Practice Mode

CLF-C02

Loading...

CLF-C02 — 20 free practice questions

Preview the exam for free. Unlock all 719 questions →

Question 1

A company plans to use an Amazon Snowball Edge device to transfer files to the AWS Cloud. Which activities related to a Snowball Edge device are available to the company at no cost? Options: A. Use of the Snowball Edge appliance for a 10-day period B. The transfer of data out of Amazon S3 and to the Snowball Edge appliance C. The transfer of data from the Snowball Edge appliance into Amazon S3 D. Daily use of the Snowball Edge appliance after 10 days
  • A. Use of the Snowball Edge appliance for a 10-day period
  • B. The transfer of data out of Amazon S3 and to the Snowball Edge appliance
  • C. The transfer of data from the Snowball Edge appliance into Amazon S3 Correct
  • D. Daily use of the Snowball Edge appliance after 10 days

Explanation

According to AWS documentation, there is no charge for transferring data from a Snowball Edge device into Amazon S3. Charges apply for other activities such as the daily use of the Snowball Edge device beyond the initial period and egress from Amazon S3 to the Snowball Edge.

Question 2

A company has deployed applications on Amazon EC2 instances. The company needs to assess application vulnerabilities and must identify infrastructure deployments that do not meet best practices. Which AWS service can the company use to meet these requirements? Options: A. AWS Trusted Advisor B. Amazon Inspector C. AWS Config D. Amazon GuardDuty
  • A. AWS Trusted Advisor
  • B. Amazon Inspector Correct
  • C. AWS Config
  • D. Amazon GuardDuty

Explanation

Amazon Inspector is the correct choice because it automatically assesses applications for security vulnerabilities and deviations from best practices, which aligns with the company's needs to assess application vulnerabilities and identify infrastructure deployments that do not meet best practices.

Question 3

A company has a centralized group of users with large file storage requirements that have exceeded the space available on premises. The company wants to extend its file storage capabilities for this group while retaining the performance benefit of sharing content locally. What is the MOST operationally efficient AWS solution for this scenario? Options: A. Create an Amazon S3 bucket for each user. Mount each bucket by using an S3 file system mounting utility. B. Configure and deploy an AWS Storage Gateway file gateway. Connect each user’s workstation to the file gateway. C. Move each user’s working environment to Amazon WorkSpaces. Set up an Amazon WorkDocs account for each user. D. Deploy an Amazon EC2 instance and attach an Amazon Elastic Block Store (Amazon EBS) Provisioned IOPS volume. Share the EBS volume directly with the users.
  • A. Create an Amazon S3 bucket for each user. Mount each bucket by using an S3 file system mounting utility.
  • B. Configure and deploy an AWS Storage Gateway file gateway. Connect each user’s workstation to the file gateway. Correct
  • C. Move each user’s working environment to Amazon WorkSpaces. Set up an Amazon WorkDocs account for each user.
  • D. Deploy an Amazon EC2 instance and attach an Amazon Elastic Block Store (Amazon EBS) Provisioned IOPS volume. Share the EBS volume directly with the users.

Explanation

Option B is correct because AWS Storage Gateway's file gateway provides a seamless way to connect on-premises applications to AWS cloud storage using standard file protocols, ensuring performance benefits similar to local storage while extending storage capacity. This solution efficiently integrates with existing infrastructure and supports large file storage requirements without the need for significant changes in user behavior or application architecture.

Question 4

According to security best practices, how should an Amazon EC2 instance be given access to an Amazon S3 bucket? Options: A. Hard code an IAM user’s secret key and access key directly in the application, and upload the file. B. Store the IAM user’s secret key and access key in a text file on the EC2 instance, read the keys, then upload the file. C. Have the EC2 instance assume a role to obtain the privileges to upload the file. D. Modify the S3 bucket policy so that any service can upload to it at any time.
  • A. Hard code an IAM user’s secret key and access key directly in the application, and upload the file.
  • B. Store the IAM user’s secret key and access key in a text file on the EC2 instance, read the keys, then upload the file.
  • C. Have the EC2 instance assume a role to obtain the privileges to upload the file. Correct
  • D. Modify the S3 bucket policy so that any service can upload to it at any time.

