CLF-C02 practice questions 71–80

1. Question 71 · 712 in bank

   A company plans to migrate its application to AWS and run the application on Amazon EC2 instances. The application will have continuous usage for 1 year. Which EC2 instance purchasing option will meet these requirements MOST cost-effectively?

   • AReserved Instances
   • BSpot Instances
   • COn-Demand Instances
   • DDedicated Hosts

   Show answer

   Answer: A

   Explanation

   You almost got me there. The reason it's A is because of the "continuous usage". In terms of most cost effective, you would have to pair the Spot Instance with other services like auto scaling, EMR, etc which would increase cost. Continuous to me means no down time; Spot instances aren't as reliable on their own. Reserved Instances for the W

   Source: Adapted from community discussion — HardStuck

   References

   • AWS documentation

   Next question

2. Question 72 · 712 in bank

   A company needs to transfer data between an Amazon S3 bucket and an on-premises application. Who is responsible for the security of this data, according to the AWS shared responsibility model?

   • AThe company
   • BAWS
   • CFirewall vendor
   • DAWS Marketplace partner

   Show answer

   Answer: A

   Explanation

   I bet to be A since AWS can offer several services to protect data but it's up to the customer to apply the security controls needed to protect their own data

   Source: Adapted from community discussion — db97

   References

   • AWS documentation

   Next question

3. Question 73 · 712 in bank

   Which pillar of the AWS Well-Architected Framework refers to the ability of a system to recover from infrastructure or service disruptions and dynamically acquire computing resources to meet demand?

   • ASecurity
   • BReliability
   • CPerformance efficiency
   • DCost optimization

   Show answer

   Answer: B

   Explanation

   B is correct "Ability of a system to recover from infrastructure or service disruptions, dynamically acquire computing resources to meet demand, and mitigate disruptions such as misconfigurations or transient network issues."

   Source: Adapted from community discussion — asdfcdsxdfc

   References

   • AWS documentation

   Next question

4. Question 74 · 712 in bank

   A company wants to identify Amazon S3 buckets that are shared with another AWS account. Which AWS service or feature will meet these requirements?

   • AAWS Lake Formation
   • BIAM credential report
   • CAmazon CloudWatch
   • DIAM Access Analyzer

   Show answer

   Answer: D

   Explanation

   D is correct "IAM Access Analyzer: • Find out which resources are shared externally • S3 Buckets • IAM Roles • KMS Keys • Lambda Functions and Layers • SQS queues • Secrets Manager Secrets" upvoted 1

   Source: Adapted from community discussion — Ruffyit

   References

   • AWS documentation

   Next question

5. Question 75 · 712 in bank

   Which AWS service gives users the ability to build interactive business intelligence dashboards that include machine learning insights?

   • AAmazon Athena
   • BAmazon Kendra
   • CAmazon QuickSight
   • DAmazon Redshift

   Show answer

   Answer: C

   Explanation

   Amazon QuickSight is the AWS service that gives users the ability to create interactive business intelligence (BI) dashboards that can include machine learning insights. It allows you to connect and visualize data from various sources, perform exploratory analysis and share information collaboratively in the form of reports and dashboards.

   Source: Adapted from community discussion — y2k121

   References

   • AWS documentation

   Next question

6. Question 76 · 712 in bank

   Which of the following is an AWS value proposition that describes a user’s ability to scale infrastructure based on demand?

   • ASpeed of innovation
   • BResource elasticity
   • CDecoupled architecture
   • DGlobal deployment

   Show answer

   Answer: B

   References

   • aws.amazon.com documentation

   Next question

7. Question 77 · 712 in bank

   Which action is a security best practice for access to sensitive data that is stored in an Amazon S3 bucket?

   • AEnable S3 Cross-Region Replication (CRR) on the S3 bucket.
   • BUse IAM roles for applications that require access to the S3 bucket.
   • CConfigure AWS WAF to prevent unauthorized access to the S3 bucket.
   • DConfigure Amazon GuardDuty to prevent unauthorized access to the S3 bucket.

   Show answer

   Answer: B

   Explanation

   ChatGPT: A security best practice for managing access to sensitive data stored in an Amazon S3 bucket is B. Use IAM roles for applications that require access to the S3 bucket. Here's an explanation of the options: B. Use IAM roles for applications that require access to the S3 bucket: This is a recommended practice for security. IAM roles provide a secure way to grant permissions that applications require to access AWS resources, including S3 buckets. The use of IAM roles ensures that access is granted with the principle of least privilege, reducing the risk of unauthorized access.

   Source: Adapted from community discussion — tqiu654

   References

   • AWS documentation
   • AWS documentation

   Next question

8. Question 78 · 712 in bank

   A company wants to know more about the benefits offered by cloud computing. The company wants to understand the operational advantage of agility. How does AWS provide agility for users?

   • AThe ability the ensure high availability by deploying workloads to multiple regions
   • BA pay-as-you-go model for many services and resources
   • CThe ability to transfer infrastructure management to the AWS Cloud
   • DThe ability to provision and deprovision resources quickly with minimal effort

   Show answer

   Answer: D

   Explanation

   chat gpt : D. The ability to provision and deprovision resources quickly with minimal effort The agility provided by AWS is closely tied to the ability to provision and deprovision resources rapidly. AWS allows users to scale their infrastructure up or down based on demand, enabling them to quickly deploy new resources when needed and release them when no longer necessary. This flexibility and speed in resource management contribute to operational agility, allowing companies to respond more efficiently to changing business requirements.

   Source: Adapted from community discussion — mandrino

   Next question

9. Question 79 · 712 in bank

   A developer wants to deploy an application quickly on AWS without manually creating the required resources. Which AWS service will meet these requirements?

   • AAmazon EC2
   • BAWS Elastic Beanstalk
   • CAWS CodeBuild
   • DAmazon Personalize

   Show answer

   Answer: B

   Explanation

   With Elastic Beanstalk, you can quickly deploy and manage applications in the AWS Cloud without having to learn about the infrastructure that runs those applications. Elastic Beanstalk reduces management complexity without restricting choice or control. You simply upload your application, and Elastic Beanstalk automatically handles the details of capacity provisioning, load balancing, scaling, and application health monitoring.

   Source: Adapted from community discussion — bn04

   References

   • AWS documentation

   Next question

10. Question 80 · 712 in bank

    A company needs a central user portal so that users can log in to third-party business applications that support Security Assertion Markup Language (SAML) 2.0. Which AWS service will meet this requirement?

    • AAWS Identity and Access Management (IAM)
    • BAmazon Cognito
    • CAWS IAM Identity Center (AWS Single Sign-On)
    • DAWS CLI

    Show answer

    Answer: C

    Explanation

    C. AWS IAM Identity Center (AWS Single Sign-On) Explanation: AWS IAM Identity Center (previously AWS Single Sign-On) is designed to provide a central authentication portal for users to access multiple third-party business applications that support SAML 2.0. It allows organizations to manage user identities and permissions centrally while enabling seamless single sign-on (SSO) to various applications. Why not the other options? A. AWS Identity and Access Management (IAM) → IAM is mainly used to manage AWS resources and permissions, not third-party SAML-based authentication. B. Amazon Cognito → Cognito is used for user authentication in custom web and mobile apps, but it is not optimized for central SSO to third-party SAML apps. D. AWS CLI → The AWS CLI is a command-line tool for managing AWS resources and does not provide a user login portal. ChatGPT

    Source: Adapted from community discussion — deathhellknight01

    References

    • AWS documentation
    • AWS documentation

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

CLF-C02 practice, question 71. 712 questions available.