CLF-C02 Part 8
Question #: 421
Topic #: 1
How does the AWS Cloud help companies build agility into their processes and cloud infrastructure?
A. Companies can avoid provisioning too much capacity when they do not know how much capacity is required.
B. Companies can expand into new geographic regions.
C. Companies can access a range of technologies to experiment and innovate quickly.
D. Companies can pay for IT resources only when they use the resources.
Question #: 422
Topic #: 1
Which AWS service or tool gives a company the ability to release application changes in an automated way?
A. Amazon AppFlow
B. AWS CodeDeploy
C. AWS PrivateLink
D. Amazon EKS Distro
Question #: 423
Topic #: 1
Which AWS Cloud Adoption Framework (AWS CAF) perspective focuses on managing identities and permissions at scale?
A. Operations
B. Platform
C. Governance
D. Security
Question #: 424
Topic #: 1
Which AWS service or feature allows users to securely store encrypted credentials and retrieve these credentials when required?
A. AWS Encryption SDK
B. AWS Security Hub
C. AWS Secrets Manager
D. AWS Artifact
Question #: 425
Topic #: 1
Which pillar of the AWS Well-Architected Framework aligns with the ability to make frequent, small, and reversible changes to AWS Cloud architecture?
A. Security
B. Cost optimization
C. Operational excellence
D. Performance efficiency
Question #: 426
Topic #: 1
Which AWS service or resource can a company use to deploy AWS WAF rules?
A. Amazon EC2
B. Application Load Balancer
C. AWS Trusted Advisor
D. Network Load Balancer
Question #: 427
Topic #: 1
A company hosts its website on Amazon EC2 instances. The company needs to ensure that the website reaches a global audience and provides minimum latency to users.
Which AWS service should the company use to meet these requirements?
A. Amazon Route 53
B. Amazon CloudFront
C. Elastic Load Balancing
D. AWS Lambda
Question #: 428
Topic #: 1
Which AWS design principle emphasizes the reduction of interdependencies between components of an application?
A. Scalability
B. Loose coupling
C. Automation
D. Caching
Question #: 429
Topic #: 1
A company wants to provide one of its employees with access to Amazon RDS. The company also wants to limit the interaction to only the AWS CLI and AWS software development kits (SDKs).
Which combination of actions should the company take to meet these requirements while following the principles of least privilege? (Choose two.)
A. Create an IAM user and provide AWS Management Console access only.
B. Create an IAM user and provide programmatic access only.
C. Create an IAM role and provide AWS Management Console access only.
D. Create an IAM policy with administrator access and attach it to the IAM user.
E. Create an IAM policy with Amazon RDS access and attach it to the IAM user.
Question #: 430
Topic #: 1
A company is running a reporting web server application on Amazon EC2 instances. The application runs once every week and once again at the end of the month. The EC2 instances can be shut down when they are not in use.
What is the MOST cost-effective billing model for this use case?
A. Standard Reserved Instances
B. Convertible Reserved Instances
C. On-Demand Capacity Reservations
D. On-Demand Instances
Question #: 431
Topic #: 1
A company wants to discover, prepare, move, and integrate data from multiple sources for data analytics and machine learning.
Which AWS serverless data integration service should the company use to meet these requirements?
A. AWS Glue
B. AWS Data Exchange
C. Amazon Athena
D. Amazon EMR
Question #: 432
Topic #: 1
A company is moving its development and test environments to AWS to increase agility and reduce cost. Because these are not production workloads and the servers are not fully utilized, occasional unavailability is acceptable.
What is the MOST cost-effective Amazon EC2 pricing model that will meet these requirements?
A. Reserved Instances
B. On-Demand Instances
C. Spot Instances
D. Dedicated Hosts
Question #: 433
Topic #: 1
A company deploys its application on Amazon EC2 instances. The application occasionally experiences sudden increases in demand. The company wants to ensure that its application can respond to changes in demand at the lowest possible cost.
Which AWS service or concept will meet these requirements?
A. AWS Auto Scaling
B. AWS Compute Optimizer
C. AWS Cost Explorer
D. AWS Well-Architected Framework
Question #: 434
Topic #: 1
A company wants to organize its users so that the company can grant permissions to the users as a group.
Which AWS service or tool can the company use to meet this requirement?
A. Security groups
B. AWS Identity and Access Management (IAM)
C. Resource groups
D. AWS Security Hub
Question #: 435
Topic #: 1
A company wants to build an application that uses AWS Lambda to run Python code.
Under the AWS shared responsibility model, which tasks will be the company’s responsibility? (Choose two.)
