine Images (AMI)] and [Launching an Instance Using the Launch Instance Wizard].

A company plans to migrate its on-premises workload to AWS. Before the migration, the company needs to estimate its future AWS service costs.

Which AWS service or tool should the company use to meet this requirement?

A.
AWS Trusted Advisor
A.
AWS Trusted Advisor
Answers
B.
AWS Budgets
B.
AWS Budgets
Answers
C.
AWS Pricing Calculator
C.
AWS Pricing Calculator
Answers
D.
AWS Cost Explorer
D.
AWS Cost Explorer
Answers
Suggested answer: C

Explanation:

AWS Pricing Calculator is the AWS service or tool that the company should use to estimate its future AWS service costs before the migration. AWS Pricing Calculator is a web-based tool that allows the company to create cost estimates for various AWS services and scenarios. AWS Pricing Calculator helps the company to compare the costs of running the workload on premises versus on AWS, and to optimize the costs by choosing the best options for the workload. AWS Pricing Calculator also provides a detailed breakdown of the cost components and a downloadable report. For more information, see [AWS Pricing Calculator] and [Getting Started with AWS Pricing Calculator].

A company suspects that its AWS resources are being used for illegal activities.

Which AWS group or team should the company notify?

A.
AWS Abuse team
A.
AWS Abuse team
Answers
B.
AWS Support team
B.
AWS Support team
Answers
C.
AWS technical account managers
C.
AWS technical account managers
Answers
D.
AWS Professional Services team
D.
AWS Professional Services team
Answers
Suggested answer: A

Explanation:

AWS Abuse team is the AWS group or team that the company should notify if it suspects that its

AWS resources are being used for illegal activities. AWS Abuse team is a dedicated team that handles reports of abuse, such as spam, phishing, malware, denial-of-service attacks, and unauthorized access, involving AWS resources. The company can contact the AWS Abuse team by filling out the [Report Abuse of AWS Resources form] or sending an email to [email protected]. The company should provide as much information as possible, such as the source and destination IP addresses, timestamps, log files, and screenshots, to help the AWS Abuse team investigate and take appropriate actions. For more information, see [Reporting Abuse] and [AWS Acceptable Use Policy].

A company wants an in-memory data store that is compatible with open source in the cloud.

Which AWS service should the company use?

A.
Amazon DynamoDB
A.
Amazon DynamoDB
Answers
B.
Amazon ElastiCache
B.
Amazon ElastiCache
Answers
C.
Amazon Elastic Block Store (Amazon EBS)
C.
Amazon Elastic Block Store (Amazon EBS)
Answers
D.
Amazon Redshift
D.
Amazon Redshift
Answers
Suggested answer: B

Explanation:

Amazon ElastiCache is a fully managed in-memory data store service that is compatible with open source engines such as Redis and Memcached1. It provides fast and scalable performance for applications that require high throughput and low latency1. Amazon DynamoDB is a fully managed NoSQL database service that provides consistent and single-digit millisecond latency at any scale2. Amazon EBS is a block storage service that provides persistent and durable storage volumes for Amazon EC2 instances3. Amazon Redshift is a fully managed data warehouse service that allows users to run complex analytic queries using SQL4.

A company wants to improve its security and audit posture by limiting Amazon EC2 inbound access.

According to the AWS shared responsibility model, which task is the responsibility of the customer?

A.
Protect the global infrastructure that runs all of the services offered in the AWS Cloud.
A.
Protect the global infrastructure that runs all of the services offered in the AWS Cloud.
Answers
B.
Configure logical access controls for resources, and protect account credentials.
B.
Configure logical access controls for resources, and protect account credentials.
Answers
C.
Configure the security used by managed services.
C.
Configure the security used by managed services.
Answers
D.
Patch and back up Amazon Aurora.
D.
Patch and back up Amazon Aurora.
Answers
Suggested answer: B

Explanation:

According to the AWS shared responsibility model, the customer is responsible for configuring logical access controls for resources, and protecting account credentials. This includes managing IAM user permissions, security group rules, network ACLs, encryption keys, and other aspects of access management1. AWS is responsible for protecting the global infrastructure that runs all of the services offered in the AWS Cloud, such as the hardware, software, networking, and facilities. AWS is also responsible for configuring the security used by managed services, such as Amazon RDS, Amazon DynamoDB, and Amazon Aurora2.

Which task is the responsibility of AWS when using AWS services?

A.
Management of 1AM user permissions
A.
Management of 1AM user permissions
Answers
B.
Creation of security group rules for outbound access
B.
Creation of security group rules for outbound access
Answers
C.
Maintenance of physical and environmental controls
C.
Maintenance of physical and environmental controls
Answers
D.
Application of Amazon EC2 operating system patches
D.
Application of Amazon EC2 operating system patches
Answers
Suggested answer: C

Explanation:

AWS is responsible for maintaining the physical and environmental controls of the AWS Cloud, such as power, cooling, fire suppression, and physical security1. The customer is responsible for managing the IAM user permissions, creating security group rules for outbound access, applying Amazon EC2 operating system patches, and other aspects of security in the cloud1.

A company wants to push VPC Flow Logs to an Amazon S3 bucket.

A company wants to optimize long-term compute costs of AWS Lambda functions and Amazon EC2 instances.

Which AWS purchasing option should the company choose to meet these requirements?

A.
Dedicated Hosts
A.
Dedicated Hosts
Answers
B.
Compute Savings Plans
B.
Compute Savings Plans
Answers
C.
Reserved Instances
C.
Reserved Instances
Answers
D.
Spot Instances
D.
Spot Instances
Answers
Suggested answer: B

Explanation:

Compute Savings Plans are a flexible and cost-effective way to optimize long-term compute costs of AWS Lambda functions and Amazon EC2 instances. With Compute Savings Plans, customers can commit to a consistent amount of compute usage (measured in $/hour) for a 1-year or 3-year term and receive a discount of up to 66% compared to On-Demand prices3. Dedicated Hosts are physical servers with EC2 instance capacity fully dedicated to the customer's use. They are suitable for customers who have specific server-bound software licenses or compliance requirements4. Reserved Instances are a pricing model that provides a significant discount (up to 75%) compared to On-Demand pricing and a capacity reservation for EC2 instances. They are available in 1-year or 3-year terms and different payment options5. Spot Instances are spare EC2 instances that are available at up to 90% discount compared to On-Demand prices. They are suitable for customers who have flexible start and end times, can withstand interruptions, and can handle excess capacity.

Total 789 questions
Go to page: of 79