AWS Certified Cloud Practitioner practice questions

1. Question 1 of 25

   Which option is an AWS Cloud Adoption Framework (AWS CAF) platform perspective capability?

   • AData architecture
   • BData protection
   • CData governance
   • DData science

   Show answer

   Correct answer: A

   How others answered

   • A79%
   • C20%

   Explanation

   Cloud Adoption Framework: 1) Business capabilities 1.1) Business 1.2) People 1.3) Governance (CORRECT ANSWER) 2) Technical capabilities 2.1) Platform 2.2) Security 2.3) Operations

   Adapted from community discussion by SvenSven · 2023-11-24 · 23 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

   Supporting references

   • AWS documentation
   • AWS documentation
   • AWS documentation
   • AWS documentation
   • AWS documentation

   View community discussion4

   Candidate context

   Question 1 discussion

   These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by CLF-C02 or CertExamHQ.

   1. S

      SvenSven

      2023-11-24

      23 upvotes

      Cloud Adoption Framework: 1) Business capabilities 1.1) Business 1.2) People 1.3) Governance (CORRECT ANSWER) 2) Technical capabilities 2.1) Platform 2.2) Security 2.3) Operations

   2. N

      Nozyra

      2023-12-26

      Selected A14 upvotes

      The correct answer is A, the clue is "Platform perspective capabilities" and only "Data Architecture" include in the list. ref: https://docs.aws.amazon.com/whitepapers/latest/overview-aws-cloud-adoption-framework/platform-perspective.html

   3. D

      Dreadn0ught

      2024-01-23

      13 upvotes

      It's being asked WHICH option "platform" perspective capability in the AWS Cloud Adoption Framework (AWS CAF). Under Platform Perspective there's only "Data Architecture" present of the four. https://docs.aws.amazon.com/pdfs/whitepapers/latest/overview-aws-cloud-adoption-framework/overview-aws-cloud-adoption-framework.pdf

   4. _

      _Bihari_

      2024-02-02

      Selected A9 upvotes

      A. Data architecture == Platform B. Data protection == Security C. Data governance == Governance D. Data science == Business

2. Question 2 of 25

   Which AWS tool gives users the ability to plan their service usage, service costs, and instance reservations, and also allows them to set custom alerts when their costs or usage exceed established thresholds?

   • ACost Explorer
   • BAWS Budgets
   • CAWS Cost and Usage Report
   • DReserved Instance reporting

   Show answer

   Correct answer: B

   How others answered

   • B100%

   Explanation

   A. Cost Explorer: Provides insights into AWS costs and usage, allowing users to analyze spending trends and breakdown costs by services, regions, and tags. B. AWS Budgets: Enables users to plan service usage, set custom cost and usage budgets, and receive alerts when costs or usage exceed predefined thresholds. C. AWS Cost and Usage Report: Provides detailed data on AWS costs and usage, offering hourly or daily usage, costs, and resource-level details for in-depth analysis and auditing. D. Reserved Instance Reporting: Provides insights into the utilization and coverage of Reserved Instances, helping users understand how effectively Reserved Instances are utilized.

   Adapted from community discussion by TheFivePips · 2024-01-25 · 6 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

   Supporting references

   • AWS documentation
   • AWS documentation
   • AWS documentation

   View community discussion4

   Candidate context

   Question 2 discussion

   These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by CLF-C02 or CertExamHQ.

   1. T

      TheFivePips

      2024-01-25

      Selected B6 upvotes

      A. Cost Explorer: Provides insights into AWS costs and usage, allowing users to analyze spending trends and breakdown costs by services, regions, and tags. B. AWS Budgets: Enables users to plan service usage, set custom cost and usage budgets, and receive alerts when costs or usage exceed predefined thresholds. C. AWS Cost and Usage Report: Provides detailed data on AWS costs and usage, offering hourly or daily usage, costs, and resource-level details for in-depth analysis and auditing. D. Reserved Instance Reporting: Provides insights into the utilization and coverage of Reserved Instances, helping users understand how effectively Reserved Instances are utilized.

   2. O

      OZGEGOKCHE

      2024-01-28

      Selected B3 upvotes

      B. AWS Budgets AWS Budgets is the tool that gives users the ability to plan their service usage, service costs, and instance reservations. It allows users to set custom alerts when their costs or usage exceed established thresholds, providing proactive cost management and control. Option A (Cost Explorer) is a visualization tool within the AWS Management Console that provides insights into your AWS costs and usage. Option C (AWS Cost and Usage Report) is a detailed report that provides granular data about your costs and usage. Option D (Reserved Instance reporting) is specific to reporting on reserved instances, which are a way to save costs on AWS instances through commitments.