A. Management of the underlying infrastructure.
B. Management of the operating system.
C. Writing the business logic code.
D. Installation of the computer language runtime.
E. Providing AWS Identity and Access Management (IAM) access to the Lambda service.
Question #: 436
Topic #: 1
A company needs to identify who accessed an AWS service and what action was performed for a given time period.
Which AWS service should the company use to meet this requirement?
A. Amazon CloudWatch
B. AWS CloudTrail
C. AWS Security Hub
D. Amazon Inspector
Question #: 437
Topic #: 1
A company wants to use a centralized AWS service to enforce compliance with the organizational business standards. The company wants to use an AWS service that can govern and control who can deploy, manage, and decommission AWS resources.
Which AWS service will meet these requirements?
A. Amazon CloudWatch
B. AWS Service Catalog
C. Amazon GuardDuty
D. AWS Security Hub
Question #: 438
Topic #: 1
What does “security of the cloud” refer to in the AWS shared responsibility model?
A. Availability of AWS services such as Amazon EC2
B. Security of the cloud infrastructure that runs all the AWS services
C. Implementation of password policies for IAM users
D. Security of customer environments by using AWS Network Firewall partners
Question #: 439
Topic #: 1
A company has an application that produces unstructured data continuously. The company needs to store the data so that the data is durable and easy to query.
Which AWS service can the company use to meet these requirements?
A. Amazon RDS
B. Amazon Aurora
C. Amazon QuickSight
D. Amazon DynamoDB
Question #: 440
Topic #: 1
Which options are AWS Cloud Adoption Framework (AWS CAF) perspectives? (Choose two.)
A. Cloud fluency
B. Security
C. Change acceleration
D. Architecture
E. Business
Question #: 441
Topic #: 1
A company wants to migrate a company’s on-premises container infrastructure to the AWS Cloud. The company wants to prevent unplanned administration and operation cost and adapt to a serverless architecture.
Which AWS service will meet these requirements?
A. Amazon Connect
B. AWS Fargate
C. Amazon Lightsail
D. Amazon EC2
Question #: 442
Topic #: 1
A company wants its Amazon EC2 instances to be in different locations but share the same geographic area. The company also wants to use multiple power grids and independent networking connectivity for the EC2 instances.
Which solution meets these requirements?
A. Use EC2 instances in multiple edge locations in the same AWS Region.
B. Use EC2 instances in multiple Availability Zones in the same AWS Region.
C. Use EC2 instances in multiple Amazon Connect locations in the same AWS Region.
D. Use EC2 instances in multiple AWS Artifact locations in the same AWS Region.
Question #: 443
Topic #: 1
An ecommerce company has deployed a new web application on Amazon EC2 instances. The company wants to distribute incoming HTTP traffic evenly across all running instances.
Which AWS service or resource will meet this requirement?
A. Amazon EC2 Auto Scaling
B. Application Load Balancer
C. Gateway Load Balancer
D. Network Load Balancer
Question #: 444
Topic #: 1
Which AWS service or feature gives users the ability to connect VPCs and on-premises networks to a central hub?
A. Virtual private gateway
B. AWS Transit Gateway
C. Internet gateway
D. Customer gateway
Question #: 445
Topic #: 1
A company wants to run CPU-intensive workload across multiple Amazon EC2 instances.
Which EC2 instance type should the company use to meet this requirement?
A. General purpose instances
B. Compute optimized instances
C. Memory optimized instances
D. Storage optimized instances
Question #: 446
Topic #: 1
A company is connecting multiple VPCs and on-premises networks. The company needs to use an AWS service as a cloud router to simplify peering relationships.
Which AWS service can the company use to meet this requirement?
A. AWS Direct Connect
B. AWS Transit Gateway
C. Amazon Connect
D. Amazon Route 53
Question #: 447
Topic #: 1
A company stores a large amount of data that auditors access only twice each year.
Which Amazon S3 storage class should the company use to store the data with the LOWEST cost?
A. Amazon S3 Outposts
B. Amazon S3 Glacier Instant Retrieval
C. Amazon S3 Standard
D. Amazon S3 Intelligent-Tiering
Question #: 448
Topic #: 1
Which action should a company take to improve security in its AWS account?
A. Require multi-factor authentication (MFA) for privileged users.
B. Remove the root user account.
C. Create an access key for the AWS account root user.
D. Create an access key for each privileged user.
Question #: 449
Topic #: 1
Which of the following are ways to improve security on AWS? (Choose two.)
A. Using AWS Artifact
B. Granting the broadest permissions to all IAM roles
C. Running application code with AWS Cloud
D. Enabling multi-factor authentication (MFA) with Amazon Cognito
E. Using AWS Trusted Advisor security checks
Question #: 450
Topic #: 1
Which AWS service can a company use to manage encryption keys in the cloud?
