Amazon

CLF-C02 Free Practice Questions — Page 5

Question 42

A company needs the ability to acquire resources when the resources are needed. The company also needs the ability to release the resources when the resources are no longer needed. Which AWS concept represents the company's goals?

A. Scalability
B. Sustainability
C. Elasticity
D. Operational excellence
Show Answer
Correct Answer: C
Explanation:
Elasticity is the AWS concept that describes acquiring resources when demand increases and releasing them when they are no longer needed. Scalability is the ability to handle increased workload by adding resources, but elasticity specifically emphasizes automatic provisioning and deprovisioning based on demand. Sustainability and operational excellence are unrelated to this resource lifecycle.

Question 43

A company needs to create and publish interactive business intelligence dashboards. The dashboards require insights that are powered by machine learning. Which AWS service or tool will meet these requirements?

A. AWS Glue Studio
B. Amazon QuickSight
C. Amazon Redshift
D. Amazon Athena
Show Answer
Correct Answer: B
Explanation:
Amazon QuickSight is AWS's business intelligence service for creating and publishing interactive dashboards. It includes built-in machine learning capabilities such as ML Insights, anomaly detection, forecasting, and natural language queries, meeting the requirement for ML-powered insights. AWS Glue Studio is for ETL, Amazon Redshift is a data warehouse, and Amazon Athena is a query service.

Question 44

Which action should a company take to improve security in its AWS account?

A. Require multi-factor authentication (MFA) for privileged users.
B. Remove the root user account.
C. Create an access key for the AWS account root user.
D. Create an access key for each privileged user.
Show Answer
Correct Answer: A
Explanation:
Requiring multi-factor authentication (MFA) for privileged users is an AWS security best practice because it adds a second factor of authentication, significantly reducing the risk of account compromise. The root user cannot be removed, creating root access keys is discouraged, and not every privileged user should necessarily have long-term access keys; temporary credentials via IAM roles are preferred.

Question 45

A company wants to organize its users so that the company can grant permissions to the users as a group. Which AWS service or tool can the company use to meet this requirement?

A. Security groups
B. AWS Identity and Access Management (IAM)
C. Resource groups
D. AWS Security Hub
Show Answer
Correct Answer: B
Explanation:
AWS Identity and Access Management (IAM) allows you to create users and groups, then assign permissions to those groups so permissions can be managed collectively. Security groups control network traffic, Resource Groups organize AWS resources rather than users, and Security Hub aggregates security findings.

Question 46

A company deploys its application on Amazon EC2 instances. The application occasionally experiences sudden increases in demand. The company wants to ensure that its application can respond to changes in demand at the lowest possible cost. Which AWS service or concept will meet these requirements?

A. AWS Auto Scaling
B. AWS Compute Optimizer
C. AWS Cost Explorer
D. AWS Well-Architected Framework
Show Answer
Correct Answer: A
Explanation:
AWS Auto Scaling automatically adjusts the number of Amazon EC2 instances in response to changes in demand, helping the application handle traffic spikes while minimizing costs by scaling in when demand decreases. The other options provide recommendations, cost analysis, or architectural guidance but do not automatically scale resources.

Question 47

A company's employees are working from home. The company wants its employees to use their personal devices to connect to a managed workstation in the AWS Cloud. Which AWS service should the company use to provide the remote environment?

A. Amazon Workspaces
B. AWS Cloud9
C. AWS Outposts
D. Amazon Lightsail
Show Answer
Correct Answer: A
Explanation:
Amazon WorkSpaces is AWS's fully managed Desktop-as-a-Service (DaaS), providing secure, managed virtual desktops in the AWS Cloud that users can access from personal devices. AWS Cloud9 is a cloud IDE, AWS Outposts extends AWS infrastructure on premises, and Amazon Lightsail provides simplified virtual servers, not managed remote desktops.

Question 48

Which benefit of the AWS Cloud helps companies achieve lower usage costs because of the aggregate usage of all AWS users?

A. No need to guess capacity
B. Ability to go global in minutes
C. Economies of scale
D. Increased speed and agility
Show Answer
Correct Answer: C
Explanation:
The AWS Cloud benefit that lowers usage costs due to the aggregate usage of all AWS customers is economies of scale. AWS operates infrastructure at massive scale, reducing per-unit costs and passing those savings on to customers.

Question 49

A company is planning to migrate a monolithic application to AWS. The company wants to modernize the application by splitting it into microservices. The company will deploy the microservices on AWS. Which migration strategy should the company use?

A. Rehost
B. Repurchase
C. Replatform
D. Refactor
Show Answer
Correct Answer: D
Explanation:
The correct migration strategy is Refactor (also called re-architect). Splitting a monolithic application into microservices requires significant architectural changes to modernize the application for the cloud. Rehost is lift-and-shift, Replatform makes limited optimizations without changing the core architecture, and Repurchase replaces the application with a different product/SaaS.

Question 50

Which AWS service can generate information that can be used by external auditors?

A. Amazon Cognito
B. Amazon FSx
C. AWS Config
D. Amazon Inspector
Show Answer
Correct Answer: C
Explanation:
AWS Config continuously records and evaluates the configuration of AWS resources, maintains configuration history, and provides compliance and configuration reports that can be used for auditing, including by external auditors. The other services serve different purposes: Amazon Cognito is for identity, Amazon FSx is managed file storage, and Amazon Inspector performs security vulnerability assessments rather than configuration auditing.

Question 51

A company needs to use Amazon S3 to store audio files that are each 5 megabytes in size. The company will rarely access the files, but the company must be able to retrieve the files immediately. Which S3 storage class will meet these requirements MOST cost-effectively?

A. S3 Standard
B. S3 Standard-Infrequent Access (S3 Standard-IA)
C. S3 Glacier Flexible Retrieval
D. S3 Glacier Deep Archive
Show Answer
Correct Answer: B
Explanation:
S3 Standard-IA is designed for data that is accessed infrequently but requires millisecond, immediate retrieval. S3 Glacier Flexible Retrieval and S3 Glacier Deep Archive are archival classes that require restore operations and do not provide immediate access. Although S3 Glacier Instant Retrieval exists for immediate retrieval, it is not one of the options. Therefore, S3 Standard-IA is the most cost-effective choice among the listed options.

$19

Get all 713 questions with detailed answers and explanations

  • Instant download HTML + PDF delivered the moment payment clears.
  • Secure Stripe checkout we never see or store your card details.
  • 7-day refund if files are defective see our refund policy.