Explanation

According to AWS security best practices, hardcoding credentials or storing them in files is insecure (ruling out options A and B). Modifying an S3 bucket policy to allow any service to upload at any time increases the risk of unauthorized access (ruling out option D). The correct approach is for the EC2 instance to assume a role with specific permissions, which provides secure, controlled access to the S3 bucket.

Question 5

Which option is a customer responsibility when using Amazon DynamoDB under the AWS Shared Responsibility Model? Options: A. Physical security of DynamoDB B. Patching of DynamoDB C. Access to DynamoDB tables D. Encryption of data at rest in DynamoDB
  • A. Physical security of DynamoDB
  • B. Patching of DynamoDB
  • C. Access to DynamoDB tables Correct
  • D. Encryption of data at rest in DynamoDB

Explanation

Under the AWS Shared Responsibility Model, customers are responsible for managing access to their DynamoDB tables, including setting up appropriate IAM policies and roles. Options A, B, and D are responsibilities of AWS.

Question 6

Which option is a perspective that includes foundational capabilities of the AWS Cloud Adoption Framework (AWS CAF)? Options: A. Sustainability B. Performance efficiency C. Governance D. Reliability
  • A. Sustainability
  • B. Performance efficiency
  • C. Governance Correct
  • D. Reliability

Explanation

Governance is one of the perspectives included in the AWS Cloud Adoption Framework (AWS CAF), which focuses on foundational capabilities such as decision-making, risk management, and compliance. This perspective helps organizations establish a clear set of policies, standards, and procedures to govern their cloud environment effectively.

Question 7

A company is running and managing its own Docker environment on Amazon EC2 instances. The company wants an alternative to help manage cluster size, scheduling, and environment maintenance. Which AWS service meets these requirements? Options: A. AWS Lambda B. Amazon RDS C. AWS Fargate D. Amazon Athena
  • A. AWS Lambda
  • B. Amazon RDS
  • C. AWS Fargate Correct
  • D. Amazon Athena

Explanation

AWS Fargate allows you to run containers without managing the underlying EC2 instances, simplifying cluster size management, scheduling, and environment maintenance. This makes it an ideal alternative for a company looking to offload these responsibilities from their own Docker environment on Amazon EC2.

Question 8

A company wants to run a NoSQL database on Amazon EC2 instances. Which task is the responsibility of AWS in this scenario? Options: A. Update the guest operating system of the EC2 instances. B. Maintain high availability at the database layer. C. Patch the physical infrastructure that hosts the EC2 instances. D. Configure the security group firewall.
  • A. Update the guest operating system of the EC2 instances.
  • B. Maintain high availability at the database layer.
  • C. Patch the physical infrastructure that hosts the EC2 instances. Correct
  • D. Configure the security group firewall.

Explanation

According to AWS responsibilities, maintaining and patching the underlying infrastructure, including hardware and virtualization layers, is AWS's responsibility when you use services like Amazon EC2. Therefore, option C is correct.

Question 9

Which AWS services or tools can identify rightsizing opportunities for Amazon EC2 instances? (Choose two.) Options: A. AWS Cost Explorer B. AWS Billing Conductor C. Amazon CodeGuru D. Amazon SageMaker E. AWS Compute Optimizer
  • A. AWS Cost Explorer Correct
  • B. AWS Billing Conductor
  • C. Amazon CodeGuru
  • D. Amazon SageMaker
  • E. AWS Compute Optimizer Correct

Explanation

AWS Compute Optimizer provides rightsizing recommendations for EC2 instances based on analysis of historical utilization metrics. AWS Cost Explorer also offers features to identify potential rightsizing opportunities by analyzing cost and usage data over time.

