ExamGecko
Home Home / Amazon / CLF-C02

Amazon CLF-C02 Practice Test - Questions Answers, Page 37

Question list
Search
Search

List of questions

Search

Related questions











An ecommerce company wants to distribute traffic between the Amazon EC2 instances that host its website.

Which AWS service or resource will meet these requirements?

A.
Application Load Balancer
A.
Application Load Balancer
Answers
B.
AWS WAF
B.
AWS WAF
Answers
C.
AWS CloudHSM
C.
AWS CloudHSM
Answers
D.
AWS Direct Connect
D.
AWS Direct Connect
Answers
Suggested answer: A

Explanation:

This is the AWS service or resource that will meet the requirements of distributing traffic between the Amazon EC2 instances that host the website. Application Load Balancer is a type of Elastic Load

Balancing that distributes incoming application traffic across multiple targets, such as Amazon EC2 instances, containers, IP addresses, and Lambda functions. Application Load Balancer operates at the application layer (layer 7) of the OSI model and supports advanced features such as path-based routing, host-based routing, health checks, and SSL termination. You can learn more about Application Load Balancer from [this webpage] or [this digital course].

Which AWS service will allow a user to set custom cost and usage limits, and will alert when the thresholds are exceeded?

A.
AWS Organizations
A.
AWS Organizations
Answers
B.
AWS Budgets
B.
AWS Budgets
Answers
C.
Cost Explorer
C.
Cost Explorer
Answers
D.
AWS Trusted Advisor
D.
AWS Trusted Advisor
Answers
Suggested answer: B

Explanation:

AWS Budgets allows you to set custom budgets that alert you when your costs or usage exceed (or are forecasted to exceed) your budgeted amount. You can also use AWS Budgets to set reservation utilization or coverage targets and receive alerts when your utilization drops below the threshold you define. AWS Budgets provides you with a comprehensive view of your cost and usage, as well as your reservation utilization and coverage1.

Which AWS service or feature can the company use to limit the access to AWS services for member accounts?

A.
AWS Identity and Access Management (1AM)
A.
AWS Identity and Access Management (1AM)
Answers
B.
Service control policies (SCPs)
B.
Service control policies (SCPs)
Answers
C.
Organizational units (OUs)
C.
Organizational units (OUs)
Answers
D.
Access control lists (ACLs)
D.
Access control lists (ACLs)
Answers
Suggested answer: B

Explanation:

Service control policies (SCPs) are a type of organization policy that you can use to manage permissions in your organization. SCPs offer central control over the maximum available permissions for all accounts in your organization, allowing you to ensure your accounts stay within your organization's access control guidelines2. SCPs are available only in an organization that has all features enabled2.

A company must archive Amazon S3 data that the company's business units no longer need to access.

Which S3 storage class will meet this requirement MOST cost-effectively?

A.
S3 Glacier Instant Retrieval
A.
S3 Glacier Instant Retrieval
Answers
B.
S3 Glacier Flexible Retrieval
B.
S3 Glacier Flexible Retrieval
Answers
C.
S3 Glacier Deep Archive
C.
S3 Glacier Deep Archive
Answers
D.
S3 One Zone-Infrequent Access (S3 One Zone-IA)
D.
S3 One Zone-Infrequent Access (S3 One Zone-IA)
Answers
Suggested answer: C

Explanation:

S3 Glacier Deep Archive is Amazon S3's lowest-cost storage class and supports long-term retention and digital preservation for data that may be accessed once or twice in a year. It is designed for customers - particularly those in highly-regulated industries, such as the Financial Services, Healthcare, and Public Sectors - that retain data sets for 7-10 years or longer to meet regulatory compliance requirements. Customers can store large amounts of data at a very low cost, and reliably access it with a wait time of 12 hours3.

A company wants to build a new web application by using AWS services. The application must meet the on-demand load for periods of heavy activity.

Which AWS services or resources provide the necessary workload adjustments to meet these requirements? (Select TWO.)

A.
Amazon Machine Image (AMI)
A.
Amazon Machine Image (AMI)
Answers
B.
Amazon EC2 Auto Scaling
B.
Amazon EC2 Auto Scaling
Answers
C.
Amazon EC2 instance
C.
Amazon EC2 instance
Answers
D.
AWS Lambda
D.
AWS Lambda
Answers
E.
EC2 Image Builder
E.
EC2 Image Builder
Answers
Suggested answer: B, D

Explanation:

Amazon EC2 Auto Scaling helps you ensure that you have the correct number of Amazon EC2 instances available to handle the load for your application. You create collections of EC2 instances, called Auto Scaling groups. You can specify the minimum number of instances in each Auto Scaling group, and Amazon EC2 Auto Scaling ensures that your group never goes below this size. You can specify the maximum number of instances in each Auto Scaling group, and Amazon EC2 Auto Scaling ensures that your group never goes above this size4. AWS Lambda lets you run code without provisioning or managing servers. You pay only for the compute time you consume. With Lambda, you can run code for virtually any type of application or backend service - all with zero administration. Just upload your code and Lambda takes care of everything required to run and scale your code with high availability. You can set up your code to automatically trigger from other AWS services or call it directly from any web or mobile app.

