CLF-C02 Part 5
Question #: 241
Topic #: 1
A company wants to migrate its PostgreSQL database to AWS. The company does not use the database frequently.
Which AWS service or resource will meet these requirements with the LEAST management overhead?
A. PostgreSQL on Amazon EC2
B. Amazon RDS for PostgreSQL
C. Amazon Aurora PostgreSQL-Compatible Edition
D. Amazon Aurora Serverless
Question #: 242
Topic #: 1
A company is using Amazon DynamoDB for its application database.
Which tasks are the responsibility of AWS, according to the AWS shared responsibility model? (Choose two.)
A. Classify data.
B. Configure access permissions.
C. Manage encryption options.
D. Provide public endpoints to store and retrieve data.
E. Manage the infrastructure layer and the operating system.
Question #: 243
Topic #: 1
A company wants to create a globally accessible ecommerce platform for its customers. The company wants to use a highly available and scalable DNS web service to connect users to the platform.
Which AWS service will meet these requirements?
A. Amazon EC2
B. Amazon VPC
C. Amazon Route 53
D. Amazon RDS
Question #: 244
Topic #: 1
Which maintenance task is the customer’s responsibility, according to the AWS shared responsibility model?
A. Physical connectivity among Availability Zones
B. Network switch maintenance
C. Hardware updates and firmware patches
D. Amazon EC2 updates and security patches
Question #: 245
Topic #: 1
A company wants to improve its security posture by reviewing user activity through API calls.
Which AWS service will meet this requirement?
A. AWS WAF
B. Amazon Detective
C. Amazon CloudWatch
D. AWS CloudTrail
Question #: 246
Topic #: 1
A company is migrating to the AWS Cloud and plans to run experimental workloads for 3 to 6 months on AWS.
Which pricing model will meet these requirements?
A. Use Savings Plans for a 3-year term.
B. Use Dedicated Hosts.
C. Buy Reserved Instances.
D. Use On-Demand Instances.
Question #: 247
Topic #: 1
A company that has AWS Enterprise Support is launching a new version of a popular product in 2 months. The company expects a large increase in traffic to its website. The website is hosted on Amazon EC2 instances.
Which action should the company take to assess its readiness to scale for this launch?
A. Replace the EC2 instances with AWS Lambda functions.
B. Use AWS Infrastructure Event Management (IEM) support.
C. Submit a request on AWS Marketplace to monitor the event.
D. Review the coverage reports in the AWS Cost Management console.
Question #: 248
Topic #: 1
A company wants to launch multiple workloads on AWS. Each workload is related to a different business unit. The company wants to separate and track costs for each business unit.
Which solution will meet these requirements with the LEAST operational overhead?
A. Use AWS Organizations and create one account for each business unit.
B. Use a spreadsheet to control the owners and cost of each resource.
C. Use an Amazon DynamoDB table to record costs for each business unit.
D. Use the AWS Billing console to assign owners to resources and track costs.
Question #: 249
Topic #: 1
A company wants a time-series database service that makes it easier to store and analyze trillions of events each day.
Which AWS service will meet this requirement?
A. Amazon Neptune
B. Amazon Timestream
C. Amazon Forecast
D. Amazon DocumentDB (with MongoDB compatibility)
Question #: 250
Topic #: 1
Which option is a shared control between AWS and the customer, according to the AWS shared responsibility model?
A. Configuration management
B. Physical and environmental controls
C. Data integrity authentication
D. Identity and access management
Question #: 251
Topic #: 1
A company often does not use all of its current Amazon EC2 capacity to run stateless workloads. The company wants to optimize its EC2 costs.
Which EC2 instance type will meet these requirements?
A. Spot Instances
B. Dedicated Instances
C. Reserved Instances
D. On-Demand Instances
Question #: 252
Topic #: 1
A company wants to store data in Amazon S3. The company rarely access the data, and the data can be regenerated if necessary. The company wants to store the data in the most cost-effective storage class.
