Amazon

CLF-C02 Free Practice Questions — Page 28

Question 272

Which feature of Amazon RDS provides the ability to automatically create a primary database instance and to synchronously replicate data to an instance in another Availability Zone?

A. Read replicas
B. Blue/green deployment
C. Multi-AZ deployment
D. Reserved Instances
Show Answer
Correct Answer: C
Explanation:
Amazon RDS Multi-AZ deployment automatically provisions a primary DB instance and synchronously replicates data to a standby instance in a different Availability Zone, providing high availability and failover. Read replicas are asynchronous, blue/green deployments are for updates, and Reserved Instances are a pricing option.

Question 273

A company is moving some of its on-premises IT services to the AWS Cloud. The finance department wants to see the entire bill so it can forecast spending limits. Which AWS service can the company use to set spending limits and receive notifications if those limits are exceeded?

A. AWS Cost and Usage Reports
B. AWS Budgets
C. AWS Organizations consolidated billing
D. Cost Explorer
Show Answer
Correct Answer: B
Explanation:
AWS Budgets allows organizations to define spending limits, forecast costs, and set alerts that notify users when budget thresholds are approached or exceeded, which directly meets the finance department’s requirements.

Question 274

Which AWS service or feature gives users the ability to connect VPCs and on-premises networks to a central hub?

A. Virtual private gateway
B. AWS Transit Gateway
C. Internet gateway
D. Customer gateway
Show Answer
Correct Answer: B
Explanation:
AWS Transit Gateway is designed to act as a central hub that enables hub-and-spoke connectivity between multiple VPCs and on-premises networks. It provides scalable, transitive routing, simplifying network architectures compared to point-to-point VPNs or peering. The other options serve specific roles (virtual private gateway, customer gateway, internet gateway) but do not provide centralized hub connectivity.

Question 275

A company will run a predictable compute workload on Amazon EC2 instances for the next 3 years. The workload is critical for the company. The company wants to optimize costs to run the workload. Which solution will meet these requirements?

A. Spot Instances
B. Dedicated Hosts
C. Savings Plans
D. On-Demand Instances
Show Answer
Correct Answer: C
Explanation:
The workload is predictable, long-term (3 years), and critical, so it should not rely on interruption-prone capacity. Spot Instances are unsuitable, and On-Demand is the most expensive option. Dedicated Hosts are typically used for licensing or compliance needs, not cost optimization. Savings Plans provide significant discounts (up to ~66%) over On-Demand pricing for a 1- or 3-year commitment while still guaranteeing availability, making them the most cost-effective solution for a predictable, critical workload.

Question 276

A company is using AWS for all its IT infrastructure. The company's developers are allowed to deploy applications on their own. The developers want to deploy their applications without having to provision the infrastructure themselves. Which AWS service should the developers use to meet these requirements?

A. AWS CloudFormation
B. AWS CodeBuild
C. AWS Elastic Beanstalk
D. AWS CodeDeploy
Show Answer
Correct Answer: C
Explanation:
The requirement is for developers to deploy applications without provisioning or managing the underlying infrastructure. AWS Elastic Beanstalk is a Platform as a Service (PaaS) that automatically handles infrastructure provisioning, capacity, load balancing, scaling, and application deployment. CloudFormation requires defining infrastructure, CodeBuild is for build automation, and CodeDeploy handles deployment but still requires infrastructure to exist. Therefore, Elastic Beanstalk best meets the requirement.

Question 277

Which AWS Support plan provides the full set of AWS Trusted Advisor checks at the LOWEST cost?

A. AWS Developer Support
B. AWS Business Support
C. AWS Enterprise On-Ramp Support
D. AWS Enterprise Support
Show Answer
Correct Answer: B
Explanation:
AWS Business Support is the lowest-cost support plan that provides the full set of AWS Trusted Advisor checks. The Developer Support plan only includes a limited subset of checks, while Enterprise On-Ramp and Enterprise Support also include the full set but are more expensive. Therefore, Business Support meets the requirement at the lowest cost.

Question 278

A company is requesting Payment Card Industry (PCI) reports that validate the operating effectiveness of AWS security controls. How should the company obtain these reports?

A. Contact AWS Support.
B. Download reports from AWS Artifact.
C. Download reports from AWS Security Hub.
D. Contact an AWS technical account manager (TAM).
Show Answer
Correct Answer: B
Explanation:
AWS Artifact provides on-demand access to AWS compliance reports, including PCI DSS reports that validate the design and operating effectiveness of AWS security controls. These reports are specifically intended for customer audit and compliance needs, unlike AWS Support, TAMs, or Security Hub.

Question 279

A company has batch workloads that need to run for short periods of time on Amazon EC2. The workloads can handle interruptions and can start again from where they ended. What is the MOST cost-effective EC2 instance purchasing option to meet these requirements?

A. Reserved Instances
B. Spot Instances
C. Dedicated Instances
D. On-Demand Instances
Show Answer
Correct Answer: B
Explanation:
Batch workloads that run for short periods and can tolerate interruptions are ideal for Spot Instances. Spot Instances provide the lowest cost EC2 capacity and can be interrupted, with workloads resuming later, matching the stated requirements. Reserved, Dedicated, and On-Demand Instances are more expensive and unnecessary for interruptible batch jobs.

Question 280

Which of the following are ways to improve security on AWS? (Choose two.)

A. Using AWS Artifact
B. Granting the broadest permissions to all IAM roles
C. Running application code with AWS Cloud
D. Enabling multi-factor authentication (MFA) with Amazon Cognito
E. Using AWS Trusted Advisor security checks
Show Answer
Correct Answer: D, E
Explanation:
D is correct because enabling MFA adds an additional authentication factor, significantly reducing the risk of unauthorized access; Amazon Cognito supports MFA for user identity management. E is correct because AWS Trusted Advisor security checks identify misconfigurations and security risks, helping improve the overall security posture. The other options do not directly improve security or represent poor practices.

Question 281

Which AWS Support plans provide access to an AWS technical account manager (TAM)? (Choose two.)

A. AWS Basic Support
B. AWS Developer Support
C. AWS Business Support
D. AWS Enterprise On-Ramp Support
E. AWS Enterprise Support
Show Answer
Correct Answer: D, E
Explanation:
AWS provides a Technical Account Manager (TAM) only with its enterprise-level support plans. AWS Enterprise Support includes a designated TAM, and AWS Enterprise On-Ramp Support provides access to a pool of TAMs. AWS Business Support does not include a TAM (it offers a Concierge service instead), and Basic and Developer plans do not provide TAM access.

$19

Get all 715 questions with detailed answers and explanations

  • Instant download HTML + PDF delivered the moment payment clears.
  • Secure Stripe checkout we never see or store your card details.
  • 7-day refund if files are defective see our refund policy.