Which AWS service or feature is an example of a relational database management system?

A.
Amazon Athena
A.
Amazon Athena
Answers
B.
Amazon Redshift
B.
Amazon Redshift
Answers
C.
Amazon S3 Select
C.
Amazon S3 Select
Answers
D.
Amazon Kinesis Data Streams
D.
Amazon Kinesis Data Streams
Answers
Suggested answer: B

Explanation:

Amazon Redshift is a fully managed, petabyte-scale data warehouse service in the cloud. You can start with just a few hundred gigabytes of data and scale to a petabyte or more. This enables you to use your data to acquire new insights for your business and customers. Amazon Redshift is a relational database management system (RDBMS), so it is compatible with other RDBMS applications. You can use standard SQL to query the data.

A company needs to apply security rules to specific Amazon EC2 instances.

Which AWS service or feature provides this functionality?

A.
AWS Shield
A.
AWS Shield
Answers
B.
Network ACLs
B.
Network ACLs
Answers
C.
Security groups
C.
Security groups
Answers
D.
AWS Firewall Manager
D.
AWS Firewall Manager
Answers
Suggested answer: C

Explanation:

Security groups act as a firewall for associated Amazon EC2 instances, controlling both inbound and outbound traffic at the instance level. You can use security groups to set rules that allow or deny traffic to or from your instances. You can modify the rules for a security group at any time; the new rules are automatically applied to all instances that are associated with the security group.

Which AWS service is deployed to VPCs and provides protection from common network threats?

A.
AWSShield
A.
AWSShield
Answers
B.
AWSWAF
B.
AWSWAF
Answers
C.
AWS Network Firewall
C.
AWS Network Firewall
Answers
D.
AWS FirewallManager
D.
AWS FirewallManager
Answers
Suggested answer: C

Explanation:

AWS Network Firewall is a managed service that makes it easy to deploy essential network protections for all of your Amazon Virtual Private Clouds (VPCs). The service can be set up with just a few clicks from the AWS console or using APIs. AWS Network Firewall automatically scales with your network traffic, so you don't have to worry about deploying and managing any infrastructure. AWS Network Firewall provides protection from common network threats such as SQL injection, cross-site scripting, and DDoS attacks1.

Which option is a perspective that includes foundational capabilities of the AWS Cloud Adoption Framework (AWS CAF)?

A.
Sustainability
A.
Sustainability
Answers
B.
Security
B.
Security
Answers
C.
Performance efficiency
C.
Performance efficiency
Answers
D.
Reliability
D.
Reliability
Answers
Suggested answer: B

Explanation:

The AWS Cloud Adoption Framework (AWS CAF) helps organizations understand how cloud adoption transforms the way they work, and it provides structure to identify and address gaps in skills and processes. The AWS CAF organizes guidance into six areas of focus, called perspectives. Each perspective reflects a different stakeholder viewpoint with its own distinct responsibilities, skills, and attributes. The Security Perspective helps you structure the selection and implementation of security controls that meet your organization's needs2.

A company needs to store data from a recommendation engine in a database.

Which AWS service provides this functionality with the LEAST operational overhead?

A.
Amazon RDS for PostgreSQL
A.
Amazon RDS for PostgreSQL
Answers
B.
Amazon DynamoDB
B.
Amazon DynamoDB
Answers
C.
Amazon Neptune
C.
Amazon Neptune
Answers
D.
Amazon Aurora
D.
Amazon Aurora
Answers
Suggested answer: B

Explanation:

Amazon DynamoDB is a key-value and document database that delivers single-digit millisecond performance at any scale. It's a fully managed, multi-region, multi-active, durable database with built-in security, backup and restore, and in-memory caching for internet-scale applications.

DynamoDB can handle more than 10 trillion requests per day and can support peaks of more than 20 million requests per second. DynamoDB provides the least operational overhead for storing data from a recommendation engine, as it does not require any server provisioning, patching, or maintenance3

Total 789 questions
Go to page: of 79