ExamGecko
Home Home / Amazon / CLF-C02

Amazon CLF-C02 Practice Test - Questions Answers, Page 60

Question list
Search
Search

List of questions

Search

Related questions











Which tasks are the customer's responsibility, according to the AWS shared responsibility model? (Select TWO.)

A.
Establish the global infrastructure.
A.
Establish the global infrastructure.
Answers
B.
Perform client-side data encryption.
B.
Perform client-side data encryption.
Answers
C.
Configure 1AM credentials.
C.
Configure 1AM credentials.
Answers
D.
Secure edge locations.
D.
Secure edge locations.
Answers
E.
Patch Amazon RDS DB instances.
E.
Patch Amazon RDS DB instances.
Answers
Suggested answer: B, C

Explanation:

According to the AWS shared responsibility model, AWS is responsible for the security of the cloud, while the customer is responsible for the security in the cloud. This means that AWS is responsible for protecting the infrastructure that runs all of the services offered in the AWS Cloud, such as the global network, the hardware, the software, and the facilities. The customer is responsible for properly configuring the security of the provided service, such as the guest operating system, the application software, the data, and the network traffic.For abstracted services, such as Amazon RDS, AWS operates the infrastructure layer, the operating system, and the database software, while the customer is responsible for managing their data, classifying their assets, and using IAM tools to apply the appropriate permissions12.

Therefore, the tasks that are the customer's responsibility are:

Perform client-side data encryption: The customer is responsible for encrypting their data before sending it to AWS, and decrypting it after receiving it from AWS. This ensures that the data is protected in transit and at rest.AWS provides various encryption options, such as AWS Key Management Service (AWS KMS), AWS CloudHSM, and AWS Certificate Manager (ACM)3.

Configure IAM credentials: The customer is responsible for creating and managing IAM users, groups, roles, and policies that control the access to AWS resources and services.IAM credentials include user names, passwords, access keys, and permissions4.

The tasks that are not the customer's responsibility are:

Establish the global infrastructure: AWS is responsible for building and maintaining the global network of regions, availability zones, and edge locations that provide low latency, high availability, and fault tolerance for the AWS Cloud5.

Secure edge locations: AWS is responsible for protecting the physical security of the edge locations, which are sites that deliver cached content to end users with improved performance6.

Patch Amazon RDS DB instances: AWS is responsible for applying patches and updates to the operating system and the database software of the Amazon RDS DB instances, which are managed relational database service for MySQL, PostgreSQL, Oracle, SQL Server, and Amazon Aurora.Reference:

Shared Responsibility Model - Amazon Web Services (AWS)

Shared responsibility model - Amazon Web Services: Risk and Compliance

Encryption - Amazon Web Services (AWS)

What Is IAM? - AWS Identity and Access Management

Global Infrastructure - Amazon Web Services (AWS)

Amazon CloudFront Features - Content Delivery Network (CDN)

[What Is Amazon Relational Database Service (Amazon RDS)? - Amazon Relational Database Service]

Which Amazon EC2 pricing model is the MOST cost efficient for an uninterruptible workload that runs once a year for 24 hours?

A.
On-Demand Instances
A.
On-Demand Instances
Answers
B.
Reserved Instances
B.
Reserved Instances
Answers
C.
Spot Instances
C.
Spot Instances
Answers
D.
Dedicated Instances
D.
Dedicated Instances
Answers
Suggested answer: A

Explanation:

On-Demand Instances are the most cost-efficient pricing model for an uninterruptible workload that runs once a year for 24 hours. On-Demand Instances let you pay for compute capacity by the hour or second, depending on which instances you run. No long-term commitments or up-front payments are required.You can increase or decrease your compute capacity to meet the demands of your application and only pay the specified hourly rates for the instance you use1.This model is suitable for developing/testing applications with short-term or unpredictable workloads2. The other pricing models are not cost-efficient for this use case. Reserved Instances and Savings Plans require a commitment to a consistent amount of usage, in USD per hour, for a term of 1 or 3 years.They provide significant discounts compared to On-Demand Instances, but they are not flexible or scalable for workloads that run only once a year12. Spot Instances are the cheapest option, but they are not suitable for uninterruptible workloads, as they can be reclaimed by AWS at any time.They are recommended for applications that have flexible start and end times, or that are only feasible at very low compute prices12. Dedicated Instances are designed for compliance and licensing requirements, not for cost optimization.They are more expensive than the other options, as they run on single-tenant hardware12.Reference:Amazon EC2 -- Secure and resizable compute capacity -- AWS,Amazon EC2 - How AWS Pricing Works

Which AWS Cloud benefit gives a company the ability to quickly deploy cloud resources to access compute, storage, and database infrastructures in a matter of minutes?