   3. D

      DOUAHOU13

      2024-05-12

      3 upvotes

      AWS Cost Explorer est un outil d'analyse de coûts intégré à la console AWS Management. Il fournit des outils de visualisation et d'analyse pour analyser les coûts et l'utilisation des services AWS. Cependant, contrairement à AWS Budgets, il ne permet pas de définir des budgets personnalisés ou des alertes lorsque les coûts dépassent certaines limites. Donc, la réponse correcte est : B. AWS Budgets AWS Budgets permet aux utilisateurs de planifier leur utilisation des services, leurs coûts et leurs réservations d'instances, et leur permet également de définir des alertes personnalisées lorsque leurs coûts ou leur utilisation dépassent des seuils établis

   4. S

      shwetasri

      2023-12-05

      2 upvotes

      Answer From Chat GPT is also AWS Budgets Which AWS tool gives users the ability to plan their service usage, service costs, and instance reservations, and also allows them to set custom alerts when their costs or usage exceed established thresholds? ChatGPT The AWS tool that provides users with the ability to plan their service usage, service costs, and instance reservations, and also allows them to set custom alerts for cost and usage thresholds is AWS Budgets. AWS Budgets is a service within the AWS Management Console that helps users set custom cost and usage budgets that alert them when they exceed their thresholds. This tool is useful for monitoring and controlling costs associated with various AWS resources and services.

3. Question 3 of 25

   A user wants to allow applications running on an Amazon EC2 instance to make calls to other AWS services. The access granted must be secure. Which AWS service or feature should be used?

   • ASecurity groups
   • BAWS Firewall Manager
   • CIAM roles
   • DIAM user SSH keys

   Show answer

   Correct answer: C

   How others answered

   • C93%

   Explanation

   For allowing applications running on an Amazon EC2 instance to make secure calls to other AWS services, the recommended AWS service or feature is: C. IAM roles IAM (Identity and Access Management) roles provide a secure way to grant permissions to AWS services and resources. In this scenario, you can create an IAM role with the necessary permissions for the EC2 instance to access other AWS services. Then, you can associate the IAM role with the EC2 instance. Option A (Security groups) is used for controlling inbound and outbound traffic to and from an EC2 instance, but it's not directly related to granting permissions to AWS services.

   Adapted from community discussion by cloudrishank · 2023-12-01 · 19 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

   Supporting references

   • AWS documentation
   • AWS documentation
   • AWS documentation

   View community discussion4

   Candidate context

   Question 3 discussion

   These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by CLF-C02 or CertExamHQ.

   1. C

      cloudrishank

      2023-12-01

      Selected C19 upvotes

      For allowing applications running on an Amazon EC2 instance to make secure calls to other AWS services, the recommended AWS service or feature is: C. IAM roles IAM (Identity and Access Management) roles provide a secure way to grant permissions to AWS services and resources. In this scenario, you can create an IAM role with the necessary permissions for the EC2 instance to access other AWS services. Then, you can associate the IAM role with the EC2 instance. Option A (Security groups) is used for controlling inbound and outbound traffic to and from an EC2 instance, but it's not directly related to granting permissions to AWS services.

   2. T

      TheFivePips

      2024-01-25

      Selected C8 upvotes

      C. IAM roles: Are used to grant secure and temporary access to AWS services. In this scenario, where a user wants to allow applications running on an Amazon EC2 instance to make calls to other AWS services, IAM roles should be used. IAM roles provide a secure way to delegate permissions to entities like EC2 instances without the need for long-term credentials. Option A (Security groups) is used for controlling inbound and outbound traffic to EC2 instances but does not provide secure access to AWS services. Option B (AWS Firewall Manager) is a service used for managing AWS WAF (Web Application Firewall) rules across accounts and applications, and it is not directly related to granting permissions to EC2 instances. Option D (IAM user SSH keys) is specifically related to SSH key pairs for IAM users and is not the appropriate solution for granting access to AWS services from EC2 instances.

   3. A

      aron1621

      2024-07-12

      6 upvotes

      I'm seeing wrong answers in alot of questions, Please Admins correct the answers.

   4. A

      Anyio

      2023-10-16

      Selected C3 upvotes

      The correct answer is C. AWS Identity and Access Management (IAM) is a web service that helps you securely control access to AWS resources. With IAM, you can centrally manage permissions that control which AWS resources users can access. You can use IAM features to securely provide credentials for applications that run on EC2 instances. These credentials provide permissions for your application to access other AWS resources. https://docs.aws.amazon.com/IAM/latest/UserGuide/introduction.html

4. Question 4 of 25

   A company wants to migrate its NFS on-premises workload to AWS. Which AWS Storage Gateway type should the company use to meet this requirement?

   • ATape Gateway
   • BVolume Gateway
   • CAmazon FSx File Gateway
   • DAmazon S3 File Gateway

   Show answer

   Correct answer: D

   How others answered

   • D72%
   • C28%

   Only 72% agreed on this answer — treat it as contested rather than settled.

   Explanation

   I think this question is a little bit out of scope for this exam, but the AWS S3 File Gateway documentation specifically mentions NFS. You probably could also do C, but I think D is the "Best" answer A. Tape Gateway: Is used for archiving data to Amazon S3 and Glacier. It is not designed for NFS workloads or migrating on-premises file-based workloads. B. Volume Gateway: Is used for block storage volumes and might not be the most suitable option for NFS file workloads. It's more focused on block storage solutions. C. Amazon FSx File Gateway: Provides a file interface to Amazon FSx file systems, which is compatible with Windows file servers. However, it may not be the optimal solution for migrating NFS workloads to AWS. D. Amazon S3 File Gateway: Supports a file interface into Amazon S3 and allows storing and retrieving objects in Amazon S3 using industry-standard file protocols such as NFS. It is designed for scenarios where you want to integrate on-premises file-based applications with Amazon S3, making it suitable for migrating NFS workloads to AWS.

