πŸ”

CLF-C02 β€” questions

Page 33 of 36 Β· 719 total questions.

Topic 1 Β· Question 641 Β· Select all that apply

A company is migrating to the AWS Cloud instead of running its infrastructure on premises. Which of the following are advantages of this migration? (Choose two.)

  • AElimination of the need to perform security auditing
  • BIncreased global reach and agility (correct answer)
  • CAbility to deploy globally in minutes (correct answer)
  • DElimination of the cost of IT staff members
  • ERedundancy by default for all compute services
Reveal answer & explanation
Correct answer: B, C

The correct answer is B, C. Option B: Increased global reach and agility Option C: Ability to deploy globally in minutes.

Topic 1 Β· Question 642

Which AWS service uses edge locations to cache content?

  • AAmazon Kinesis
  • BAmazon Simple Queue Service (Amazon SQS)
  • CAmazon CloudFront (correct answer)
  • DAmazon Route 53
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: Amazon CloudFront

Explanation

Amazon CloudFront caches content at edge locations to reduce latency and offload origins.

Topic 1 Β· Question 643

A company wants to securely access an Amazon S3 bucket from an Amazon EC2 instance without accessing the internet. What should the company use to accomplish this goal?

  • AVPN connection
  • BInternet gateway
  • CVPC endpoint (correct answer)
  • DNAT gateway
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: VPC endpoint

Explanation

A VPC endpoint provides private connectivity to AWS services without traversing the public internet.

Topic 1 Β· Question 644

A company wants an AWS service that can automate software deployment in Amazon EC2 instances and on-premises instances. Which AWS service will meet this requirement?

  • AAWS CodeCommit
  • BAWS CodeBuild
  • CAWS CodeDeploy (correct answer)
  • DAWS CodePipeline
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: AWS CodeDeploy

Explanation

AWS CodeDeploy automates application deployments to compute services.

Topic 1 Β· Question 645 Β· Select all that apply

Which AWS services are serverless? (Choose two.)

  • AAWS Fargate (correct answer)
  • BAmazon Managed Streaming for Apache Kafka
  • CAmazon EMR
  • DAmazon S3 (correct answer)
  • EAmazon EC2
Reveal answer & explanation
Correct answer: A, D

The correct answer is A, D. Option A: AWS Fargate Option D: Amazon S3

Explanation

AWS Fargate runs containers serverlessly so there are no EC2 hosts to manage or patch. Amazon S3 provides durable, scalable object storage that is fully managed.

Topic 1 Β· Question 646

A company wants to continuously improve processes and procedures to deliver business value. Which pillar of the AWS Well-Architected Framework does this goal represent?

  • APerformance efficiency
  • BOperational excellence (correct answer)
  • CReliability
  • DSustainability
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Operational excellence.

Topic 1 Β· Question 647

Which of the following is a customer responsibility according to the AWS shared responsibility model?

  • AApply security patches for Amazon S3 infrastructure devices.
  • BProvide physical security for AWS datacenters.
  • CInstall operating system updates on Lambda@Edge.
  • DImplement multi-factor authentication (MFA) for IAM user accounts. (correct answer)
Reveal answer & explanation
Correct answer: D

The correct answer is D. Option D: Implement multi-factor authentication (MFA) for IAM user accounts.

Explanation

AWS IAM controls authenticated and authorized access to AWS resources with fine-grained policies.

Topic 1 Β· Question 648

Which AWS service should a company use to organize, characterize, and search large numbers of images?

  • AAmazon Transcribe
  • BAmazon Rekognition (correct answer)
  • CAmazon Aurora
  • DAmazon QuickSight
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Amazon Rekognition

Explanation

Amazon Rekognition adds image and video analysis with pre-trained models.

Topic 1 Β· Question 649

Which AWS service is always available free of charge to users?

  • AAmazon Athena
  • BAWS Identity and Access Management (IAM) (correct answer)
  • CAWS Secrets Manager
  • DAmazon ElastiCache
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: AWS Identity and Access Management (IAM)

Explanation

AWS IAM controls authenticated and authorized access to AWS resources with fine-grained policies.

Topic 1 Β· Question 650

A company needs to run some of its workloads on premises to comply with regulatory guidelines. The company wants to use the AWS Cloud to run workloads that are not required to be on premises. The company also wants to be able to use the same API calls for the on-premises workloads and the cloud workloads. Which AWS service or feature should the company use to meet these requirements?

  • ADedicated Hosts
  • BAWS Outposts (correct answer)
  • CAvailability Zones
  • DAWS Wavelength
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: AWS Outposts

Explanation

AWS Outposts extends AWS infrastructure on premises for low-latency or data-residency needs.

Topic 1 Β· Question 651

What is the recommended use case for Amazon EC2 On-Demand Instances?

