CLF-C02 practice questions 61–70

1. Question 61 · 712 in bank

   A company wants to query its server logs to gain insights about its customers’ experiences. Which AWS service will store this data MOST cost-effectively?

   • AAmazon Aurora
   • BAmazon Elastic File System (Amazon EFS)
   • CAmazon Elastic Block Store (Amazon EBS)
   • DAmazon S3

   Show answer

   Answer: D

   Explanation

   For cost-effective storage and querying of large volumes of data, especially log data, Amazon S3 (Simple Storage Service) is the most suitable option. Amazon S3 is an object storage service designed to store and retrieve any amount of data from anywhere on the web.

   Source: Adapted from community discussion — Ruffyit

   References

   • AWS documentation

   Next question

2. Question 62 · 712 in bank

   Which of the following is a recommended design principle for AWS Cloud architecture?

   • ADesign tightly coupled components.
   • BBuild a single application component that can handle all the application functionality.
   • CMake large changes on fewer iterations to reduce chances of failure.
   • DAvoid monolithic architecture by segmenting workloads.

   Show answer

   Answer: D

   Explanation

   D. Avoid monolithic architecture by segmenting workloads. In AWS Cloud architecture, one of the key design principles is to avoid monolithic architectures and instead use a microservices or segmented approach for workloads. This promotes flexibility, scalability, and maintainability by breaking down applications into smaller, independent components. This makes it easier to deploy, scale, and manage applications, and it improves fault isolation.

   Source: Adapted from community discussion — Amin_013

   Next question

3. Question 63 · 712 in bank

   Which AWS service helps users audit API activity across their AWS account?

   • AAWS CloudTrail
   • BAmazon Inspector
   • CAWS WAF
   • DAWS Config

   Show answer

   Answer: A

   Explanation

   With AWS CloudTrail, you can monitor your AWS deployments in the cloud by getting a history of AWS API calls for your account, including API calls made by using the AWS Management Console, the AWS SDKs, the command line tools, and higher-level AWS services. You can also identify which users and accounts called AWS APIs for services that support CloudTrail, the source IP address from which the calls were made, and when the calls occurred. You can integrate CloudTrail into applications using the API, automate trail creation for your organization, check the status of your trails, and control how administrators turn CloudTrail logging on and off. https://docs.aws.amazon.com/cloudtrail/

   Source: Adapted from community discussion — petercorn

   References

   • AWS documentation

   Next question

4. Question 64 · 712 in bank

   Which task is a customer’s responsibility, according to the AWS shared responsibility model?

   • AManagement of the guest operating systems
   • BMaintenance of the configuration of infrastructure devices
   • CManagement of the host operating systems and virtualization
   • DMaintenance of the software that powers Availability Zones

   Show answer

   Answer: A

   References

   • AWS documentation

   Next question

5. Question 65 · 712 in bank

   A company wants to automatically add and remove Amazon EC2 instances. The company wants the EC2 instances to adjust to varying workloads dynamically. Which service or feature will meet these requirements?

   • AAmazon DynamoDB
   • BAmazon EC2 Spot Instances
   • CAWS Snow Family
   • DAmazon EC2 Auto Scaling

   Show answer

   Answer: D

   Explanation

   D. Amazon EC2 Auto Scaling Amazon EC2 Auto Scaling is a service that allows you to automatically adjust the number of Amazon EC2 instances in your application to meet changing demand. It can add or remove instances based on predefined conditions, ensuring that you have the right number of instances to handle varying workloads, while optimizing costs.

   Source: Adapted from community discussion — Amin_013

   References

   • AWS documentation

   Next question

6. Question 66 · 712 in bank

   A user wants to securely automate the management and rotation of credentials that are shared between applications, while spending the least amount of time on managing tasks. Which AWS service or feature can be used to accomplish this?

