CLF-C02 practice questions 261–270

1. Question 261 · 712 in bank

   A company is designing its AWS workloads so that components can be updated regularly and so that changes can be made in small, reversible increments. Which pillar of the AWS Well-Architected Framework does this design support?

   • ASecurity
   • BPerformance efficiency
   • COperational excellence
   • DReliability

   Show answer

   Answer: C

   Explanation

   Operational Excellence: Focus on creating applications that effectively support production workload. - Plan for and anticipate failure. - Deploy smaller, reversible changes. - Script operations as code. - Learn from failure and refine.

   Source: Adapted from community discussion — StevenNGUYEN

   References

   • AWS documentation
   • AWS documentation

   Next question

2. Question 262 · 712 in bank

   A company wants to track tags, buckets, and prefixes for its Amazon S3 objects. Which S3 feature will meet this requirement?

   • AS3 Inventory report
   • BS3 Lifecycle
   • CS3 Versioning
   • DS3 ACLs

   Show answer

   Answer: A

   Explanation

   Amazon S3 Inventory list An inventory list file contains a list of the objects in the source bucket and metadata for each object. https://docs.aws.amazon.com/AmazonS3/latest/userguide/storage-inventory.html you can use an S3 Inventory report that lists your stored objects within an S3 bucket or with a specific prefix, and their respective metadata and encryption status. S3 Inventory can be configured to generate reports on a daily or a weekly basis. https://aws.amazon.com/s3/features/

   Source: Adapted from community discussion — [Removed]

   References

   • AWS documentation
   • AWS documentation

   Next question

3. Question 263 · 712 in bank

   A company wants to allow users to authenticate and authorize multiple AWS accounts by using a single set of credentials. Which AWS service or resource will meet this requirement?

   • AAWS Organizations
   • BIAM user
   • CAWS IAM Identity Center (AWS Single Sign-On)
   • DAWS Control Tower

   Show answer

   Answer: C

   Explanation

   C. AWS IAM Identity Center (AWS Single Sign-On) AWS Single Sign-On (SSO) enables centralized authentication and authorization across multiple AWS accounts and other business applications. It allows users to sign in once and access resources in various accounts without the need for separate credentials for each account. This helps simplify access management in a multi-account environment.

   Source: Adapted from community discussion — Aghajee

   References

   • AWS documentation

   Next question

4. Question 264 · 712 in bank

   Select 2

   What does the concept of agility mean in AWS Cloud computing? (Choose two.)

   • AThe speed at which AWS resources are implemented
   • BThe speed at which AWS creates new AWS Regions
   • CThe ability to experiment quickly
   • DThe elimination of wasted capacity
   • EThe low cost of entry into cloud computing

   Show answer

   Answer: AC

   Explanation

   A. The speed at which AWS resources are implemented: Agility in AWS refers to the ability to quickly provision and implement resources, allowing users to adapt to changing requirements and scale resources as needed. C. The ability to experiment quickly: Agility involves the capability to experiment rapidly, enabling users to innovate, test ideas, and iterate quickly in the cloud environment. The other options are described as follows: B. The speed at which AWS creates new AWS Regions: The creation of new AWS Regions is not typically within the control of individual AWS customers. AWS decides when and where to create new regions based on business considerations. D. The elimination of wasted capacity: While efficiency and cost optimization are important aspects of cloud computing, the elimination of wasted capacity is not a direct aspect of the concept of agility. E. The low cost of entry into cloud computing: While cost considerations are important, the low cost of entry is not a defining aspect of agility. Agility focuses more on speed, flexibility, and the ability to respond quickly to changing demands.

   Source: Adapted from community discussion — TheFivePips

   References

   • AWS documentation

   Next question

5. Question 265 · 712 in bank

   A company created an Amazon EC2 instance. The company wants to control the incoming and outgoing network traffic at the instance level. Which AWS resource or service will meet this requirement?

   • AAWS Shield
   • BSecurity groups
   • CNetwork Access Analyzer
   • DVPC endpoints

   Show answer

   Answer: B

   Explanation

   B. Security groups Security groups act as virtual firewalls for your Amazon EC2 instances, controlling inbound and outbound traffic. You can configure security groups to allow or deny traffic based on rules that you define. By associating a security group with an EC2 instance, you can control the traffic to and from that instance at the network level.