A. AWS License Manager
B. AWS Certificate Manager (ACM)
C. AWS CloudHSM
D. AWS Directory Service
Question #: 451
Topic #: 1
A company wants to store its files in the AWS Cloud. Users need to be able to download these files directly using a public URL.
Which AWS service or feature will meet this requirement?
A. Amazon Redshift
B. Amazon Elastic Block Store (Amazon EBS)
C. Amazon Elastic File System (Amazon EFS)
D. Amazon S3
Question #: 452
Topic #: 1
A company is using AWS for all its IT infrastructure. The company’s developers are allowed to deploy applications on their own. The developers want to deploy their applications without having to provision the infrastructure themselves.
Which AWS service should the developers use to meet these requirements?
A. AWS CloudFormation
B. AWS CodeBuild
C. AWS Elastic Beanstalk
D. AWS CodeDeploy
Question #: 453
Topic #: 1
A company wants to gain insights from its data and build interactive data visualization dashboards.
Which AWS service will meet these requirements?
A. Amazon SageMaker
B. Amazon Rekognition
C. Amazon QuickSight
D. Amazon Kinesis
Question #: 454
Topic #: 1
A cloud engineer wants to store data in Amazon S3. The engineer will access some of the data yearly and some of the data daily.
Which S3 storage class will meet these requirements MOST cost-effectively?
A. S3 Standard
B. S3 Glacier Deep Archive
C. S3 One Zone-Infrequent Access (S3 One Zone-IA)
D. S3 Intelligent-Tiering
Question #: 455
Topic #: 1
Which of the following are economic benefits of using the AWS Cloud? (Choose two.)
A. Consumption-based pricing
B. Perpetual licenses
C. Economies of scale
D. AWS Enterprise Support at no additional cost
E. Bring-your-own-hardware model
Question #: 456
Topic #: 1
A user is moving a workload from a local data center to an architecture that is distributed between the local data center and the AWS Cloud.
Which type of migration is this?
A. On-premises to cloud native
B. Hybrid to cloud native
C. On-premises to hybrid
D. Cloud native to hybrid
Question #: 457
Topic #: 1
A company needs to store infrequently used data for data archives and long-term backups.
Which AWS service or storage class will meet these requirements MOST cost-effectively?
A. Amazon FSx for Lustre
B. Amazon Elastic Block Store (Amazon EBS)
C. Amazon Elastic File System (Amazon EFS)
D. Amazon S3 Glacier Flexible Retrieval
Question #: 458
Topic #: 1
Which AWS service provides users with AWS issued reports, certifications, accreditations, and third-party attestations?
A. AWS Artifact
B. AWS Trusted Advisor
C. AWS Health Dashboard
D. AWS Config
Question #: 459
Topic #: 1
A company needs to create and publish interactive business intelligence dashboards. The dashboards require insights that are powered by machine learning.
Which AWS service or tool will meet these requirements?
A. AWS Glue Studio
B. Amazon QuickSight
C. Amazon Redshift
D. Amazon Athena
Question #: 460
Topic #: 1
A company wants to use AWS. The company has stringent requirements about low-latency access to on-premises systems and data residency.
Which AWS service should the company use to design a solution that meets these requirements?
A. AWS Wavelength
B. AWS Transit Gateway
C. AWS Ground Station
D. AWS Outposts
Question #: 461
Topic #: 1
A company runs an on-premises contact center for customers. The company needs to migrate to a cloud-based solution that can deliver artificial intelligence features to improve user experience.
Which AWS service will meet these requirements?
A. AWS Wavelength
B. AWS IAM Identity Center (AWS Single Sign-On)
C. AWS Direct Connect
D. Amazon Connect
Question #: 462
Topic #: 1
A company needs the ability to acquire resources when the resources are needed. The company also needs the ability to release the resources when the resources are no longer needed.
Which AWS concept represents the company’s goals?
A. Scalability
B. Sustainability
C. Elasticity
D. Operational excellence
Question #: 463
Topic #: 1
A company wants to use Amazon EC2 instances for a stable production workload that will run for 1 year.
Which instance purchasing option meets these requirements MOST cost-effectively?
A. Dedicated Hosts
B. Reserved Instances
C. On-Demand Instances
D. Spot Instances
Question #: 464
Topic #: 1
A company wants to log in securely to Linux Amazon EC2 instances.
How can the company accomplish this goal?
A. Use SSH keys.
B. Use a VPN.
C. Use end-to-end encryption.
D. Use Amazon Route 53.
Question #: 465
Topic #: 1
A company wants to use a serverless compute service for an application.
Which AWS service will meet this requirement?