Which S3 storage class will meet this requirement?
A. S3 Standard
B. S3 Intelligent-Tiering
C. S3 Standard-Infrequent Access (S3 Standard-IA)
D. S3 One Zone-Infrequent Access (S3 One Zone-IA)
Question #: 253
Topic #: 1
A company has migrated its workloads to AWS. The company wants to adopt AWS at scale and operate more efficiently and securely. Which AWS service or framework should the company use for operational support?
A. AWS Support
B. AWS Cloud Adoption Framework (AWS CAF)
C. AWS Managed Services (AMS)
D. AWS Well-Architected Framework
Question #: 254
Topic #: 1
A company wants to provision and manage its AWS infrastructure by using the common programming languages Typescript, Python, Java, and .NET.
Which AWS service will meet this requirement?
A. AWS CodeBuild
B. AWS CloudFormation
C. AWS CLI
D. AWS Cloud Development Kit (AWS CDK)
Question #: 255
Topic #: 1
Which Amazon EC2 pricing model provides the MOST cost savings for an always-up, right-sized database server running for a project that will last 1 year?
A. On-Demand Instances
B. Convertible Reserved Instances
C. Spot Instances
D. Standard Reserved Instances
Question #: 256
Topic #: 1
A company has a physical tape library to store data backups. The tape library is running out of space. The company needs to extend the tape library’s capacity to the AWS Cloud.
Which AWS service should the company use to meet this requirement?
A. Amazon Elastic File System (Amazon EFS)
B. Amazon Elastic Block Store (Amazon EBS)
C. Amazon S3
D. AWS Storage Gateway
Question #: 257
Topic #: 1
A company is using the AWS Free Tier for several AWS services for an application.
What will happen if the Free Tier usage period expires or if the application use exceeds the Free Tier usage limits?
A. The company will be charged the standard pay-as-you-go service rates for the usage that exceeds the Free Tier usage.
B. AWS Support will contact the company to set up standard service charges.
C. The company will be charged for the services it consumed during the Free Tier period, plus additional charges for service consumption after the Free Tier period.
D. The company’s AWS account will be frozen and can be restarted after a payment plan is established.
Question #: 258
Topic #: 1
A company wants to monitor its workload performance. The company wants to ensure that the cloud services are delivered at a level that meets its business needs.
Which AWS Cloud Adoption Framework (AWS CAF) perspective will meet these requirements?
A. Business
B. Governance
C. Platform
D. Operations
Question #: 259
Topic #: 1
A company wants to migrate its applications to the AWS Cloud. The company plans to identify and prioritize any business transformation opportunities and evaluate its AWS Cloud readiness.
Which AWS service or tool should the company use to meet these requirements?
A. AWS Cloud Adoption Framework (AWS CAF)
B. AWS Managed Services (AMS)
C. AWS Well-Architected Framework
D. AWS Migration Hub
Question #: 260
Topic #: 1
A company need an AWS service that provides a clear baseline of what the company runs in its on-premises data centers. The company needs the projected cost to run its on-premises workloads in the AWS Cloud.
What AWS service or tool will meet these requirements?
A. AWS Compute Optimizer
B. AWS Cost Explorer
C. AWS Systems Manager Agent (SSM Agent)
D. Migration Evaluator
Question #: 261
Topic #: 1
A company acquired another corporation. The company now has two AWS accounts.
Which AWS service or tool can the company use to consolidate the billing for these two accounts?
A. AWS Systems Manager
B. AWS Organizations
C. AWS License Manager
D. Cost Explorer
Question #: 262
Topic #: 1
A company wants to set up its workloads to perform their intended functions and recover quickly from failure.
Which pillar of the AWS Well-Architected Framework aligns with these goals?
A. Performance efficiency
B. Sustainability
C. Reliability
D. Security
Question #: 263
Topic #: 1
Which of the following is a managed AWS service that is used specifically for extract, transform, and load (ETL) data?
