Free CLF-C02 sample questions

Correct answer: True

This statement is true. AWS Cost Explorer is a tool for visualizing, understanding, and managing your AWS costs and usage over time. However, the service used to set up alerts for spending thresholds is AWS Budgets. AWS Budgets allows you to set custom budgets that alert you when your costs or usage exceed (or are forecasted to exceed) your budgeted amount.

Correct answers: Amazon EC2; Spot Instances

For a workload that is massive, parallelizable, and fault-tolerant (can be stopped and restarted), the combination of Amazon EC2 and Spot Instances is the most cost-effective. Amazon EC2 provides the raw compute power. Spot Instances offer up to a 90% discount on On-Demand prices by leveraging unused EC2 capacity. Since the workload can be interrupted, the risk of a Spot Instance being reclaimed is acceptable in exchange for the huge cost savings. Reserved Instances are for long-term, steady-state workloads. AWS Lambda has execution time and payload limits that would make it unsuitable for a 100 TB dataset processing in this manner.

Correct answer: Operational Excellence

The Operational Excellence pillar focuses on running and monitoring systems to deliver business value and continually improving processes and procedures. Key topics include automating changes, responding to events, and defining standards to manage daily operations. Reliability is about recovering from failures, Performance Efficiency is about using resources efficiently, and Security is about protecting information and systems.

Correct answer: Amazon CloudFront

Amazon CloudFront is a content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency and high transfer speeds. It does this by caching content in a worldwide network of edge locations. This is the ideal service for distributing game assets to a global user base. AWS Direct Connect is for private network connections, S3 Transfer Acceleration is for fast uploads to S3, and Elastic Load Balancing distributes traffic to backend servers within a region.

Correct answer: Create an IAM role with the necessary DynamoDB permissions and attach it to the EC2 instance.

The most secure and recommended method is to use an IAM role. An IAM role can be attached to an EC2 instance, which grants the applications on that instance temporary security credentials to access other AWS services. This avoids the need to store long-term credentials (like access keys) on the instance, which is a major security risk. The EC2 instance automatically rotates the temporary credentials provided by the role.

Correct answer: Pay-as-you-go

The AWS Cloud pricing model is fundamentally pay-as-you-go. This means you pay only for the individual services you need, for as long as you use them, without requiring long-term contracts or complex licensing. This allows businesses to trade capital expense (CapEx) for variable expense (OpEx).

Correct answer: To increase the high availability and fault tolerance of the application.

Availability Zones (AZs) are distinct locations within an AWS Region that are engineered to be isolated from failures in other AZs. By deploying an application across multiple AZs, it can remain operational even if one of the AZs fails, thus significantly increasing its availability and fault tolerance. Reducing global latency is achieved by using multiple Regions or Amazon CloudFront. Data sovereignty is handled at the Region level.

Correct answer: AWS Direct Connect

AWS Direct Connect is a cloud service solution that makes it easy to establish a dedicated network connection from an on-premises location to AWS. This provides a more consistent network experience than internet-based connections, offering private connectivity and high bandwidth, which are critical for sensitive workloads like an EHR system. A Site-to-Site VPN connects over the public internet, which may not meet the performance or security requirements. VPC Peering connects two VPCs, and a NAT Gateway provides outbound internet access from a private subnet.

Correct answer: AWS CloudFormation

AWS CloudFormation provides a common language to model and provision all the infrastructure resources in your cloud environment. It allows you to use a simple text file (in YAML or JSON format) to model and provision, in an automated and secure manner, all the resources needed for your applications across all regions and accounts. This practice is known as Infrastructure as Code (IaC).

Correct answer: AWS Organizations with consolidated billing enabled

AWS Organizations allows you to centrally govern your environment as you grow and scale your AWS resources. One of its key features is consolidated billing, which combines the usage from all member accounts into a single bill for the management account. This allows the organization to benefit from volume pricing discounts and Reserved Instance sharing across accounts.