CLF-C02: AWS Certified Cloud Practitioner

75%

Question 231

A company wants to migrate a small website and database quickly from on-premises infrastructure to the AWS Cloud. The company has limited operational knowledge to perform the migration.

Which AWS service supports this use case?
Amazon EC2
Amazon Lightsail
Amazon S3
AWS Lambda




Answer is Amazon Lightsail

Amazon Lightsail is a simplified and user-friendly service that allows users to quickly launch and manage virtual private servers (VPS) with pre-configured options for compute, storage, and networking. It provides an easy-to-use interface and offers pre-configured application stacks for various use cases, including website hosting and database management.

With Lightsail, the company can easily create an instance to host their website and database, and the service takes care of the underlying infrastructure, including networking, storage, and server management. It provides a streamlined migration process and offers a simplified experience for users who may not have extensive knowledge of AWS services.

Reference:
https://lightsail.aws.amazon.com/ls/docs/en_us/articles/amazon-lightsail-frequently-asked-questions-faq

Question 232

A user needs to quickly deploy a non-relational database on AWS. The user does not want to manage the underlying hardware or the database software.

Which AWS service can be used to accomplish this?
Amazon RDS
Amazon DynamoDB
Amazon Aurora
Amazon Redshift




Answer is Amazon DynamoDB

For quickly deploying a non-relational database on AWS without managing the underlying hardware or database software, the best choice is Amazon DynamoDB.

Amazon DynamoDB is a fully managed NoSQL database service that provides fast and predictable performance with seamless scalability. It is designed to handle large amounts of data with high read and write throughput, making it ideal for use cases such as gaming, ad tech, IoT, and mobile applications. With Amazon DynamoDB, the user doesn't have to worry about managing the underlying hardware or database software, as AWS takes care of the infrastructure and maintenance.

Reference:
https://docs.aws.amazon.com/amazondynamodb/latest/developerguide/SQLtoNoSQL.html

Question 233

A company has a social media platform in which users upload and share photos with other users. The company wants to identify and remove inappropriate photos. The company has no machine learning (ML) scientists and must build this detection capability with no ML expertise.

Which AWS service should the company use to build this capability?
Amazon SageMaker
Amazon Textract
Amazon Rekognition
Amazon Comprehend




Answer is Amazon Rekognition

Amazon Rekognition is a fully managed service that provides computer vision capabilities for analyzing images and videos. It offers pre-trained models for various tasks, including image moderation, which can be used to detect explicit or inappropriate content within images. With Amazon Rekognition, the company can easily integrate this capability into their social media platform without the need for ML expertise.

Reference:
https://aws.amazon.com/rekognition/

Question 234

Which AWS service helps developers use loose coupling and reliable messaging between microservices?
Elastic Load Balancing
Amazon Simple Notification Service (Amazon SNS)
Amazon CloudFront
Amazon Simple Queue Service (Amazon SQS)




Answer is Amazon Simple Queue Service (Amazon SQS)

Amazon SQS is a fully managed message queuing service that enables decoupling and asynchronous communication between microservices. It provides reliable message delivery and ensures that messages are processed in a scalable and fault-tolerant manner. By using SQS, developers can implement a publish-subscribe pattern or a message queue pattern to enable loosely coupled communication between microservices.

Elastic Load Balancing automatically distributes incoming application traffic; it doesn’t help with developer work in this context.

Amazon SNS is used for email and notifications to users, not for developers.

Amazon CloudFront is a content delivery network (CDN) service built for securely delivering content to customers. It is not used for loose coupling nor microservices.

Reference:
https://aws.amazon.com/sqs/#:~:text=Amazon%20SQS%20provides%20a%20simple%20and%20reliable%20way%20for%20customers%20to%20decouple%20and%20connect%20components%20(microservices)
%20together%20using%20queues.

Question 235

A company needs to build an application that uses AWS services. The application will be delivered to residents in European Counties. The company must abide by regional regulatory requirements.

Which AWS service or program should the company use to determine which AWS services meet the regional requirements?
AWS Audit Manager
AWS Shield
AWS Compliance Program
AWS Artifact




Answer is AWS Compliance Program

The AWS Compliance Program provides a framework for customers to navigate regulatory requirements by providing information on how AWS services and features can help address compliance needs. AWS compliance programs help customers meet compliance requirements for industry-specific standards, such as HIPAA, PCI DSS, and others.

In this scenario, the company needs to ensure that it meets regional regulatory requirements while building an application that uses AWS services. The AWS Compliance Program can help the company identify which AWS services and features can help meet regulatory requirements for European countries. The program provides resources such as whitepapers, reports, and certifications that can help organizations understand how AWS services can be used to support their compliance objectives.

Reference:
https://aws.amazon.com/compliance/programs/

Question 236

A company needs to implement identity management for a fleet of mobile apps that are running in the AWS Cloud.

Which AWS service will meet this requirement?
Amazon Cognito
AWS Security Hub
AWS Shield
AWS WAF




Answer is Amazon Cognito

Amazon Cognito is the AWS service that is specifically designed for identity management and user authentication in the context of mobile and web applications. It provides a comprehensive set of features for managing user identities, including user registration, sign-in, and access control.

With Amazon Cognito, you can easily add user authentication and authorization to your mobile apps running in the AWS Cloud. It supports various identity providers, such as social media platforms and enterprise identity systems, allowing your app users to sign in using their existing credentials. You can also create and manage user pools to handle user registration and sign-up flows.