   Adapted from community discussion by TheFivePips · 2024-01-25 · 20 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

   Supporting references

   • AWS documentation
   • AWS documentation
   • AWS documentation
   • AWS documentation
   • AWS documentation

   View community discussion4

   Candidate context

   Question 4 discussion

   These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by CLF-C02 or CertExamHQ.

   1. T

      TheFivePips

      2024-01-25

      Selected D20 upvotes

      I think this question is a little bit out of scope for this exam, but the AWS S3 File Gateway documentation specifically mentions NFS. You probably could also do C, but I think D is the "Best" answer A. Tape Gateway: Is used for archiving data to Amazon S3 and Glacier. It is not designed for NFS workloads or migrating on-premises file-based workloads. B. Volume Gateway: Is used for block storage volumes and might not be the most suitable option for NFS file workloads. It's more focused on block storage solutions. C. Amazon FSx File Gateway: Provides a file interface to Amazon FSx file systems, which is compatible with Windows file servers. However, it may not be the optimal solution for migrating NFS workloads to AWS. D. Amazon S3 File Gateway: Supports a file interface into Amazon S3 and allows storing and retrieving objects in Amazon S3 using industry-standard file protocols such as NFS. It is designed for scenarios where you want to integrate on-premises file-based applications with Amazon S3, making it suitable for migrating NFS workloads to AWS.

   2. P

      patelalfez

      2024-01-14

      3 upvotes

      C. Amazon FSx File Gateway To migrate an NFS (Network File System) on-premises workload to AWS, the company should use the Amazon FSx File Gateway type. Amazon FSx for Windows File Server provides a fully managed Windows file system that is accessible over the industry-standard Server Message Block (SMB) and NFS protocols. Amazon FSx File Gateway allows you to seamlessly integrate an on-premises NFS environment with Amazon FSx for Windows File Server. It enables your existing NFS clients to access an FSx for Windows File Server file system in AWS. The other options are different types of AWS Storage Gateways, but they are not specifically designed for NFS workloads: A. Tape Gateway - Used for archiving data to Amazon S3 or Glacier using virtual tapes, but not designed for NFS workloads. B. Volume Gateway - Provides block storage volumes that can be mounted as iSCSI devices but is not designed for NFS workloads. D. Amazon S3 File Gateway - Integrates an on-premises file system with Amazon S3, but it uses the SMB protocol and is not specifically designed for NFS workloads.

   3. R

      rankocertified

      2023-11-18

      Selected D4 upvotes

      Amazon S3 File Gateway provides a seamless way to connect to the cloud in order to store application data files and backup images as durable objects in Amazon S3 cloud storage. Amazon S3 File Gateway offers SMB or NFS-based access to data in Amazon S3 with local caching. https://aws.amazon.com/storagegateway/file/s3/

   4. N

      Norbi_Varga

      2024-09-15

      3 upvotes

      The correct answer to this question is C. Amazon FSx File Gateway. Amazon FSx File Gateway is designed to seamlessly move your NFS workloads to AWS. It provides low-latency access to fully managed file shares in the cloud, supporting file-based protocols such as NFS (Network File System) and SMB (Server Message Block). This makes it ideal for migrating and extending on-premises NFS workloads to AWS. Amazon S3 File Gateway: This gateway provides file-level storage but stores files in Amazon S3, primarily for object storage. It’s not meant for migrating active NFS workloads where file system compatibility and performance are critical. Amazon FSx File Gateway is the most suitable choice for migrating NFS-based workloads to AWS.

5. Question 5 of 25

   A company wants to manage deployed IT services and govern its infrastructure as code (IaC) templates. Which AWS service will meet this requirement?

   • AAWS Resource Explorer
   • BAWS Service Catalog
   • CAWS Organizations
   • DAWS Systems Manager

   Show answer

   Correct answer: B

   How others answered

   • B88%

   Explanation

   The answer is B. AWS Service Catalog lets you centrally manage your cloud resources to achieve governance at scale of your infrastructure as code (IaC) templates, written in CloudFormation or Terraform configurations. With AWS Service Catalog, you can meet your compliance requirements while making sure your customers can quickly deploy the cloud resources they need. https://aws.amazon.com/servicecatalog/

   Adapted from community discussion by Anyio · 2024-09-20 · 21 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

   Supporting references

   • AWS documentation
   • AWS documentation
   • AWS documentation

   View community discussion4

   Candidate context

   Question 5 discussion

   These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by CLF-C02 or CertExamHQ.