   • AAWS CloudHSM
   • BAWS Key Management Service (AWS KMS)
   • CAWS Secrets Manager
   • DServer-side encryption

   Show answer

   Answer: C

   Explanation

   AWS Secrets Manager helps in the secure storage, rotation, and retrieval of sensitive credentials such as API keys, database passwords, and other secrets used by applications. AWS CloudHSM provides hardware-based key storage for cryptographic keys and is more focused on custom key storage and compliance needs, which might be an overkill for just credential management and rotation. AWS Key Management Service (AWS KMS) is used for creating and managing encryption keys. While it's crucial for encryption, it doesn’t directly handle the automated management and rotation of credentials shared between applications.

   Source: Adapted from community discussion — azhrhsn

   Next question

7. Question 67 · 712 in bank

   Which security service automatically recognizes and classifies sensitive data or intellectual property on AWS?

   • AAmazon GuardDuty
   • BAmazon Macie
   • CAmazon Inspector
   • DAWS Shield

   Show answer

   Answer: B

   Explanation

   B. Amazon Macie Amazon Macie uses machine learning to automatically discover, classify, and protect sensitive data, such as personally identifiable information (PII) and intellectual property, across your AWS environment.

   Source: Adapted from community discussion — mkhwezi

   Next question

8. Question 68 · 712 in bank

   An e-learning platform needs to run an application for 2 months each year. The application will be deployed on Amazon EC2 instances. Any application downtime during those 2 months must be avoided. Which EC2 purchasing option will meet these requirements MOST cost-effectively?

   • AReserved Instances
   • BDedicated Hosts
   • CSpot Instances
   • DOn-Demand Instances

   Show answer

   Answer: D

   Explanation

   A. Reserved Instances (RIs): Reserved Instances provide capacity reservation for a specified term (usually one or three years), offering cost savings compared to On-Demand Instances. However, RIs may not be the most suitable for a short duration like 2 months, as they typically involve longer-term commitments. B. Dedicated Hosts: Dedicated Hosts may not be cost-effective for short-term workloads and lack the flexibility needed. C. Spot Instances: Spot Instances offer cost savings but can be terminated with short notice, potentially causing interruptions. D. On-Demand Instances: On-Demand Instances provide capacity on a pay-as-you-go basis with no upfront commitment. They are suitable for short-term, variable workloads, offering flexibility without the need for long-term commitments. In this scenario, On-Demand Instances would be a cost-effective option for the 2-month duration while avoiding downtime.

   Source: Adapted from community discussion — TheFivePips

   References

   • AWS documentation
   • AWS documentation

   Next question

9. Question 69 · 712 in bank

   Select 2

   Which actions are best practices for an AWS account root user? (Choose two.)

   • AShare root user credentials with team members.
   • BCreate multiple root users for the account, separated by environment.
   • CEnable multi-factor authentication (MFA) on the root user.
   • DCreate an IAM user with administrator privileges for daily administrative tasks, instead of using the root user.
   • EUse programmatic access instead of the root user and password.

   Show answer

   Answer: CD

   Next question

10. Question 70 · 712 in bank

    A company is running a critical workload on an Amazon RDS DB instance. The company needs the DB instance to be highly available with a recovery time of less than 5 minutes. Which solution will meet these requirements?

    • ACreate a read replica of the DB instance.
    • BCreate a template of the DB instance by using AWS CloudFormation.
    • CTake frequent snapshots of the DB instance. Store the snapshots in Amazon S3.
    • DModify the DB instance to be a Multi-AZ deployment.

    Show answer

    Answer: D

    Explanation

    In an Amazon RDS Multi-AZ deployment, Amazon RDS automatically creates a primary database (DB) instance and synchronously replicates the data to an instance in a different AZ. When it detects a failure, Amazon RDS automatically fails over to a standby instance without manual intervention.

    Source: Adapted from community discussion — fguglia

    References

    • AWS documentation

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

CLF-C02 practice, question 61. 712 questions available.