A. AWS Lambda
B. AWS CloudFormation
C. AWS Elastic Beanstalk
D. Elastic Load Balancing
Question #: 466
Topic #: 1
A company wants a solution that will automatically adjust the number of Amazon EC2 instances that are being used based on the current load.
Which AWS offering will meet these requirements?
A. Dedicated Hosts
B. Placement groups
C. Auto Scaling groups
D. Reserved Instances
Question #: 467
Topic #: 1
A company is building AWS architecture to deliver real-time data feeds from an on-premises data center into an application that runs on AWS. The company needs a consistent network connection with minimal latency.
What should the company use to connect the application and the data center to meet these requirements?
A. AWS Direct Connect
B. Public internet
C. AWS VPN
D. Amazon Connect
Question #: 468
Topic #: 1
A company plans to migrate its custom marketing application and order-processing application to AWS. The company needs to deploy the applications on different types of instances with various configurations of CPU, memory, storage, and networking capacity.
Which AWS service should the company use to meet these requirements?
A. AWS Lambda
B. Amazon Cognito
C. Amazon Athena
D. Amazon EC2
Question #: 469
Topic #: 1
A company wants to monitor and block malicious HTTP and HTTPS requests that its Amazon CloudFront distributions receive.
Which AWS service should the company use to meet these requirements?
A. Amazon GuardDuty
B. Amazon Inspector
C. AWS WAF
D. Amazon Detective
Question #: 470
Topic #: 1
Which AWS services can host PostgreSQL databases? (Choose two.)
A. Amazon S3
B. Amazon Aurora
C. Amazon EC2
D. Amazon OpenSearch Service
E. Amazon Elastic File System (Amazon EFS)
Question #: 471
Topic #: 1
Which AWS service can generate information that can be used by external auditors?
A. Amazon Cognito
B. Amazon FSx
C. AWS Config
D. Amazon Inspector
Question #: 472
Topic #: 1
Which AWS service or feature requires an internet service provider (ISP) and a colocation facility to be implemented?
A. AWS VPN
B. Amazon Connect
C. AWS Direct Connect
D. Internet gateway
Question #: 473
Topic #: 1
A company wants its Amazon EC2 instances to operate in a highly available environment, even if there is a natural disaster in a particular geographic area.
Which solution achieves this goal?
A. Use EC2 instances in multiple AWS Regions.
B. Use EC2 instances in multiple edge locations.
C. Use EC2 instances in the same Availability Zone but in different AWS Regions.
D. Use Amazon CloudFront with the EC2 instances configured as the source.
Question #: 474
Topic #: 1
Which AWS service allows for file sharing between multiple Amazon EC2 instances?
A. AWS Direct Connect
B. AWS Snowball Edge
C. AWS Backup
D. Amazon Elastic File System (Amazon EFS)
Question #: 475
Topic #: 1
A company needs to manage multiple logins across AWS accounts within the same organization in AWS Organizations.
Which AWS service should the company use to meet this requirement?
A. Amazon VPC
B. Amazon GuardDuty
C. Amazon Cognito
D. AWS IAM Identity Center
Question #: 476
Topic #: 1
A company uses Amazon WorkSpaces.
Which task is the responsibility of AWS, according to the AWS shared responsibility model?
A. Set up multi-factor authentication (MFA) for each WorkSpaces user account.
B. Ensure the environmental safety and security of the AWS infrastructure that hosts WorkSpaces.
C. Provide security for WorkSpaces user accounts through AWS Identity and Access Management (IAM).
D. Configure AWS CloudTrail to log API calls and user activity.
Question #: 477
Topic #: 1
A company is migrating its public website to AWS. The company wants to host the domain name for the website on AWS.
Which AWS service should the company use to meet this requirement?
A. AWS Lambda
B. Amazon Route 53
C. Amazon CloudFront
D. AWS Direct Connect
Question #: 478
Topic #: 1
A company uses a third-party identity provider (IdP). The company wants to provide its employees with access to AWS accounts and services without requiring another set of login credentials.
Which AWS service will meet this requirement?
A. AWS Directory Service
B. Amazon Cognito
C. AWS IAM Identity Center
D. AWS Resource Access Manager (AWS RAM)
Question #: 479
Topic #: 1
Which combination of AWS services can be used to move a commercial relational database to an Amazon-managed open-source database? (Choose two.)
A. AWS Database Migration Service (AWS DMS)
B. AWS software development kits (SDKs)
C. AWS Schema Conversion Tool
D. AWS Systems Manager
E. Amazon EMR
Question #: 480
Topic #: 1
Which AWS service gives users on-demand, self-service access to AWS compliance control reports?
A. AWS Config
B. Amazon GuardDuty
C. AWS Trusted Advisor
D. AWS Artifact
