Sample Questions For Amazon CLF c02 Exam by Crosby
Sample Questions For Amazon CLF c02 Exam by Crosby
Sample Questions For Amazon CLF c02 Exam by Crosby
A company wants an AWS service to collect and process 10 TB of data locally and transfer the data to AWS. The company has
intermittent connectivity.
Options:
A- AWS Database Migration Service (AWS DMS)
B- AWS DataSync
C- AWS Backup
Answer:
D
Explanation:
The correct answer is D. AWS Snowball Edge.
AWS Snowball Edge is a physical device that can be used to collect and process data locally and then transfer it to AWS. It is designed
for situations where there is limited or intermittent network connectivity, or where bandwidth costs are high. AWS Snowball Edge can
store up to 80 TB of data and has compute and storage capabilities to run applications on the device1.
AWS Database Migration Service (AWS DMS) is a service that helps migrate databases to AWS. It does not collect or process data
locally, nor does it work offline2.
AWS DataSync is a service that helps transfer data between on-premises storage systems and AWS storage services. It does not
collect or process data locally, and it requires a network connection to work3.
AWS Backup is a service that helps automate and manage backups across AWS services. It does not collect or process data locally, nor
does it transfer data to AWS. It only backs up data that is already in AWS4.
References:
Question 2
Question Type: MultipleChoice
A company wants to run its application on Amazon EC2 instances. The company needs to keep the application on-premises to meet a
compliance requirement. Which AWS offering will meet these requirements?
Options:
A- Dedicated Instances
B- Amazon CloudFront
C- AWS Fargate
D- AWS Outposts
Answer:
D
Explanation:
AWS Outposts is an AWS offering that brings AWS infrastructure and services to a customer's on-premises location. It allows companies
to run AWS services locally while meeting any regulatory or compliance requirements to keep data or applications on-premises.
Dedicated Instances are EC2 instances that run on hardware dedicated to a single customer but are still within AWS data centers.
Amazon CloudFront is a CDN service, and AWS Fargate is a serverless compute engine for containers, neither of which meets the
requirement for running an application on-premises. References:
AWS Outposts
Question 3
Question Type: MultipleChoice
A company is planning to migrate applications to the AWS Cloud. During a system audit, the company finds that its content management
system (CMS) application is incompatible with cloud environments.
Which migration strategies will help the company to migrate the CMS application with the LEAST effort? (Select TWO.)
Options:
A- Retire
B- Rehost
C- Repurchase
D- Replatform
E- Refactor
Answer:
B, C
Explanation:
Rehosting ('lift and shift') is a migration strategy where applications are moved to the cloud with minimal changes, making it the least
effort-intensive method for applications incompatible with the cloud. Repurchasing involves moving to a different product, often a SaaS
solution, which can also minimize migration effort by avoiding the need for application-level changes. Retiring, replatforming, and
refactoring require significant effort either in terms of analyzing and shutting down the application, making changes to the underlying
platform, or redesigning the application architecture, respectively. References:
Question 4
Question Type: MultipleChoice
Under the AWS shared responsibility model, which of the following is a responsibility of the customer?
Options:
A- Shred disk drives before they leave a data center.
B- Prevent customers from gathering packets or collecting traffic at the hypervisor level.
C- Patch the guest operating system with the latest security patches.
D- Maintain security systems that provide physical monitoring of data centers.
Answer:
C
Explanation:
Under the AWS shared responsibility model, AWS is responsible for the security 'of' the cloud, which includes the physical infrastructure,
networking, and hypervisor layer. The customer, however, is responsible for security 'in' the cloud, which includes managing the security
of their data, patching and maintaining their guest operating system and applications, and managing identity and access. The
responsibilities of shredding disk drives, preventing packet capture at the hypervisor level, and physical monitoring are handled by AWS
as part of its responsibility for security 'of' the cloud.