Furthermore, Amazon Cognito provides features for handling user data synchronization across devices, enabling users to seamlessly access their data across multiple devices. It also integrates with other AWS services, such as AWS Lambda and Amazon API Gateway, to enable secure access to backend resources.

AWS Security Hub is a cloud security posture management service that automates best practice checks, aggregates alerts, and supports automated remediation. Not relevant.

AWS Shield and AWS WAF are for threat protection (Shield for DDoS, WAF for SQL injections), not relevant to the question.

Reference:
https://aws.amazon.com/cognito/details/

Question 237

A company deployed an application on an Amazon EC2 instance. The application ran as expected for 6 months in the past week, users have reported latency issues. A system administrator found that the CPU utilization was at 100% during business hours.
The company wants a scalable solution to meet demand.

Which AWS service or feature should the company use to handle the load for its application during periods of high demand?
Auto Scaling groups
AWS Global Accelerator
Amazon Route 53
An Elastic IP address




Answer is Auto Scaling groups

Auto Scaling groups in AWS allow you to automatically adjust the number of Amazon EC2 instances in your application fleet based on the incoming traffic and demand. It helps you maintain performance, availability, and cost-effectiveness by scaling the capacity up or down as needed. With Auto Scaling, you can set scaling policies based on various metrics such as CPU utilization, network traffic, or custom application metrics.

In this case, since the application is experiencing latency issues due to high CPU utilization, using Auto Scaling groups will allow the company to automatically add more instances to handle the increased demand and distribute the workload across multiple instances. This will help improve the application's performance and ensure it can handle the load during peak periods.

Reference:
https://docs.aws.amazon.com/autoscaling/ec2/userguide/auto-scaling-groups.html

Question 238

A company is generating large sets of critical data in its on-premises data center. The company needs to securely transfer the data to AWS for processing. These transfers must occur daily over a dedicated connection.

Which AWS service should the company use to meet these requirements?
AWS Backup
AWS DataSync
AWS Direct Connect
AWS Snowball




Answer is AWS Direct Connect

You are correct that AWS DataSync is a data transfer service that can be used to transfer large amounts of data to and from AWS. It can also be used to transfer data securely over the internet using encryption.

However, the question specifies that the transfers must occur daily over a dedicated connection. AWS DataSync does not provide a dedicated connection for data transfer. Instead, it uses the internet to transfer data. While the internet is a reliable and secure way to transfer data, it is not as fast and secure as a dedicated connection.

AWS Direct Connect, on the other hand, provides a dedicated private connection between an on-premises data center and AWS. With AWS Direct Connect, you can establish a private, high-speed, and secure connection to AWS, which is ideal for transferring large volumes of data securely and quickly.

AWS Backup is a fully managed backup service that centralizes and automates the backup of data across AWS services and on-premises applications.

AWS DataSync is a data transfer service that simplifies and automates moving data between on-premises storage and AWS services.

AWS Snowball is a petabyte-scale data transport solution that uses devices designed to be secure to transfer large amounts of data into and out of AWS.

Reference:
https://docs.aws.amazon.com/datasync/latest/userguide/datasync-in-vpc.html

Question 239

Which of the following is a managed AWS service that is used specifically for extract, transform, and load (ETL) data?
Amazon Athena
AWS Glue
Amazon S3
AWS Snowball Edge




Answer is AWS Glue

AWS Glue is a fully managed extract, transform, and load (ETL) service that makes it easy to prepare and load data for analytics. It provides capabilities for discovering, cataloging, cleaning, and transforming data, making it ready for analysis. With AWS Glue, you can create and manage data transformation workflows, and it integrates well with other AWS services for data storage, such as Amazon S3 and Amazon Redshift.

AWS Glue is also serverless, but more of an ecosystem of tools to allow you to easily do schema discovery and ETL with auto-generated scripts that can be modified either visually or via editing the script. The most commonly known components of Glue are Glue Metastore and Glue ETL. Glue Metastore is a serverless hive compatible metastore which can be used in lieu of your own managed Hive. Glue ETL on the other hand is a Spark service which allows customers to run Spark jobs without worrying about the configuration, manageability and operationalization of the underlying Spark infrastructure. There are other services such as Glue Data Wrangler which we will keep outside the scope of this discussion.

Reference:
https://ahana.io/answers/the-differences-between-aws-athena-and-aws-glue-ahana/

Question 240

Which AWS service provides domain registration, DNS routing, and service health checks?
AWS Direct Connect
Amazon Route 53
Amazon CloudFront
Amazon API Gateway




Answer is Amazon Route 53

Amazon Route 53 is a scalable domain name system (DNS) web service that allows you to register and manage domain names, route traffic to AWS resources or other external endpoints, and perform health checks to monitor the availability of your resources. It provides reliable and cost-effective domain registration and DNS management, making it suitable for various use cases including website hosting, application routing, and global traffic management.

Reference:
https://aws.amazon.com/route53/faqs/

< Previous PageNext Page >

Quick access to all questions in this exam

Warning: file_get_contents(http://www.geoplugin.net/php.gp?ip=216.73.216.5): failed to open stream: HTTP request failed! HTTP/1.1 403 Forbidden in /home/passnexa/public_html/view/question.php on line 243