Question 10

Which of the following are benefits of using AWS Trusted Advisor? (Choose two.) Options: A. Providing high-performance container orchestration B. Creating and rotating encryption keys C. Detecting underutilized resources to save costs D. Improving security by proactively monitoring the AWS environment E. Implementing enforced tagging across AWS resources
  • A. Providing high-performance container orchestration
  • B. Creating and rotating encryption keys
  • C. Detecting underutilized resources to save costs Correct
  • D. Improving security by proactively monitoring the AWS environment Correct
  • E. Implementing enforced tagging across AWS resources

Explanation

AWS Trusted Advisor provides checks for cost optimization, which includes detecting underutilized resources (Option C). It also offers security check recommendations to help improve the security posture of your AWS environment by proactively monitoring it (Option D), as per official AWS documentation.

Question 11

Which of the following is an advantage that users experience when they move on-premises workloads to the AWS Cloud? Options: A. Elimination of expenses for running and maintaining data centers B. Price discounts that are identical to discounts from hardware providers C. Distribution of all operational controls to AWS D. Elimination of operational expenses
  • A. Elimination of expenses for running and maintaining data centers Correct
  • B. Price discounts that are identical to discounts from hardware providers
  • C. Distribution of all operational controls to AWS
  • D. Elimination of operational expenses

Explanation

Moving on-premises workloads to the AWS Cloud allows users to eliminate the expenses associated with running and maintaining their own data centers, as stated in official AWS documentation. This shift enables organizations to focus on their core business rather than managing infrastructure.

Question 12

A company wants to manage deployed IT services and govern its infrastructure as code (IaC) templates. Which AWS service will meet this requirement? Options: A. AWS Resource Explorer B. AWS Service Catalog C. AWS Organizations D. AWS Systems Manager
  • A. AWS Resource Explorer
  • B. AWS Service Catalog Correct
  • C. AWS Organizations
  • D. AWS Systems Manager

Explanation

AWS Service Catalog allows organizations to create and manage catalogs of IT services that provision resources using infrastructure as code (IaC) templates, thereby enabling governance over the deployment of these services.

Question 13

Which AWS service or tool helps users visualize, understand, and manage spending and usage over time? Options: A. AWS Organizations B. AWS Pricing Calculator C. AWS Cost Explorer D. AWS Service Catalog
  • A. AWS Organizations
  • B. AWS Pricing Calculator
  • C. AWS Cost Explorer Correct
  • D. AWS Service Catalog

Explanation

AWS Cost Explorer is the correct answer because it is a tool provided by AWS that allows users to visualize, understand, and manage their AWS costs and usage over time. It provides insights through visualizations and supports the analysis of historical spending.

Question 14

A company is using a central data platform to manage multiple types of data for its customers. The company wants to use AWS services to discover, transform, and visualize the data. Which combination of AWS services should the company use to meet these requirements? (Choose two.) Options: A. AWS Glue B. Amazon Elastic File System (Amazon EFS) C. Amazon Redshift D. Amazon QuickSight E. Amazon Quantum Ledger Database (Amazon QLDB)
  • A. AWS Glue Correct
  • B. Amazon Elastic File System (Amazon EFS)
  • C. Amazon Redshift
  • D. Amazon QuickSight Correct
  • E. Amazon Quantum Ledger Database (Amazon QLDB)

Explanation

AWS Glue is a fully managed ETL service that makes it easy to discover data, prepare it for analytics, and move it between various data stores. Amazon QuickSight is a fast, cloud-powered business intelligence service that makes it easy to create and publish interactive dashboards. Together, these services meet the requirements of discovering, transforming, and visualizing data.

