CLF-C02: AWS Certified Cloud Practitioner

63%

Question 191

What are some advantages of using Amazon EC2 instances to host applications in the AWS Cloud instead of on premises? (Choose two.)
EC2 includes operating system patch management.
EC2 integrates with Amazon VPC, AWS CloudTrail, and AWS Identity and Access Management (IAM).
EC2 has a 100% service level agreement (SLA).
EC2 has a flexible, pay-as-you-go pricing model.
EC2 has automatic storage cost optimization.




Answers are;
B. EC2 integrates with Amazon VPC, AWS CloudTrail, and AWS Identity and Access Management (IAM).
D. EC2 has a flexible, pay-as-you-go pricing model. EC2 integrates with Amazon VPC, AWS CloudTrail, and AWS Identity and Access Management (IAM).


EC2 doesn't have any storage cost optimization options, only S3 has.

Reference:
https://aws.amazon.com/s3/cost-optimization/

Question 192

Which AWS service will help protect applications running on AWS from DDoS attacks?
Amazon GuardDuty
AWS WAF
AWS Shield
Amazon Inspector




Answer is AWS Shield

AWS Shield is a managed Distributed Denial of Service (DDoS) protection service that safeguards applications running on AWS.

Reference:
https://aws.amazon.com/shield/?nc1=h_ls&whats-new-cards.sort-by=item.additionalFields.postDateTime&whats-new-cards.sort-order=desc

Question 193

Which AWS service or feature acts as a firewall for Amazon EC2 instances?
Network ACL
Elastic network interface
Amazon VPC
Security group




Answer is Security group

A security group is a virtual firewall that controls inbound and outbound traffic for an Amazon EC2 instance.

Reference:
https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2-security-groups.html

Question 194

A company that has multiple business units wants to centrally manage and govern its AWS Cloud environments. The company wants to automate the creation of AWS accounts, apply service control policies (SCPs), and simplify billing processes.

Which AWS service or tool should the company use to meet these requirements?
AWS Organizations
Cost Explorer
AWS Budgets
AWS Trusted Advisor




Answer is AWS Organizations

1. centrally manage and govern its AWS Cloud environment
2 . automate the creation of AWS accounts
3. apply service control policies (SCPs)
4. simplify billing processes.

Question 195

A company is launching an application in the AWS Cloud. The application will use Amazon S3 storage. A large team of researchers will have shared access to the data. The company must be able to recover data that is accidentally overwritten or deleted.

Which S3 feature should the company turn on to meet this requirement?
Server access logging
S3 Versioning
S3 Lifecycle rules
Encryption in transit and at rest




Answer is S3 Versioning

Reference:
https://docs.aws.amazon.com/AmazonS3/latest/userguide/Versioning.html

Question 196

Which AWS service uses edge locations?
Amazon Aurora
AWS Global Accelerator
Amazon Connect
AWS Outposts




Answer is AWS Global Accelerator

AWS Global Accelerator and Amazon CloudFront are separate services that use the AWS global network and its edge locations around the world.

AWS Global Accelerator allows you to route requests for key resources through Amazon’s global network—even if the request is going halfway round the world. The request is initially routed to the closest edge location and then travels through Amazon’s network—often with lower latency and higher throughput than the public internet.

AWS Global Accelerator helps bridge the gap between single and multiple Region deployments by improving the network routing for local and global user traffic. If traffic to your application’s single Region is left on the public internet, it can be negatively impacted by internet congestion and local outages. Using Global Accelerator, your users' traffic is moved off the internet and onto Amazon’s private global network through 90+ global edge locations, then directed to your application origins. AWS Global Accelerator is quick to setup and increases traffic performance by up to 60%.

Reference:
https://www.lastweekinaws.com/blog/what-is-an-edge-location-in-aws-a-simple-explanation/

Question 197

A company needs to install an application in a Docker container.

Which AWS service eliminates the need to provision and manage the container hosts?
AWS Fargate
Amazon FSx for Windows File Server
Amazon Elastic Container Service (Amazon ECS)
Amazon EC2




Answer is AWS Fargate

ECS : service to build and run Docker containers Optimize your time with AWS Fargate serverless compute for containers, which eliminates the need to configure and manage control plane, nodes, and instances.

Fargate : Serverless version for ECS/EKS. Running ECS or EKS without managing the infrastructure hosting your containers Deploy and manage your applications, not infrastructure. Fargate removes the operational overhead of scaling, patching, securing, and managing servers.

Reference:
https://aws.amazon.com/fargate/
https://aws.amazon.com/ecs/

Question 198

Which AWS service or feature checks access policies and offers actionable recommendations to help users set secure and functional policies?
AWS Systems Manager
AWS IAM Access Analyzer
AWS Trusted Advisor
Amazon GuardDuty



Question 199

A company has a fleet of cargo ships. The cargo ships have sensors that collect data at sea, where there is intermittent or no internet connectivity. The company needs to collect, format, and process the data at sea and move the data to AWS later.

Which AWS service should the company use to meet these requirements?
AWS IoT Core
Amazon Lightsail
AWS Storage Gateway
AWS Snowball Edge




Answer is AWS Snowball Edge

AWS Snow Family - The AWS Snow Family is a collection of physical devices that help migrate large amounts of data into and out of the cloud without depending on networks. This helps you apply the wide variety of AWS services for analytics, file systems, and archives to your data. You can use AWS Snow Family services for data transfer and occasional pre-processing on location. Some large data transfer examples include cloud migration, disaster recovery, data center relocation, and/or remote data collection projects. These projects typically require you to migrate large amounts of data in the shortest, and most cost-effective, amount of time.

Reference:
Cargo ship use case https://youtu.be/bxSD1Nha2k8?t=46
https://aws.amazon.com/snowball/

Question 200

A retail company needs to build a highly available architecture for a new ecommerce platform. The company is using only AWS services that replicate data across multiple Availability Zones.

Which AWS services should the company use to meet this requirement? (Choose two.)
Amazon EC2
Amazon Elastic Block Store (Amazon EBS)
Amazon Aurora
Amazon DynamoDB
Amazon Redshift




Answers are;
C. Amazon Aurora
D. Amazon DynamoDB


The question says company is using AWS services that replicate "DATA" across multiple AZs.
Both EC2 and EBS need to have manually triggered replication. Moreover, their purpose isn't DATA replication.
Natively only C & D allow DATA replication in multiple AZs.

< Previous PageNext Page >

Quick access to all questions in this exam

Warning: file_get_contents(http://www.geoplugin.net/php.gp?ip=216.73.216.5): failed to open stream: HTTP request failed! HTTP/1.1 403 Forbidden in /home/passnexa/public_html/view/question.php on line 243