   1. A

      Anyio

      2024-09-20

      Selected B21 upvotes

      The answer is B. AWS Service Catalog lets you centrally manage your cloud resources to achieve governance at scale of your infrastructure as code (IaC) templates, written in CloudFormation or Terraform configurations. With AWS Service Catalog, you can meet your compliance requirements while making sure your customers can quickly deploy the cloud resources they need. https://aws.amazon.com/servicecatalog/

   2. T

      TheFivePips

      2024-09-22

      Selected B4 upvotes

      B. AWS Service Catalog AWS Service Catalog enables organizations to create and manage catalogs of IT services that are approved for use on AWS. It allows you to centrally manage and govern the deployment of AWS resources, including IaC templates. With AWS Service Catalog, you can control access, ensure compliance, and manage the lifecycle of deployed services. Options A, C, and D are not specifically designed for managing deployed IT services and governing infrastructure as code: A. AWS Resource Explorer AWS Resource Explorer is a tool for exploring, understanding, and querying your AWS resources. C. AWS Organizations AWS Organizations helps you consolidate multiple AWS accounts into an organization. D. AWS Systems Manager AWS Systems Manager provides a suite of tools for managing AWS infrastructure at scale. While it is useful for managing operational tasks, it is not specifically designed for governing infrastructure as code or managing IT services.

   3. B

      BobFar

      2024-02-10

      4 upvotes

      The answer is B , AWS Service Catalog - AWS Resource Explorer: Search for and discover relevant resources across AWS - AWS Service Catalog: Create, share, organize, and govern your curated IaC templates - AWS Organizations: An account management service that lets you consolidate multiple AWS accounts into an organization and centrally manage. - AWS Systems Manager: Manage your resources on AWS and in multicloud and hybrid environments.

   4. A

      axat

      2024-09-22

      Selected B3 upvotes

      B. AWS Service Catalog AWS Service Catalog is the service that enables a company to manage deployed IT services and govern its infrastructure as code (IaC) templates. AWS Service Catalog allows organizations to create and manage catalogs of IT services that are approved for use on AWS. It helps centralize and manage the provisioning of resources and applications based on predefined templates.

6. Question 6 of 25

   Which AWS service or feature allows users to create new AWS accounts, group multiple accounts to organize workflows, and apply policies to groups of accounts?

   • AAWS Identity and Access Management (IAM)
   • BAWS Trusted Advisor
   • CAWS CloudFormation
   • DAWS Organizations

   Show answer

   Correct answer: D

   How others answered

   • D83%
   • A17%

   Explanation

   ChatGPT: The AWS service that allows users to create new AWS accounts, group multiple accounts to organize workflows, and apply policies to groups of accounts is AWS Organizations. AWS Organizations enables you to consolidate multiple AWS accounts into an organization that you create and centrally manage. This helps you to better manage billing and cost allocation, apply policies across your accounts, and simplify resource sharing between accounts. With AWS Organizations, you can create organizational units (OUs) to group accounts based on your organizational structure. You can also apply Service Control Policies (SCPs) to control permissions at the root, OU, or account level. This allows you to enforce security and compliance requirements across your entire organization. In summary, AWS Organizations is the service that provides the features you mentioned for managing multiple AWS accounts within an organization.

   Adapted from community discussion by Jason3354 · 2023-12-23 · 3 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

   Supporting references

   • AWS documentation
   • AWS documentation
   • AWS documentation

   View community discussion4

   Candidate context

   Question 6 discussion

   These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by CLF-C02 or CertExamHQ.

   1. J

      Jason3354

      2023-12-23

      Selected D3 upvotes

      ChatGPT: The AWS service that allows users to create new AWS accounts, group multiple accounts to organize workflows, and apply policies to groups of accounts is AWS Organizations. AWS Organizations enables you to consolidate multiple AWS accounts into an organization that you create and centrally manage. This helps you to better manage billing and cost allocation, apply policies across your accounts, and simplify resource sharing between accounts. With AWS Organizations, you can create organizational units (OUs) to group accounts based on your organizational structure. You can also apply Service Control Policies (SCPs) to control permissions at the root, OU, or account level. This allows you to enforce security and compliance requirements across your entire organization. In summary, AWS Organizations is the service that provides the features you mentioned for managing multiple AWS accounts within an organization.

   2. R

      rsrjunior

      2023-12-12

      Selected D2 upvotes

      Yes is D https://aws.amazon.com/organizations/faqs/ AWS Organizations helps you centrally govern your environment as you scale your workloads on AWS. Whether you are a growing startup or a large enterprise, Organizations helps you to programmatically create new accounts and allocate resources, simplify billing by setting up a single payment method for all of your accounts, create groups of accounts to organize your workflows, and apply policies to these groups for governance. In addition, AWS Organizations is integrated with other AWS services so you can define central configurations, security mechanisms, and resource sharing across accounts in your organization.

   3. A

      Amin_013

      2024-12-31

      Selected D1 upvote

      D. AWS Organizations AWS Organizations helps you centrally govern your environment as you scale your workloads on AWS. Whether you are a growing startup or a large enterprise, Organizations helps you to programmatically create new accounts and allocate resources, simplify billing by setting up a single payment method for all of your accounts, create groups of accounts to organize your workflows, and apply policies to these groups for governance. In addition, AWS Organizations is integrated with other AWS services so you can define central configurations, security mechanisms, and resource sharing across accounts in your organization.