Question 15

A global company wants to migrate its third-party applications to the AWS Cloud. The company wants help from a global team of experts to complete the migration faster and more reliably in accordance with AWS internal best practices. Which AWS service or resource will meet these requirements? Options: A. AWS Support B. AWS Professional Services C. AWS Launch Wizard D. AWS Managed Services (AMS)
  • A. AWS Support
  • B. AWS Professional Services Correct
  • C. AWS Launch Wizard
  • D. AWS Managed Services (AMS)

Explanation

AWS Professional Services offers a global team of experts who can help migrate third-party applications to the AWS Cloud quickly and reliably, following AWS best practices. This service is specifically designed for such engagements, making it the correct choice.

Question 16

An e-learning platform needs to run an application for 2 months each year. The application will be deployed on Amazon EC2 instances. Any application downtime during those 2 months must be avoided. Which EC2 purchasing option will meet these requirements MOST cost-effectively? Options: A. Reserved Instances B. Dedicated Hosts C. Spot Instances D. On-Demand Instances
  • A. Reserved Instances
  • B. Dedicated Hosts
  • C. Spot Instances
  • D. On-Demand Instances Correct

Explanation

On-Demand Instances (Option D) provide the flexibility and reliability needed to avoid any application downtime, as they can be started and stopped at any time without upfront costs or long-term commitments. Reserved Instances, Dedicated Hosts, and Spot Instances do not guarantee the same level of availability and cost-effectiveness for short-term usage as On-Demand Instances.

Question 17

A developer wants to deploy an application quickly on AWS without manually creating the required resources. Which AWS service will meet these requirements? Options: A. Amazon EC2 B. AWS Elastic Beanstalk C. AWS CodeBuild D. Amazon Personalize
  • A. Amazon EC2
  • B. AWS Elastic Beanstalk Correct
  • C. AWS CodeBuild
  • D. Amazon Personalize

Explanation

AWS Elastic Beanstalk automatically handles the deployment, from capacity provisioning, load balancing, and auto-scaling to health monitoring of the application. This service allows developers to quickly deploy applications without manually creating each required resource.

Question 18

A company is storing sensitive customer data in an Amazon S3 bucket. The company wants to protect the data from accidental deletion or overwriting. Which S3 feature should the company use to meet these requirements? Options: A. S3 Lifecycle rules B. S3 Versioning C. S3 bucket policies D. S3 server-side encryption
  • A. S3 Lifecycle rules
  • B. S3 Versioning Correct
  • C. S3 bucket policies
  • D. S3 server-side encryption

Explanation

S3 Versioning allows for the preservation of multiple variants of an object, including all writes made to an object over time, which protects data from accidental deletion or overwriting. This feature ensures that every version of an object is stored and can be restored if needed.

Question 19

Which AWS service provides the ability to manage infrastructure as code? Options: A. AWS CodePipeline B. AWS CodeDeploy C. AWS Direct Connect D. AWS CloudFormation
  • A. AWS CodePipeline
  • B. AWS CodeDeploy
  • C. AWS Direct Connect
  • D. AWS CloudFormation Correct

Explanation

AWS CloudFormation is the correct answer because it allows users to use infrastructure as code (IaC) to model and provision, through an easy-to-use interface, AWS infrastructure resources. This service enables you to use JSON or YAML to describe your AWS resources in a template that can be used to create, update, or delete these resources.

Question 20

An online gaming company needs to choose a purchasing option to run its Amazon EC2 instances for 1 year. The web traffic is consistent, and any increases in traffic are predictable. The EC2 instances must be online and available without any disruption. Which EC2 instance purchasing option will meet these requirements MOST cost-effectively? Options: A. On-Demand Instances B. Reserved Instances C. Spot Instances D. Spot Fleet
  • A. On-Demand Instances
  • B. Reserved Instances Correct
  • C. Spot Instances
  • D. Spot Fleet

Explanation

Reserved Instances provide a capacity reservation and a significant discount off the price of On-Demand Instances, making them more cost-effective for consistent workloads that require no disruption. This aligns with the company's need for consistent web traffic handling without any downtime.

Verifying access...