  • AA steady-state workload that requires a particular EC2 instance configuration for a long period of time
  • BA workload that can be interrupted for a project that requires the lowest possible cost
  • CAn unpredictable workload that does not require a long-term commitment (correct answer)
  • DA workload that is expected to run for longer than 1 year
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: An unpredictable workload that does not require a long-term commitment.

Topic 1 Β· Question 652

A company wants to use an AWS networking solution that can act as a centralized gateway between multiple VPCs and on-premises networks. Which AWS service or feature will meet this requirement?

  • AGateway VPC endpoint
  • BAWS Direct Connect
  • CAWS Transit Gateway (correct answer)
  • DAWS PrivateLink
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: AWS Transit Gateway

Explanation

AWS Transit Gateway centrally connects many VPCs and on-premises networks at scale.

Topic 1 Β· Question 653

An administrator observed that multiple AWS resources were deleted yesterday. Which AWS service will help identify the cause and determine which user deleted the resources?

  • AAWS CloudTrail (correct answer)
  • BAmazon Inspector
  • CAmazon GuardDuty
  • DAWS Trusted Advisor
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: AWS CloudTrail

Explanation

AWS CloudTrail records API activity for auditing and governance.

Topic 1 Β· Question 654

To assist companies with Payment Card Industry Data Security Standard (PCI DSS) compliance in the cloud, AWS provides:

  • Aphysical Inspections of data centers by appointment.
  • Brequired PCI compliance certifications for any application running on AWS.
  • Can AWS Attestation of Compliance (AOC) report for specific AWS services. (correct answer)
  • Dprofessional PCI compliance services.
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: an AWS Attestation of Compliance (AOC) report for specific AWS services.

Topic 1 Β· Question 655

In which situations should a company create an IAM user instead of an IAM role?

  • AWhen an application that runs on Amazon EC2 instances requires access to other AWS services
  • BWhen the company creates AWS access credentials for individuals
  • CWhen the company creates an application that runs on a mobile phone that makes requests to AWS
  • DWhen the company needs to add users to IAM groups (correct answer)
  • EWhen users are authenticated in the corporate network and want to be able to use AWS without having to sign in a second time
Reveal answer & explanation
Correct answer: D

The correct answer is D. Option D: When the company needs to add users to IAM groups

Explanation

AWS IAM controls authenticated and authorized access to AWS resources with fine-grained policies.

Topic 1 Β· Question 656

A company hosts a web application on AWS. The company has improved the availability of its application by provisioning multiple Amazon EC2 instances. The company wants to distribute its traffic across the EC2 instances while providing a single point of contact to the web clients. Which AWS service can distribute the traffic to multiple EC2 instances as targets?

  • AVPC endpoints
  • BApplication Load Balancer (correct answer)
  • CNAT gateway
  • DInternet gateway
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Application Load Balancer

Explanation

An Application Load Balancer distributes HTTP/HTTPS traffic and supports path/host routing. A load balancer distributes traffic across targets in multiple AZs for availability and scale.

Topic 1 Β· Question 657

What is the total volume of data that can be stored in Amazon S3?

  • A10 PB
  • B50 PB
  • C100 PB
  • DVirtually unlimited (correct answer)
Reveal answer & explanation
Correct answer: D

The correct answer is D. Option D: Virtually unlimited.

Topic 1 Β· Question 658

Which design principle is related to the reliability pillar according to the AWS Well-Architected Framework?

  • ATest recovery procedures (correct answer)
  • BExperiment more often
  • CGo global in minutes
  • DAnalyze and attribute to expenditure
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: Test recovery procedures.

Topic 1 Β· Question 659

A company stores data in an Amazon S3 bucket. Which task is the responsibility of AWS?

  • AConfigure an S3 Lifecycle policy.
  • BActivate S3 Versioning.
  • CConfigure S3 bucket policies.
  • DProtect the infrastructure that supports S3 storage. (correct answer)
Reveal answer & explanation
Correct answer: D

The correct answer is D. Option D: Protect the infrastructure that supports S3 storage.

Explanation

Amazon S3 provides durable, scalable object storage that is fully managed.

Topic 1 Β· Question 660

A company wants to transfer a virtual Windows Server 2022 that is currently running in its own data center to AWS. The company wants to automatically convert the existing server to run directly on AWS infrastructure instead of visualized hardware. Which AWS service will meet these requirements?

  • AAWS DataSync
  • BAWS Database Migration Service (AWS DMS)
  • CAWS Application Discovery Service
  • DAWS Application Migration Service (correct answer)
Reveal answer & explanation
Correct answer: D

The correct answer is D. Option D: AWS Application Migration Service

Explanation

AWS Application Migration Service (MGN) rehosts servers to AWS with minimal effort.

Showing questions 641–660 of 719 Β· Page 33 of 36