   4. K

      konto2502

      2023-12-12

      Selected D3 upvotes

      IAM does not provide the same level of organization and policy management as AWS Organizations.

7. Question 7 of 25

   A company wants to store and retrieve files in Amazon S3 for its existing on-premises applications by using industry-standard file system protocols. Which AWS service will meet these requirements?

   • AAWS DataSync
   • BAWS Snowball Edge
   • CAmazon S3 File Gateway
   • DAWS Transfer Family

   Show answer

   Correct answer: C

   How others answered

   • C82%
   • D18%

   Explanation

   C. Amazon S3 File Gateway A S3 File Gateway simplifies file storage in Amazon S3, integrates to existing applications through industry-standard file system protocols, and provides a cost-effective alternative to on-premises storage. It also provides low-latency access to data through transparent local caching. A S3 File Gateway manages data transfer to and from AWS, buffers applications from network congestion, optimizes and streams data in parallel, and manages bandwidth consumption. https://docs.aws.amazon.com/filegateway/latest/files3/what-is-file-s3.html

   Adapted from community discussion by SimonBird · 2024-12-18 · 2 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

   Supporting references

   • AWS documentation
   • AWS documentation
   • AWS documentation

   View community discussion4

   Candidate context

   Question 7 discussion

   These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by CLF-C02 or CertExamHQ.

   1. C

      chalaka

      2024-10-29

      Selected C4 upvotes

      C. Amazon S3 File Gateway Amazon S3 File Gateway provides NFS and SMB access to objects stored in Amazon S3. It enables existing on-premises applications to access data in Amazon S3 as if they were accessing a file system, using standard file system protocols. This makes it an ideal solution for integrating on-premises applications with Amazon S3 storage.

   2. R

      rebelfourkix

      2024-05-29

      4 upvotes

      C. Amazon S3 File Gateway Q: What is Amazon S3 File Gateway? Amazon S3 File Gateway is a configuration of the AWS Storage Gateway service that provides your applications a file interface to seamlessly store files as objects in Amazon S3, and access them using industry standard file protocols.

   3. S

      SimonBird

      2024-12-18

      Selected C2 upvotes

      C. Amazon S3 File Gateway A S3 File Gateway simplifies file storage in Amazon S3, integrates to existing applications through industry-standard file system protocols, and provides a cost-effective alternative to on-premises storage. It also provides low-latency access to data through transparent local caching. A S3 File Gateway manages data transfer to and from AWS, buffers applications from network congestion, optimizes and streams data in parallel, and manages bandwidth consumption. https://docs.aws.amazon.com/filegateway/latest/files3/what-is-file-s3.html

   4. T

      tastatura

      2025-04-08

      Selected C1 upvote

      A. AWS DataSync: is a service for transferring large amounts of data between on-premises storage and Amazon S3, but it is designed for data movement, not for providing real-time file system access B. AWS Snowball Edge: Device that provids large volumes or edge computing offline data transfer capabilities. Not for access to S3 C. Amazon S3 File Gateway: Allows storing and retrieving files in Amazon S3 using industry-standard file protocols. It acts as a bridge between your on-premesis file-based applications and Amazon S3 object storage D. AWS Transfer Family: Fully managed support for SFTP, FTPS and FTP. provides fully managed support for file transfers directly into and out of Amazon S3 or Amazon EFS. Supports file transfer protocols, not file system protocols

8. Question 8 of 25

   Which Amazon EC2 pricing model is the MOST cost efficient for an uninterruptible workload that runs once a year for 24 hours?

   • AOn-Demand Instances
   • BReserved Instances
   • CSpot Instances
   • DDedicated Instances

   Show answer

   Correct answer: A

   How others answered

   • A90%

   Explanation

   Reserved Instances come with a minimum commitment period. The minimum time commitment for a Reserved Instance is typically one year or three years, depending on the type of Reserved Instance you choose.

   Adapted from community discussion by TheFivePips · 2024-01-30 · 15 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

   Supporting references

   • AWS documentation
   • AWS documentation
   • AWS documentation

   View community discussion4

   Candidate context

   Question 8 discussion

   These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by CLF-C02 or CertExamHQ.

   1. T

      TheFivePips

      2024-01-30

      Selected A15 upvotes

      Reserved Instances come with a minimum commitment period. The minimum time commitment for a Reserved Instance is typically one year or three years, depending on the type of Reserved Instance you choose.