A. Amazon Athena
B. AWS Glue
C. Amazon S3
D. AWS Snowball Edge
Question #: 264
Topic #: 1
A company wants to migrate petabytes of data from its on-premises data center to AWS. The company does not want to use an internet connection to perform the migration.
Which AWS service will meet these requirements?
A. AWS DataSync
B. Amazon Connect
C. AWS Snowmobile
D. AWS Direct Connect
Question #: 265
Topic #: 1
A company wants to receive alerts to monitor its overall operating costs for its AWS public cloud infrastructure.
Which AWS offering will meet these requirements?
A. Amazon EventBridge
B. Compute Savings Plans
C. AWS Budgets
D. Migration Evaluator
Question #: 266
Topic #: 1
How does the AWS Enterprise Support Concierge team help users?
A. Supporting application development
B. Providing architecture guidance
C. Answering billing and account inquiries
D. Answering questions regarding technical support cases
Question #: 267
Topic #: 1
A company wants to run a simulation for 3 years without interruptions.
Which Amazon EC2 instance purchasing option will meet these requirements MOST cost-effectively?
A. Spot Instances
B. Reserved Instances
C. Dedicated Hosts
D. On-Demand Instances
Question #: 268
Topic #: 1
Which AWS service or resource can provide discounts on some AWS service costs in exchange for a spending commitment?
A. Amazon Detective
B. AWS Pricing Calculator
C. Savings Plans
D. Basic Support
Question #: 269
Topic #: 1
Which of the following are pillars of the AWS Well-Architected Framework? (Choose two.)
A. High availability
B. Performance efficiency
C. Cost optimization
D. Going global in minutes
E. Continuous development
Question #: 270
Topic #: 1
A company wants to use Amazon EC2 instances to provide a static website to users all over the world. The company needs to minimize latency for the users.
Which solution meets these requirements?
A. Use EC2 instances in multiple edge locations.
B. Use EC2 instances in the same Availability Zone but in different AWS Regions.
C. Use Amazon CloudFront with the EC2 instances configured as the source.
D. Use EC2 instances in the same Availability Zone but in different AWS accounts.
Question #: 271
Topic #: 1
A team of researchers is going to collect data at remote locations around the world. Many locations do not have internet connectivity. The team needs to capture the data in the field, and transfer it to the AWS Cloud later.
Which AWS service will support these requirements?
A. AWS Outposts
B. AWS Transfer Family
C. AWS Snow Family
D. AWS Migration Hub
Question #: 272
Topic #: 1
Which of the following are benefits that a company receives when it moves an on-premises production workload to AWS? (Choose two.)
A. AWS trains the company’s staff on the use of all the AWS services.
B. AWS manages all security in the cloud.
C. AWS offers free support from technical account managers (TAMs).
D. AWS offers high availability.
E. AWS provides economies of scale.
Question #: 273
Topic #: 1
A company has decided to adopt Amazon EC2 infrastructure and wants to scale various stateless services for short-term usage.
Which EC2 pricing model is MOST cost-efficient to meet these requirements?
A. Spot Instances
B. On-Demand Instances
C. Reserved Instances
D. Dedicated Hosts
Question #: 274
Topic #: 1
Which of the following are benefits of AWS Trusted Advisor? (Choose two.)
A. Access to Amazon Simple Queue Service (Amazon SQS)
B. Cost optimization recommendations
C. Hourly refresh of the service limit checks
D. Security checks
E. AWS Identity and Access Management (IAM) approval management
Question #: 275
Topic #: 1
A company wants to save costs by archiving data that is no longer frequently accessed by end users.
Which Amazon S3 feature will meet this requirement?
A. S3 Versioning
B. S3 Lifecycle
C. S3 Object Lock
D. S3 Inventory
Question #: 276
Topic #: 1
Which cloud computing advantage is a company applying when it uses AWS Regions to increase application availability to users in different countries?
