CLF-C02 practice questions 11–20

1. Question 11 · 712 in bank

   A user wants to allow applications running on an Amazon EC2 instance to make calls to other AWS services. The access granted must be secure. Which AWS service or feature should be used?

   • ASecurity groups
   • BAWS Firewall Manager
   • CIAM roles
   • DIAM user SSH keys

   Show answer

   Answer: C

   Explanation

   For allowing applications running on an Amazon EC2 instance to make secure calls to other AWS services, the recommended AWS service or feature is: C. IAM roles IAM (Identity and Access Management) roles provide a secure way to grant permissions to AWS services and resources. In this scenario, you can create an IAM role with the necessary permissions for the EC2 instance to access other AWS services. Then, you can associate the IAM role with the EC2 instance. Option A (Security groups) is used for controlling inbound and outbound traffic to and from an EC2 instance, but it's not directly related to granting permissions to AWS services.

   Source: Adapted from community discussion — cloudrishank

   References

   • AWS documentation
   • AWS documentation
   • AWS documentation

   Next question

2. Question 12 · 712 in bank

   A company wants a fully managed Windows file server for its Windows-based applications. Which AWS service will meet this requirement?

   • AAmazon FSx
   • BAmazon Elastic Kubernetes Service (Amazon EKS)
   • CAmazon Elastic Container Service (Amazon ECS)
   • DAmazon EMR

   Show answer

   Answer: A

   Explanation

   A. Amazon FSx: A fully managed file storage service that is compatible with Windows file servers. It is designed to provide shared file storage for Windows-based applications, making it a suitable choice for the company's requirement of a fully managed Windows file server. Option B (Amazon Elastic Kubernetes Service - Amazon EKS) and Option C (Amazon Elastic Container Service - Amazon ECS) are container orchestration services, not file storage services. Option D (Amazon EMR) is Amazon Elastic MapReduce, which is a cloud-based big data platform, and it is not specifically designed for fully managed Windows file servers.

   Source: Adapted from community discussion — TheFivePips

   References

   • AWS documentation

   Next question

3. Question 13 · 712 in bank

   Which of the following is an advantage that users experience when they move on-premises workloads to the AWS Cloud?

   • AElimination of expenses for running and maintaining data centers
   • BPrice discounts that are identical to discounts from hardware providers
   • CDistribution of all operational controls to AWS
   • DElimination of operational expenses

   Show answer

   Answer: A

   Explanation

   A. Elimination of expenses for running and maintaining data centers Moving to the AWS Cloud allows users to leverage AWS's infrastructure, eliminating the need for organizations to run and maintain their own data centers. This shift can lead to cost savings, improved scalability, and increased flexibility. Options B, C, and D are not accurate: B. Price discounts that are identical to discounts from hardware providers AWS provides its pricing model, and while cost savings can be achieved by leveraging cloud services, the pricing structure is different from traditional hardware providers. C. Distribution of all operational controls to AWS While AWS manages the underlying infrastructure, users still retain control over the operational aspects of their applications and services. It's a shared responsibility model, where AWS manages certain aspects, and users manage others. D. Elimination of operational expenses While there may be cost savings, it's not accurate to say that all operational expenses are eliminated. Users are still responsible for managing and optimizing their cloud resources, applications, and configurations.

   Source: Adapted from community discussion — TheFivePips

   References

   • AWS documentation

   Next question

4. Question 14 · 712 in bank

   A company wants to migrate its NFS on-premises workload to AWS. Which AWS Storage Gateway type should the company use to meet this requirement?

   • ATape Gateway
   • BVolume Gateway
   • CAmazon FSx File Gateway
   • DAmazon S3 File Gateway

   Show answer

   Answer: D

   Explanation

   I think this question is a little bit out of scope for this exam, but the AWS S3 File Gateway documentation specifically mentions NFS. You probably could also do C, but I think D is the "Best" answer A. Tape Gateway: Is used for archiving data to Amazon S3 and Glacier. It is not designed for NFS workloads or migrating on-premises file-based workloads. B. Volume Gateway: Is used for block storage volumes and might not be the most suitable option for NFS file workloads. It's more focused on block storage solutions. C. Amazon FSx File Gateway: Provides a file interface to Amazon FSx file systems, which is compatible with Windows file servers. However, it may not be the optimal solution for migrating NFS workloads to AWS. D. Amazon S3 File Gateway: Supports a file interface into Amazon S3 and allows storing and retrieving objects in Amazon S3 using industry-standard file protocols such as NFS. It is designed for scenarios where you want to integrate on-premises file-based applications with Amazon S3, making it suitable for migrating NFS workloads to AWS.

   Source: Adapted from community discussion — TheFivePips

   References

   • AWS documentation
   • AWS documentation
   • AWS documentation
   • AWS documentation
   • AWS documentation

   Next question

5. Question 15 · 712 in bank

   A company needs to track the activity in its AWS accounts, and needs to know when an API call is made against its AWS resources. Which AWS tool or service can be used to meet these requirements?