   2. B

      BP159

      2024-03-05

      9 upvotes

      Good to see you here again after 10 questions, you will wonderful explanation to the questions explaining every option in the question. Thanks

   3. I

      isaphiltrick

      2023-10-18

      Selected A4 upvotes

      C - Spot Instances is NOT correct because one of the requirements is "uninterruptible workload." "Spot Instances are a cost-effective choice if you can be flexible about when your applications run and if your applications can be interrupted." Reference: https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/using-spot-instances.html B - Reserved Instances is also NOT correct because the workload only "runs once a year for 24 hours." Why would you commit to either a 1 year or 3 year plan only to run it once? The correct answer is A - On-Demand Instances. AWS "recommends that you use On-Demand Instances for applications with short-term, irregular workloads that cannot be interrupted." Reference: https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2-on-demand-instances.html

   4. A

      achow

      2024-01-11

      6 upvotes

      its needed only for 1 day (24 hours) in a whole year. A reserved instance for a whole year, even with 75% discount would cost more than an on demand host for 24 hours.

9. Question 9 of 25

   Which option is an AWS Cloud Adoption Framework (AWS CAF) business perspective capability?

   • ACulture evolution
   • BEvent management
   • CData monetization
   • DPlatform architecture

   Show answer

   Correct answer: C

   How others answered

   • C88%

   Explanation

   A. Culture evolution == People B. Event management == Operations C. Data monetization == Business D. Platform architecture == Platform

   Adapted from community discussion by Ruffyit · 2024-02-04 · 24 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

   Supporting references

   • AWS documentation
   • AWS documentation
   • AWS documentation
   • AWS documentation
   • AWS documentation

   View community discussion4

   Candidate context

   Question 9 discussion

   These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by CLF-C02 or CertExamHQ.

   1. R

      Ruffyit

      2024-02-04

      24 upvotes

      A. Culture evolution == People B. Event management == Operations C. Data monetization == Business D. Platform architecture == Platform

   2. 3

      3isthemagicnumber

      2023-11-13

      Selected C4 upvotes

      Data Monetization: This falls under the Business Perspective of the AWS CAF, which focuses on capabilities related to the financial aspects of cloud adoption and the ability to transform data into valuable business insights, products, or services. Data monetization involves strategies to generate measurable economic benefits from available data sources (including cloud-based data), which aligns with business objectives and outcomes.

   3. D

      Dreadn0ught

      2024-01-12

      Selected C3 upvotes

      Data Monetization. Explained here. https://docs.aws.amazon.com/whitepapers/latest/overview-aws-cloud-adoption-framework/your-cloud-transformation-journey.html Culture Evolution is on People perspective.

   4. J

      jcbp

      2024-01-09

      3 upvotes

      Culture Evolution is under the People perspective: https://docs.aws.amazon.com/whitepapers/latest/aws-caf-people-perspective/aws-caf-people-perspective.html Data monetization is the correct answer, as it falls under the Business perspective: https://docs.aws.amazon.com/whitepapers/latest/aws-caf-business-perspective/aws-caf-business-perspective.html

10. Question 10 of 25

    Select 2

    A company is using a central data platform to manage multiple types of data for its customers. The company wants to use AWS services to discover, transform, and visualize the data. Which combination of AWS services should the company use to meet these requirements? (Choose two.)

    • AAWS Glue
    • BAmazon Elastic File System (Amazon EFS)
    • CAmazon Redshift
    • DAmazon QuickSight
    • EAmazon Quantum Ledger Database (Amazon QLDB)

    Show answer

    Correct answer: A, D

    How others answered

    • AD100%

    Explanation

    The answer is AD. AWS Glue is a serverless data integration service that makes it easier to discover, prepare, move, and integrate data from multiple sources for analytics, machine learning (ML), and application development. https://aws.amazon.com/glue/ Amazon QuickSight powers data-driven organizations with unified business intelligence (BI) at hyperscale. With QuickSight, all users can meet varying analytic needs from the same source of truth through modern interactive dashboards, paginated reports, embedded analytics, and natural language queries. https://aws.amazon.com/quicksight/

    Adapted from community discussion by Anyio · 2024-09-22 · 31 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    Supporting references

    • AWS documentation
    • AWS documentation
    • AWS documentation

    View community discussion4

    Candidate context

    Question 10 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by CLF-C02 or CertExamHQ.

    1. A

       Anyio

       2024-09-22

       Selected A, D31 upvotes

       The answer is AD. AWS Glue is a serverless data integration service that makes it easier to discover, prepare, move, and integrate data from multiple sources for analytics, machine learning (ML), and application development. https://aws.amazon.com/glue/ Amazon QuickSight powers data-driven organizations with unified business intelligence (BI) at hyperscale. With QuickSight, all users can meet varying analytic needs from the same source of truth through modern interactive dashboards, paginated reports, embedded analytics, and natural language queries. https://aws.amazon.com/quicksight/

    2. T

       TheFivePips

       2024-09-22

       Selected A, D13 upvotes

       A. AWS Glue: AWS Glue is a fully managed extract, transform, and load (ETL) service that makes it easy to discover, prepare, and load data for analysis. It automates the time-consuming tasks of data discovery, transformation, and job scheduling, allowing users to focus on analyzing the data. B. Amazon Elastic File System (Amazon EFS): Fully managed file system for shared access to file-based data. Not primarily used for data discovery, transformation, or visualization. C. Amazon Redshift: Fully managed data warehouse service for running complex queries on large datasets. Not used for data discovery, transformation, or visualization. D. Amazon QuickSight: Amazon QuickSight is a fully managed business intelligence (BI) service that enables users to create and visualize interactive dashboards and reports. It connects to various data sources, making it suitable for visualizing data prepared by services like AWS Glue. E. Amazon Quantum Ledger Database (Amazon QLDB): Fully managed ledger database service for ensuring data integrity. Not designed for data discovery, transformation, or visualization.