A.
Elasticity
A.
Elasticity
Answers
B.
Cost savings
B.
Cost savings
Answers
C.
Agility
C.
Agility
Answers
D.
Reliability
D.
Reliability
Answers
Suggested answer: C

Explanation:

Agility is the AWS Cloud benefit that gives a company the ability to quickly deploy cloud resources to access compute, storage, and database infrastructures in a matter of minutes.Agility means that you can reduce the time to make IT resources available to your developers from weeks to just minutes, resulting in a dramatic increase in innovation and responsiveness1.AWS provides a range of services and tools that enable you to launch, scale, and manage your cloud applications with ease and speed, such as AWS CloudFormation, AWS Elastic Beanstalk, AWS CodeDeploy, and AWS Quick Starts2345.Reference:

Six advantages of cloud computing - Overview of Amazon Web Services

[AWS CloudFormation]

[AWS Elastic Beanstalk]

[AWS CodeDeploy]

AWS Quick Starts

Which AWS service is used to provide encryption for Amazon EBS?

A.
AWS Certificate Manager
A.
AWS Certificate Manager
Answers
B.
AWS Systems Manager
B.
AWS Systems Manager
Answers
C.
AWS KMS
C.
AWS KMS
Answers
D.
AWS Config
D.
AWS Config
Answers
Suggested answer: C

Explanation:

AWS KMS is the service that is used to provide encryption for Amazon EBS. AWS KMS is a managed service that enables you to easily create and control the encryption keys used to encrypt your data. Amazon EBS uses AWS KMS to encrypt and decrypt your EBS volumes and snapshots. You can choose to use either the default AWS managed CMK or your own customer managed CMK for encryption.AWS KMS also provides features such as key rotation, audit logging, and access control policies to help you manage your encryption keys and protect your data12. The other services are not used to provide encryption for Amazon EBS.AWS Certificate Manager is a service that lets you provision, manage, and deploy public and private SSL/TLS certificates for use with AWS services and your internal connected resources3.AWS Systems Manager is a service that provides a unified user interface to view and manage your AWS resources, automate common operational tasks, and apply compliance policies4. AWS Config is a service that enables you to assess, audit, and evaluate the configurations of your AWS resources.Reference:Amazon EBS encryption,AWS Key Management Service,AWS Certificate Manager,AWS Systems Manager, [AWS Config]

A company operates a petabyte-scale data warehouse to analyze its data. The company wants a solution that will not require manual hardware and software management. Which AWS service will meet these requirements?

A.
Amazon DocumentDB (with MongoDB compatibility)
A.
Amazon DocumentDB (with MongoDB compatibility)
Answers
B.
Amazon Redshift
B.
Amazon Redshift
Answers
C.
Amazon Neptune
C.
Amazon Neptune
Answers
D.
Amazon ElastiCache
D.
Amazon ElastiCache
Answers
Suggested answer: B

Explanation:

Amazon Redshift is a fast, fully managed, petabyte-scale data warehouse service that makes it simple and cost-effective to analyze all your data using your existing business intelligence tools. You can start small with no commitments, and scale to petabytes for less than a tenth of the cost of traditional solutions.Amazon Redshift does not require manual hardware and software management, as AWS handles all the tasks such as provisioning, patching, backup, recovery, failure detection, and repair12. Amazon Redshift also offers serverless capabilities, which allow you to access and analyze data without any configurations or capacity planning.Amazon Redshift automatically scales the data warehouse capacity to deliver fast performance for even the most demanding and unpredictable workloads3. Therefore, Amazon Redshift meets the requirements of the company, compared to the other options.

The other options are not suitable for the company's requirements, because:

Amazon DocumentDB (with MongoDB compatibility) is a fast, scalable, highly available, and fully managed document database service that supports MongoDB workloads.It is not designed for petabyte-scale data warehousing or analytics4.

Amazon Neptune is a fast, reliable, and fully managed graph database service that makes it easy to build and run applications that work with highly connected datasets.It is not designed for petabyte-scale data warehousing or analytics5.

Amazon ElastiCache is a fully managed in-memory data store and cache service that supports Redis and Memcached. It is not designed for petabyte-scale data warehousing or analytics.

What is Amazon Redshift? - Amazon Redshift

Amazon Redshift Features - Amazon Redshift

Amazon Redshift Serverless - Amazon Redshift

What Is Amazon DocumentDB (with MongoDB compatibility)? - Amazon DocumentDB (with MongoDB compatibility)

What Is Amazon Neptune? - Amazon Neptune

[What Is Amazon ElastiCache for Redis? - Amazon ElastiCache for Redis]

A company needs to perform data processing once a week that typically takes about 5 hours to complete. Which AWS service should the company use for this workload?