   • AAmazon CloudWatch
   • BAmazon Inspector
   • CAWS CloudTrail
   • DAWS IAM

   Show answer

   Answer: C

   Explanation

   "CloudTrail enables auditing, security monitoring, and operational troubleshooting by tracking user activity and API usage. CloudTrail logs, continuously monitors, and retains account activity related to actions across your AWS infrastructure, giving you control over storage, analysis, and remediation actions." Reference: https://aws.amazon.com/cloudtrail/faqs/

   Source: Adapted from community discussion — isaphiltrick

   References

   • AWS documentation

   Next question

6. Question 16 · 712 in bank

   A company has an uninterruptible application that runs on Amazon EC2 instances. The application constantly processes a backlog of files in an Amazon Simple Queue Service (Amazon SQS) queue. This usage is expected to continue to grow for years. What is the MOST cost-effective EC2 instance purchasing model to meet these requirements?

   • ASpot Instances
   • BOn-Demand Instances
   • CSavings Plans
   • DDedicated Hosts

   Show answer

   Answer: C

   Explanation

   C. Savings Plans Savings Plans provide significant cost savings compared to On-Demand Instances, while still offering flexibility and a commitment to a consistent amount of usage, which aligns with the long-term, predictable workload described in the scenario. This model allows you to commit to a consistent amount of usage (measured in dollars per hour) for a 1-year or 3-year term, offering flexibility across EC2 instance types, sizes, and regions. It's a suitable choice for workloads with sustained usage over a long period.

   Source: Adapted from community discussion — chalaka

   References

   • AWS documentation

   Next question

7. Question 17 · 712 in bank

   A company wants an AWS service to provide product recommendations based on its customer data. Which AWS service will meet this requirement?

   • AAmazon Polly
   • BAmazon Personalize
   • CAmazon Comprehend
   • DAmazon Rekognition

   Show answer

   Answer: B

   Explanation

   Answer is B, Amazon Personalize -Amazon Polly: Deploy high-quality, natural-sounding human voices in dozens of languages. -Amazon Personalize: Enhance your digital transformation with ML, seamlessly integrating personalized recommendations into websites, applications, email systems,... . -Amazon Comprehend: Derive and understand valuable insights from text within document. -Amazon Rekognition : Automate and lower the cost of your image recognition and video analysis with machine learning.

   Source: Adapted from community discussion — BobFar

   References

   • AWS documentation

   Next question

8. Question 18 · 712 in bank

   A company is planning its migration to the AWS Cloud. The company is identifying its capability gaps by using the AWS Cloud Adoption Framework (AWS CAF) perspectives. Which phase of the cloud transformation journey includes these identification activities?

   • AEnvision
   • BAlign
   • CScale
   • DLaunch

   Show answer

   Answer: B

   Explanation

   "Align phase focuses on identifying capability gaps across the six AWS CAF perspectives, identifying cross-organizational dependencies, and surfacing stakeholder concerns and challenges." Reference: https://docs.aws.amazon.com/whitepapers/latest/overview-aws-cloud-adoption-framework/your-cloud-transformation-journey.html

   Source: Adapted from community discussion — isaphiltrick

   References

   • AWS documentation
   • AWS documentation

   Next question

9. Question 19 · 712 in bank

   A social media company wants to protect its web application from common web exploits such as SQL injections and cross-site scripting. Which AWS service will meet these requirements?

   • AAmazon Inspector
   • BAWS WAF
   • CAmazon GuardDuty
   • DAmazon CloudWatch

   Show answer

   Answer: B

   Explanation

   "AWS WAF is a web application firewall that helps protect web applications from attacks by allowing you to configure rules that allow, block, or monitor (count) web requests based on conditions that you define. These conditions include IP addresses, HTTP headers, HTTP body, URI strings, SQL injection and cross-site scripting." References: https://aws.amazon.com/waf/faqs/

   Source: Adapted from community discussion — isaphiltrick

   References

   • AWS documentation

   Next question

10. Question 20 · 712 in bank

    Which fully managed AWS service assists with the creation, testing, and management of custom Amazon EC2 images?

    • AEC2 Image Builder
    • BAmazon Machine Image (AMI)
    • CAWS Launch Wizard
    • DAWS Elastic Beanstalk

    Show answer

    Answer: A

    Explanation

    "EC2 Image Builder simplifies the creation, maintenance, validation, sharing, and deployment of Linux or Windows images for use with Amazon EC2 and on-premises." Reference: https://aws.amazon.com/image-builder/faqs/

    Source: Adapted from community discussion — isaphiltrick

    References

    • AWS documentation

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

CLF-C02 practice, question 11. 712 questions available.