    3. M

       Mefre7

       2023-11-18

       Selected A, D3 upvotes

       A. AWS Glue - AWS Glue is a fully managed extract, transform, and load (ETL) service that makes it easy for users to prepare and load their data for analysis. It can discover, catalog, and transform data from various sources. D. Amazon QuickSight - Amazon QuickSight is a business intelligence (BI) service that enables users to create and visualize interactive dashboards. It can connect to various data sources, including AWS Glue, to visualize and analyze the transformed data.

    4. J

       James_Srm

       2024-02-09

       Selected A, D2 upvotes

       the answer is AD A.AWS Glue: for prepare a multiple data type, form and source for analyze. D.AWS Quick Sight: tool for visualize and analyze for your data.

11. Question 11 of 25

    A company plans to migrate to the AWS Cloud. The company wants to use the AWS Cloud Adoption Framework (AWS CAF) to define and track business outcomes as part of its cloud transformation journey. Which AWS CAF governance perspective capability will meet these requirements?

    • ABenefits management
    • BRisk management
    • CApplication portfolio management
    • DCloud financial management

    Show answer

    Correct answer: A

    How others answered

    • A76%
    • C18%

    Explanation

    "Benefits management – Ensure that the business benefits associated with your cloud investments are realized and sustained. The success of your transformation is determined by the resulting business benefits. Clear identification of the desired benefits upfront will allow you to prioritize your cloud investments and track transformation progress over time. Identify metrics, quantify desired benefits, and communicate to the relevant stakeholders. Align the timing and life-span of benefits with your strategic goals. Incorporate benefits delivery into a benefits realization roadmap. Regularly measure realized benefits, evaluate progress against the benefits realization roadmap, and adjust the expected benefits as required." Reference: https://docs.aws.amazon.com/whitepapers/latest/overview-aws-cloud-adoption-framework/governance-perspective.html

    Adapted from community discussion by isaphiltrick · 2023-11-19 · 12 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    Supporting references

    • AWS documentation
    • AWS documentation
    • AWS documentation

    View community discussion4

    Candidate context

    Question 11 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by CLF-C02 or CertExamHQ.

    1. I

       isaphiltrick

       2023-11-19

       Selected A12 upvotes

       "Benefits management – Ensure that the business benefits associated with your cloud investments are realized and sustained. The success of your transformation is determined by the resulting business benefits. Clear identification of the desired benefits upfront will allow you to prioritize your cloud investments and track transformation progress over time. Identify metrics, quantify desired benefits, and communicate to the relevant stakeholders. Align the timing and life-span of benefits with your strategic goals. Incorporate benefits delivery into a benefits realization roadmap. Regularly measure realized benefits, evaluate progress against the benefits realization roadmap, and adjust the expected benefits as required." Reference: https://docs.aws.amazon.com/whitepapers/latest/overview-aws-cloud-adoption-framework/governance-perspective.html

    2. B

       BShelat

       2024-01-11

       Selected A2 upvotes

       https://docs.aws.amazon.com/whitepapers/latest/overview-aws-cloud-adoption-framework/governance-perspective.html Benefits management – Ensure that the business benefits associated with your cloud investments are realized and sustained. The success of your transformation is determined by the resulting business benefits. Clear identification of the desired benefits upfront will allow you to prioritize your cloud investments and track transformation progress over time. Identify metrics, quantify desired benefits, and communicate to the relevant stakeholders. Align the timing and life-span of benefits with your strategic goals. Incorporate benefits delivery into a benefits realization roadmap. Regularly measure realized benefits, evaluate progress against the benefits realization roadmap, and adjust the expected benefits as required.

    3. V

       VikJo1978

       2023-12-09

       Selected A2 upvotes

       he correct answer is A. Benefits management. The Benefits management capability of the AWS CAF governance perspective is specifically designed to help organizations define, measure, and track the business outcomes they expect to achieve from their cloud adoption initiatives. This includes identifying and quantifying the expected benefits, establishing clear ownership and responsibility for achieving those benefits, and establishing processes and metrics to track progress and measure success.

    4. A

       Amin_013

       2024-12-31

       Selected A1 upvote

       A. Benefits management – Ensure that the business benefits associated with your cloud investments are realized and sustained. The success of your transformation is determined by the resulting business benefits. Clear identification of the desired benefits upfront will allow you to prioritize your cloud investments and track transformation progress over time. Identify metrics, quantify desired benefits, and communicate to the relevant stakeholders. Align the timing and life-span of benefits with your strategic goals. Incorporate benefits delivery into a benefits realization roadmap. Regularly measure realized benefits, evaluate progress against the benefits realization roadmap, and adjust the expected benefits as required.

