CLF-C02 practice questions 271–280

1. Question 271 · 712 in bank

   Select 2

   A company launched an Amazon EC2 instance with the latest Amazon Linux 2 Amazon Machine Image (AMI). Which actions can a system administrator take to connect to the EC2 instance? (Choose two.)

   • AUse Amazon EC2 Instance Connect.
   • BUse a Remote Desktop Protocol (RDP) connection.
   • CUse AWS Batch.
   • DUse AWS Systems Manager Session Manager.
   • EUse Amazon Connect.

   Show answer

   Answer: AD

   Explanation

   Session Manager enables you to establish secure connections to your Amazon Elastic Compute Cloud (EC2) instances, edge devices, on-premises servers, and virtual machines (VMs). https://docs.aws.amazon.com/systems-manager/latest/userguide/session-manager.html Amazon EC2 Instance Connect provides a simple and secure way to connect to your Linux instances with Secure Shell (SSH). https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/connect-linux-inst-eic.html

   Source: Adapted from community discussion — petercorn

   References

   • AWS documentation
   • AWS documentation
   • AWS documentation

   Next question

2. Question 272 · 712 in bank

   Which architecture concept describes the ability to deploy resources on demand and release resources when they are no longer needed?

   • AHigh availability
   • BDecoupled architecture
   • CResilience
   • DElasticity

   Show answer

   Answer: D

   References

   • aws.amazon.com documentation

   Next question

3. Question 273 · 712 in bank

   Which task requires a user to sign in as the AWS account root user?

   • AThe deletion of IAM users
   • BThe deletion of an AWS account
   • CThe creation of an organization in AWS Organizations
   • DThe deletion of Amazon EC2 instances

   Show answer

   Answer: B

   Explanation

   According to ChatGPT & https://docs.aws.amazon.com/IAM/latest/UserGuide/root-user-tasks.html: Tasks that require root user credentials includes closing an AWS account. B. The deletion of an AWS account

   Source: Adapted from community discussion — [Removed]

   References

   • AWS documentation
   • AWS documentation

   Next question

4. Question 274 · 712 in bank

   What does the Amazon S3 Intelligent-Tiering storage class offer?

   • APayment flexibility by reserving storage capacity
   • BLong-term retention of data by copying the data to an encrypted Amazon Elastic Block Store (Amazon EBS) volume
   • CAutomatic cost savings by moving objects between tiers based on access pattern changes
   • DSecure, durable, and lowest cost storage for data archival

   Show answer

   Answer: C

   References

   • AWS documentation

   Next question

5. Question 275 · 712 in bank

   A company needs to block SQL injection attacks. Which AWS service or feature can meet this requirement?

   • AAWS WAF
   • BAWS Shield
   • CNetwork ACLs
   • DSecurity groups

   Show answer

   Answer: A

   Explanation

   Confusion will come to choose between WAF or Shield. but all common web attack patterns (XSS, SQL Injection, etc...) dealt by WAF, special cases which can't be handled by WAF - will be handled by Shield primarily DDoS

   Source: Adapted from community discussion — jeevamini

   References

   • AWS documentation

   Next question

6. Question 276 · 712 in bank

   A company needs Amazon EC2 instances for a workload that can tolerate interruptions. Which EC2 instance purchasing option meets this requirement with the LARGEST discount compared to On-Demand prices?

   • ASpot Instances
   • BConvertible Reserved Instances
   • CStandard Reserved Instances
   • DDedicated Hosts

   Show answer

   Answer: A

   Explanation

   Spot Instances provide the largest discount compared to On-Demand prices, but they come with the caveat that they can be terminated by AWS if the capacity is needed by On-Demand or Reserved Instances. Spot Instances are suitable for workloads that can tolerate interruptions and are cost-effective for applications that have flexible start and end times or that can be distributed across multiple instances.

   Source: Adapted from community discussion — Mike1987

   References

   • AWS documentation
   • AWS documentation

   Next question

7. Question 277 · 712 in bank

   A company is planning to migrate to the AWS Cloud. The company wants to identify measurable business outcomes that will explain the value of the company's decision to migrate. Which phase of the cloud transformation journey includes these activities?

   • AEnvision
   • BAlign
   • CScale
   • DLaunch

   Show answer

   Answer: A

   Explanation

   It is NOT B or C. Its A, Envision. "Envision phase focuses on demonstrating how cloud will help accelerate your business outcomes. It does so by identifying and prioritizing transformation opportunities across each of the four transformation domains in line with your strategic business objectives. Associating your transformation initiatives with key stakeholders (senior individuals capable of influencing and driving change) and measurable business outcomes will help you demonstrate value as you progress through your transformation journey." https://docs.aws.amazon.com/whitepapers/latest/overview-aws-cloud-adoption-framework/your-cloud-transformation-journey.html#:~:text=Envision%20phase%20focuses,your%20transformation%20journey.

   Source: Adapted from community discussion — [Removed]

   References

   • AWS documentation
   • AWS documentation

   Next question

8. Question 278 · 712 in bank

   Which AWS service or component allows inbound traffic from the internet to access a VPC?

   • AInternet gateway
   • BNAT gateway
   • CAWS WAF
   • DVPC peering

   Show answer

   Answer: A

   Explanation

   Connect to the internet using an internet gateway An internet gateway is a horizontally scaled, redundant, and highly available VPC component that allows communication between your VPC and the internet. It supports IPv4 and IPv6 traffic. It does not cause availability risks or bandwidth constraints on your network traffic. https://docs.aws.amazon.com/vpc/latest/userguide/VPC_Internet_Gateway.html

   Source: Adapted from community discussion — [Removed]

   References

   • AWS documentation

   Next question

9. Question 279 · 712 in bank

   Which AWS service can companies use to create infrastructure from code?

   • AAmazon Elastic Kubernetes Service (Amazon EKS)
   • BAWS Outposts
   • CAWS CodePipeline
   • DAWS CloudFormation

   Show answer

   Answer: D

   References

   • AWS documentation
   • AWS documentation

   Next question

10. Question 280 · 712 in bank

    Which guideline is a well-architected design principle for building cloud applications?

    • AKeep static data closer to compute resources.
    • BProvision resources for peak capacity.
    • CDesign for automated recovery from failure.
    • DUse tightly coupled components.

    Show answer

    Answer: C

    References

    • AWS documentation
    • AWS documentation

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

CLF-C02 practice, question 271. 712 questions available.