   Source: Adapted from community discussion — Aghajee

   References

   • AWS documentation

   Next question

6. Question 266 · 712 in bank

   A company wants to use the AWS Cloud to deploy an application globally. Which architecture deployment model should the company use to meet this requirement?

   • AMulti-Region
   • BSingle-Region
   • CMulti-AZ
   • DSingle-AZ

   Show answer

   Answer: A

   Explanation

   Answer is A While a multi-AZ deployment can provide better availability and resilience than a single-region deployment, it is not the most appropriate architecture for deploying an application globally because it does not offer the same level of performance and latency reduction as a multi-region deployment. In a multi-AZ deployment, the application is deployed in multiple Availability Zones (AZs) within the same region. This means that the application is still subject to regional outages, which can affect users in that region. Additionally, latency to users in other regions may still be high.

   Source: Adapted from community discussion — spicymchaggis

   Next question

7. Question 267 · 712 in bank

   A company wants a web application to interact with various AWS services. Which AWS service or resource will meet this requirement?

   • AAWS CloudShell
   • BAWS Marketplace
   • CAWS Management Console
   • DAWS CLI

   Show answer

   Answer: C

   Explanation

   D: AWS CLI AWS CLI (Command Line Interface): The AWS CLI provides a command-line interface for interacting with AWS services, and it can be used in scripts or automation workflows. While the AWS Management Console is intended for human users, it does not directly interact with web applications or other AWS services in an automated or programmatic way. The web application to interact with AWS services programmatically, one would typically use other tools, such as: AWS SDKs , AWS CLI, AWS APIs

   Source: Adapted from community discussion — Aghajee

   References

   • AWS documentation
   • AWS documentation

   Next question

8. Question 268 · 712 in bank

   A company is migrating its applications from on-premises to the AWS Cloud. The company wants to ensure that the applications are assigned only the minimum permissions that are needed to perform all operations. Which AWS service will meet these requirements?

   • AAWS Identity and Access Management (IAM)
   • BAmazon CloudWatch
   • CAmazon Macie
   • DAmazon GuardDuty

   Show answer

   Answer: A

   Explanation

   IAM is the service in AWS that enables you to manage access to AWS services and resources securely. With IAM, you can create and manage AWS users and groups, and you can grant them permissions to access specific AWS resources. IAM allows you to define fine-grained permissions, ensuring that each application or user is assigned only the minimum permissions needed to perform their required operations. This aligns with the principle of least privilege.

   Source: Adapted from community discussion — Mike1987

   References

   • AWS documentation

   Next question

9. Question 269 · 712 in bank

   Select 2

   Which options are AWS Cloud Adoption Framework (AWS CAF) governance perspective capabilities? (Choose two.)

   • AIdentity and access management
   • BCloud financial management
   • CApplication portfolio management
   • DInnovation management
   • EProduct management

   Show answer

   Answer: BC

   Explanation

   BC. Governance Perspectives: Program and Project Management Benefits Management Risk Management Cloud Financial Management Application Portfolio Management Data Governance Data Curation.

   Source: Adapted from community discussion — [Removed]

   References

   • AWS documentation

   Next question

10. Question 270 · 712 in bank

    Which AWS service provides a single location to track the progress of application migrations?

    • AAWS Application Discovery Service
    • BAWS Application Migration Service
    • CAWS Service Catalog
    • DAWS Migration Hub

    Show answer

    Answer: D

    Explanation

    What Is AWS Migration Hub? AWS Migration Hub (Migration Hub) provides a single place to discover your existing servers, plan migrations, and track the status of each application migration. The Migration Hub provides visibility into your application portfolio and streamlines planning and tracking. You can visualize the connections and the status of the servers and databases that make up each of the applications you are migrating, regardless of which migration tool you are using. https://docs.aws.amazon.com/migrationhub/latest/ug/whatishub.html

    Source: Adapted from community discussion — [Removed]

    References

    • AWS documentation
    • AWS documentation

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

CLF-C02 practice, question 261. 712 questions available.