A.
AWS Lambda
A.
AWS Lambda
Answers
B.
Amazon EC2
B.
Amazon EC2
Answers
C.
AWS CodeDeploy
C.
AWS CodeDeploy
Answers
D.
AWS Wavelength
D.
AWS Wavelength
Answers
Suggested answer: B

Explanation:

Amazon EC2 is the most suitable AWS service for this workload. Amazon EC2 provides secure, resizable compute capacity in the cloud. You can launch virtual servers, called instances, and configure them according to your needs. You can choose from different instance types, sizes, and families, and pay only for the resources you use.Amazon EC2 also offers features such as auto scaling, load balancing, security groups, and placement groups to optimize your performance, availability, and security1.Amazon EC2 is ideal for workloads that require consistent and reliable compute power, such as data processing, web hosting, gaming, and high-performance computing2. The other services are not suitable for this workload. AWS Lambda is a serverless compute service that lets you run code without provisioning or managing servers. You pay only for the compute time you consume.Lambda is best for short-lived, stateless, and event-driven workloads that can be completed in under 15 minutes3. AWS CodeDeploy is a deployment service that automates application deployments to Amazon EC2 instances, on-premises instances, serverless Lambda functions, or Amazon ECS services.CodeDeploy is not a compute service, but a tool to help you update your applications with minimal downtime4. AWS Wavelength is a service that delivers ultra-low latency applications for 5G devices. Wavelength embeds AWS compute and storage services at the edge of telecommunications providers' 5G networks. Wavelength is designed for mobile edge computing, such as interactive gaming, video streaming, and augmented reality.Reference:Amazon EC2,Amazon EC2 Use Cases,AWS Lambda,AWS CodeDeploy, [AWS Wavelength]

A company wants to provide managed Windows virtual desktops and applications to its remote employees over secure network connections. Which AWS services can the company use to meet these requirements? (Select TWO.)

A.
Amazon Connect
A.
Amazon Connect
Answers
B.
Amazon AppStream 2.0
B.
Amazon AppStream 2.0
Answers
C.
Amazon Workspaces
C.
Amazon Workspaces
Answers
D.
AWS Site-to-Site VPN
D.
AWS Site-to-Site VPN
Answers
E.
Amazon Elastic Container Service (Amazon ECS)
E.
Amazon Elastic Container Service (Amazon ECS)
Answers
Suggested answer: B, C

Explanation:

Amazon AppStream 2.0 and Amazon WorkSpaces are AWS services that can be used to provide managed Windows virtual desktops and applications to remote employees over secure network connections. Amazon AppStream 2.0 is a fully managed application streaming service that allows users to access Windows desktop applications from any device, without installing or managing any software.Amazon AppStream 2.0 delivers applications over an encrypted connection and isolates them from the underlying infrastructure, ensuring security and compliance1. Amazon WorkSpaces is a fully managed desktop virtualization service that allows users to access Windows or Linux desktops from any device, with a consistent user experience. Amazon WorkSpaces provides persistent, cloud-based virtual desktops that can be customized and scaled according to the user's needs.Amazon WorkSpaces also offers encryption, backup, and monitoring features to ensure security and reliability2.Reference:

Amazon AppStream 2.0

Amazon WorkSpaces

Which AWS Cloud service can send alerts to customers if custom spending thresholds are exceeded?

A.
AWS Budgets
A.
AWS Budgets
Answers
B.
AWS Cost Explorer
B.
AWS Cost Explorer
Answers
C.
AWS Cost Allocation Tags
C.
AWS Cost Allocation Tags
Answers
D.
AWS Organizations
D.
AWS Organizations
Answers
Suggested answer: A

Explanation:

AWS Budgets is a service that allows you to set custom budgets for your AWS costs and usage, and receive alerts via email or Amazon SNS notifications if you exceed or are forecasted to exceed your budgeted amount1.You can create budgets based on different dimensions, such as service, linked account, tag, or purchase option, and define various types of alerts, such as actual, forecasted, or RI utilization alerts2.You can also configure custom actions to automatically execute remediation tasks or workflows when a budget threshold is breached3. AWS Budgets is the only service among the options that can send alerts to customers if custom spending thresholds are exceeded.The other options are not AWS services that provide this functionality.

Which options are AWS Cloud Adoption Framework (AWS CAF) cloud transformation journey recommendations? (Select TWO.)