Question 5
Question Type: MultipleChoice
A company is building a new application on AWS. The company needs the application to remain available if an individual application
component fails.
Which design principle should the company use to meet this requirement?
Options:
A- Disposable resources
B- Automation
C- Rightsizing
D- Loose coupling
Answer:
D
Explanation:
Loose coupling is a design principle that involves reducing dependencies between application components so that they can operate
independently. This approach ensures that the failure of one component does not affect the availability of the others, thereby improving
the application's fault tolerance and resilience. Disposable resources, automation, and rightsizing are valuable principles in cloud
architecture, but they do not directly address the requirement of remaining available despite the failure of an individual component like
loose coupling does. References:
Options:
A- Configure an S3 Lifecycle policy.
B- Activate S3 Versioning.
Answer:
D
Explanation:
According to the AWS Shared Responsibility Model, AWS is responsible for protecting the infrastructure that runs all of the services
offered in the AWS Cloud, including Amazon S3. This infrastructure includes hardware, software, networking, and facilities that run AWS
services.
A . Configure an S3 Lifecycle policy: Incorrect, as configuring S3 Lifecycle policies to manage object lifecycle (e.g., transitioning objects
to different storage classes or deleting them after a certain period) is the customer's responsibility.
B . Activate S3 Versioning: Incorrect, as enabling S3 Versioning is a customer responsibility for managing data protection.
C . Configure S3 bucket policies: Incorrect, as setting and managing S3 bucket policies to control access is the customer's responsibility.
Amazon S3
Question 7
Question Type: MultipleChoice
Which AWS Cloud design principle is a company using when the company implements AWS CloudTrail?
Options:
A- Activate traceability.
D- Go global in minutes.
Answer:
A
Explanation:
By implementing AWS CloudTrail, a company is adhering to the AWS Cloud design principle of activating traceability. AWS CloudTrail
provides detailed logs of all API calls made in an AWS account, which helps monitor, troubleshoot, and detect unusual activity, thereby
improving security and compliance. This supports the principle of 'activating traceability' by enabling continuous monitoring and auditing
of all actions and changes within the AWS environment.
B . Use serverless compute architectures: Incorrect, as this principle encourages the use of managed services that handle infrastructure,
such as AWS Lambda, and is not directly related to CloudTrail.
C . Perform operations as code: Incorrect, as this principle emphasizes the use of code and automation for infrastructure management.
D . Go global in minutes: Incorrect, as this principle relates to the global deployment of applications and services.
AWS Cloud References:
AWS CloudTrail
Question 8
Question Type: MultipleChoice
Which programming languages does AWS Cloud Development Kit (AWS CDK) currently support? (Select TWO.)
Options:
A- Python
B- Swift
C- TypeScript
D- Ruby
E- PHP
Answer:
A, C
Explanation:
The AWS Cloud Development Kit (AWS CDK) currently supports multiple programming languages, including Python and TypeScript.
These languages allow developers to define cloud infrastructure using familiar programming constructs. Python and TypeScript are
among the first languages supported by AWS CDK, which also supports Java, C#, and JavaScript. This enables developers to use their
existing programming skills and tools to define cloud infrastructure in code.
Question 9
Question Type: MultipleChoice
To assist companies with Payment Card Industry Data Security Standard (PCI DSS) compliance in the cloud. AWS provides:
Options:
A- physical inspections of data centers by appointment.
Answer:
C
Explanation:
AWS provides an Attestation of Compliance (AOC) report for specific AWS services to assist companies in achieving Payment Card
Industry Data Security Standard (PCI DSS) compliance in the cloud. This report demonstrates that AWS services meet the necessary
PCI DSS requirements. AWS does not offer physical inspections of data centers by appointment, nor does it provide certifications for
any application running on AWS. Additionally, AWS does not provide professional PCI compliance services; companies must manage
their PCI compliance in their environment.
To Get Premium Files for CLF-C02 Visit
https://www.p2pexams.com/products/clf-c02