A. Pay-as-you-go pricing
B. Capacity forecasting
C. Economies of scale
D. Global reach
Question #: 277
Topic #: 1
A company wants an AWS service to collect and process 10 TB of data locally and transfer the data to AWS. The company has intermittent connectivity.
Which AWS service will meet these requirements?
A. AWS Database Migration Service (AWS DMS)
B. AWS DataSync
C. AWS Backup
D. AWS Snowball Edge
Question #: 278
Topic #: 1
Which of the following is an AWS Well-Architected Framework design principle for operational excellence in the AWS Cloud?
A. Go global in minutes.
B. Make frequent, small, reversible changes.
C. Implement a strong foundation of identity and access management
D. Stop spending money on hardware infrastructure for data center operations.
Question #: 279
Topic #: 1
What is a benefit of using AWS serverless computing?
A. Application deployment and management are not required.
B. Application security will be fully managed by AWS.
C. Monitoring and logging are not needed.
D. Management of infrastructure is offloaded to AWS.
Question #: 280
Topic #: 1
A developer wants AWS users to access AWS services by using temporary security credentials.
Which AWS service or feature should the developer use to provide these credentials?
A. IAM policies
B. IAM user groups
C. AWS Security Token Service (AWS STS)
D. AWS IAM Identity Center (AWS Single Sign-On)
Question #: 281
Topic #: 1
A global company wants to use a managed security service for protection from SQL injection attacks. The service also must provide detailed logging information about access to the company’s ecommerce applications.
Which AWS service will meet these requirements?
A. AWS Network Firewall
B. Amazon RDS for SQL Server
C. Amazon GuardDuty
D. AWS WAF
Question #: 282
Topic #: 1
A company is migrating its on-premises server to an Amazon EC2 instance. The server must stay active at all times for the next 12 months.
Which EC2 pricing option is the MOST cost-effective for the company’s workload?
A. On-Demand
B. Dedicated Hosts
C. Spot Instances
D. Reserved Instances
Question #: 283
Topic #: 1
Which of the following is the customer’s responsibility under the AWS shared responsibility model? (Choose two.)
A. Maintain the configuration of infrastructure devices.
B. Maintain patching and updates within the hardware infrastructure.
C. Maintain the configuration of guest operating systems and applications.
D. Manage decisions involving encryption options.
E. Maintain infrastructure hardware.
Question #: 284
Topic #: 1
A company wants to verify if multi-factor authentication (MFA) is enabled for all users within its AWS accounts.
Which AWS service or resource will meet this requirement?
A. AWS Cost and Usage Report
B. IAM credential reports
C. AWS Artifact
D. Amazon CloudFront reports
Question #: 285
Topic #: 1
A company uses AWS security services and tools. The company needs a service to help manage the security alerts and must organize the alerts into a single dashboard.
Which AWS service should the company use to meet these requirements?
A. Amazon GuardDuty
B. Amazon Inspector
C. Amazon Macie
D. AWS Security Hub
Question #: 286
Topic #: 1
A company wants to run its workloads in the AWS Cloud effectively, reduce management overhead, and improve processes.
Which AWS Well-Architected Framework pillar represents these requirements?
A. Reliability
B. Operational excellence
C. Performance efficiency
D. Cost optimization
Question #: 287
Topic #: 1
A company uses Amazon S3 to store records that can contain personally identifiable information (PII). The company wants a solution that can monitor all S3 buckets for PII and immediately alert staff about vulnerabilities.
Which AWS service will meet these requirements?
A. Amazon GuardDuty
B. Amazon Detective
C. Amazon Macie
D. AWS Shield
Question #: 288
Topic #: 1
Which AWS service allows users to download security and compliance reports about the AWS infrastructure on demand?