A.
Envision phase
A.
Envision phase
Answers
B.
AIign phase
B.
AIign phase
Answers
C.
Assess phase
C.
Assess phase
Answers
D.
Mobilize phase
D.
Mobilize phase
Answers
E.
Migrate and modernize phase
E.
Migrate and modernize phase
Answers
Suggested answer: A, B

Explanation:

The AWS Cloud Adoption Framework (AWS CAF) is a tool that helps organizations plan and execute their cloud transformation journey. The AWS CAF defines four phases of the cloud transformation journey: Envision, Align, Launch, and Scale.Each phase has a specific purpose and outcome1:

Envision: This phase helps you define your vision, goals, and expected outcomes for your cloud transformation.It also helps you identify and prioritize transformation opportunities across four domains: business, people, governance, and platform2.

Align: This phase helps you identify capability gaps across six perspectives: business, people, governance, platform, security, and operations.It also helps you create strategies for improving your cloud readiness, ensure stakeholder alignment, and facilitate relevant organizational change management activities3.

Launch: This phase helps you deliver pilot initiatives in production and demonstrate incremental business value.It also helps you learn from pilots and adjust your approach before scaling to full production4.

Scale: This phase helps you expand production pilots and business value to desired scale and ensure that the business benefits associated with your cloud investments are realized and sustained.

The options A and B are the correct AWS CAF cloud transformation journey recommendations, as they are part of the four phases defined by the AWS CAF.The options C, D, and E are not AWS CAF cloud transformation journey recommendations, as they are not part of the four phases defined by the AWS CAF

Which responsibility belongs to AWS when a company hosts its databases on Amazon EC2 instances?

A.
Database backups
A.
Database backups
Answers
B.
Database software patches
B.
Database software patches
Answers
C.
Operating system patches
C.
Operating system patches
Answers
D.
Operating system installations
D.
Operating system installations
Answers
Suggested answer: C

Explanation:

When a company hosts its databases on Amazon EC2 instances, AWS and the customer share the responsibility for the security and management of the database environment. According to the AWS shared responsibility model, AWS is responsible for the security of the cloud, while the customer is responsible for the security in the cloud. This means that AWS is responsible for protecting the infrastructure that runs the EC2 instances, such as the hardware, software, networking, and facilities.The customer is responsible for properly configuring the security of the provided service, such as the guest operating system, the database software, the data, and the network traffic12.

One of the tasks that belongs to AWS when a company hosts its databases on Amazon EC2 instances is operating system patches. AWS provides regular updates and patches to the operating system of the EC2 instances, which are applied automatically by default.The customer can also choose to manually apply the patches or schedule them for a specific time window3. Operating system patches are important for maintaining the security and performance of the EC2 instances and the databases running on them.

The other tasks that belong to AWS when a company hosts its databases on Amazon EC2 instances are:

Operating system installations: AWS provides a variety of operating system options for the EC2 instances, such as Linux, Windows, and Amazon Linux.The customer can choose the operating system that best suits their database needs and AWS will install it on the EC2 instances4.

Server maintenance: AWS performs regular maintenance and repairs on the physical servers that host the EC2 instances, ensuring that they are in optimal condition and have adequate power, cooling, and network connectivity5.

Hardware lifecycle: AWS manages the lifecycle of the hardware that supports the EC2 instances, such as replacing faulty components, upgrading equipment, and decommissioning old servers.

The tasks that do not belong to AWS when a company hosts its databases on Amazon EC2 instances are:

Database backups: The customer is responsible for backing up their data and databases on the EC2 instances, using tools such as Amazon S3, Amazon EBS snapshots, or AWS Backup. Database backups are essential for data protection and recovery in case of failures or disasters.

Database software patches: The customer is responsible for applying patches and updates to the database software on the EC2 instances, such as MySQL, PostgreSQL, Oracle, or SQL Server. Database software patches are important for fixing bugs, improving features, and addressing security vulnerabilities.

Database software install: The customer is responsible for installing the database software on the EC2 instances, choosing the version and configuration that meets their requirements. AWS provides some preconfigured AMIs (Amazon Machine Images) that include common database software, or the customer can use their own custom AMIs.

Shared Responsibility Model - Amazon Web Services (AWS)

Shared responsibility model - Amazon Web Services: Risk and Compliance

Patching Amazon EC2 instances - AWS Systems Manager

Amazon EC2 FAQs - Amazon Web Services

Maintenance and Retirements - Amazon Elastic Compute Cloud

[Hardware Lifecycle - Amazon Web Services (AWS)]

[Backing Up Your Data - Amazon Web Services (AWS)]

[Database Patching - Amazon Web Services (AWS)]

[Installing Database Software on Amazon EC2 Instances - Amazon Web Services (AWS)]

Total 789 questions
Go to page: of 79