A. Amazon GuardDuty
B. AWS Security Hub
C. AWS Artifact
D. AWS Shield
Question #: 289
Topic #: 1
An external auditor has requested that a company provide a list of all its IAM users, including the status of users’ credentials and access keys.
What is the SIMPLEST way to provide this information?
A. Create an IAM user account for the auditor, granting the auditor administrator permissions.
B. Take a screenshot of each user’s page in the AWS Management Console, then provide the screenshots to the auditor.
C. Download the IAM credential report, then provide the report to the auditor.
D. Download the AWS Trusted Advisor report, then provide the report to the auditor.
Question #: 290
Topic #: 1
Which task can a company perform by using security groups in the AWS Cloud?
A. Allow access to an Amazon EC2 instance through only a specific port.
B. Deny access to malicious IP addresses at a subnet level.
C. Protect data that is cached by Amazon CloudFront.
D. Apply a stateless firewall to an Amazon EC2 instance.
Question #: 291
Topic #: 1
A company plans to run a compute-intensive workload that uses graphics processing units (GPUs).
Which Amazon EC2 instance type should the company use?
A. Accelerated computing
B. Compute optimized
C. Storage optimized
D. General purpose
Question #: 292
Topic #: 1
Which of the following are features of network ACLs as they are used in the AWS Cloud? (Choose two.)
A. They are stateless.
B. They are stateful.
C. They evaluate all rules before allowing traffic.
D. They process rules in order, starting with the lowest numbered rule, when deciding whether to allow traffic.
E. They operate at the instance level.
Question #: 293
Topic #: 1
Which capabilities are in the platform perspective of the AWS Cloud Adoption Framework (AWS CAF)? (Choose two.)
A. Performance and capacity management
B. Data engineering
C. Continuous integration and continuous delivery (CI/CD)
D. Infrastructure protection
E. Change and release management
Question #: 294
Topic #: 1
According to the AWS shared responsibility model, the customer is responsible for applying the latest security updates and patches for which of the following?
A. Amazon DynamoDB
B. Amazon EC2 instances
C. Amazon RDS instances
D. Amazon S3
Question #: 295
Topic #: 1
Which Amazon S3 storage class is MOST cost-effective for unknown access patterns?
A. S3 Standard
B. S3 Standard-Infrequent Access (S3 Standard-IA)
C. S3 One Zone-Infrequent Access (S3 One Zone-IA)
D. S3 Intelligent-Tiering
Question #: 296
Topic #: 1
Which options are AWS Cloud Adoption Framework (AWS CAF) security perspective capabilities? (Choose two.)
A. Observability
B. Incident and problem management
C. Incident response
D. Infrastructure protection
E. Availability and continuity
Question #: 297
Topic #: 1
A company has a managed IAM policy that does not grant the necessary permissions for users to accomplish required tasks.
How can this be resolved?
A. Enable AWS Shield Advanced.
B. Create a custom IAM policy.
C. Use a third-party web application firewall (WAF) managed rule from the AWS Marketplace.
D. Use AWS Key Management Service (AWS KMS) to create a customer-managed key.
Question #: 298
Topic #: 1
Who is responsible for managing IAM user access and secret keys according to the AWS shared responsibility model?
A. IAM access and secret keys are static, so there is no need to rotate them.
B. The customer is responsible for rotating keys.
C. AWS will rotate the keys whenever required.
D. The AWS Support team will rotate keys when requested by the customer.
Question #: 299
Topic #: 1
A company needs to run a pre-installed third-party firewall on an Amazon EC2 instance.
Which AWS service or feature can provide this solution?
A. Network ACLs
B. Security groups
C. AWS Marketplace
D. AWS Trusted Advisor
Question #: 300
Topic #: 1
Which AWS Cloud benefit gives a company the ability to quickly deploy cloud resources to access compute, storage, and database infrastructures in a matter of minutes?
A. Elasticity
B. Cost savings
C. Agility
D. Reliability