12. Question 12 of 25

    A company has an application with robust hardware requirements. The application must be accessed by students who are using lightweight, low-cost laptops. Which AWS service will help the company deploy the application without investing in backend infrastructure or high-end client hardware?

    • AAmazon AppStream 2.0
    • BAWS AppSync
    • CAmazon WorkLink
    • DAWS Elastic Beanstalk

    Show answer

    Correct answer: A

    How others answered

    • A79%
    • D21%

    Explanation

    A. Amazon AppStream 2.0. Amazon AppStream 2.0 allows you to stream desktop applications securely to any device running a web browser, making it ideal for scenarios where the client hardware may not be powerful enough to run the application locally. With AppStream 2.0, the heavy lifting of processing is done on AWS servers, while users interact with the application through streaming.

    Adapted from community discussion by chalaka · 2024-05-07 · 4 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    Supporting references

    • AWS documentation
    • AWS documentation
    • AWS documentation

    View community discussion4

    Candidate context

    Question 12 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by CLF-C02 or CertExamHQ.

    1. D

       db97

       2023-12-07

       5 upvotes

       Please disregard, the right answer is A (Amazon AppStream) since we are talking about providing access to a group of students that don't have a high quality laptop to run the application without facing issues, this is NOT about deploying the application is about the access itself. AppStream is the only one that fits better since it will allow you use the browser as intermediary to access to the application.

    2. C

       chalaka

       2024-05-07

       Selected A4 upvotes

       A. Amazon AppStream 2.0. Amazon AppStream 2.0 allows you to stream desktop applications securely to any device running a web browser, making it ideal for scenarios where the client hardware may not be powerful enough to run the application locally. With AppStream 2.0, the heavy lifting of processing is done on AWS servers, while users interact with the application through streaming.

    3. V

       VikJo1978

       2023-12-09

       Selected A4 upvotes

       The correct answer is A. Amazon AppStream 2.0. Amazon AppStream 2.0 is a cloud-based desktop streaming service that allows companies to deploy applications and desktops to any device, including lightweight laptops. AppStream 2.0 handles all of the application's processing and graphics power, so students only need a web browser on their device.

    4. D

       Dreadn0ught

       2024-01-12

       Selected A4 upvotes

       Appstream 2.0 since it also says "with robust hardware requirements" so probably the HW need are also GPUs/APUs and similar to student simulations. The application is then streamed to the laptop with lightweight protocols with no or low impact on laptop CPUs. On the other end in "D" for example you need to invest in the backend.

13. Question 13 of 25

    A company plans to migrate to the AWS Cloud. The company is gathering information about its on-premises infrastructure and requires information such as the hostname, IP address, and MAC address. Which AWS service will meet these requirements?

    • AAWS DataSync
    • BAWS Application Migration Service
    • CAWS Application Discovery Service
    • DAWS Database Migration Service (AWS DMS)

    Show answer

    Correct answer: C

    How others answered

    • C100%

    Explanation

    AWS Application Discovery Service collects both server and database configuration information. Server information includes hostnames, IP addresses, MAC addresses, as well as the resource allocation and utilization details of key resources such as CPU, network, memory, and disk.

    Adapted from community discussion by abbey0922 · 2024-05-15 · 9 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    Supporting references

    • AWS documentation
    • AWS documentation
    • AWS documentation
    • AWS documentation

    View community discussion3

    Candidate context

    Question 13 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by CLF-C02 or CertExamHQ.

    1. A

       abbey0922

       2024-05-15

       Selected C9 upvotes

       AWS Application Discovery Service collects both server and database configuration information. Server information includes hostnames, IP addresses, MAC addresses, as well as the resource allocation and utilization details of key resources such as CPU, network, memory, and disk.

    2. B

       BShelat

       2024-07-11

       Selected C1 upvote

       https://docs.aws.amazon.com/application-discovery/latest/userguide/what-is-appdiscovery.html https://docs.aws.amazon.com/mgn/latest/ug/what-is-application-migration-service.html https://docs.aws.amazon.com/dms/latest/userguide/Welcome.html https://aws.amazon.com/datasync/

    3. R

       Rinkans

       2024-05-28

       1 upvote

       C - AWS Application Discovery Service collects both server and database configuration information

14. Question 14 of 25

    A customer runs an On-Demand Amazon Linux EC2 instance for 3 hours, 5 minutes, and 6 seconds. For how much time will the customer be billed?

    • A3 hours, 5 minutes
    • B3 hours, 5 minutes, and 6 seconds
    • C3 hours, 6 minutes
    • D4 hours

    Show answer

    Correct answer: B

    How others answered

    • B56%
    • C28%
    • D16%

    Only 56% agreed on this answer — treat it as contested rather than settled.

    Explanation

    The answer is B. The keyword here is that it's an on-demand instance, which is billed by the second: With On-Demand Instances, you pay for compute capacity by the second with no long-term commitments. You pay only for the seconds that your On-Demand Instances are in the running state, with a 60-second minimum https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2-on-demand-instances.html Reserved instances get rounded to an hour. https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/concepts-reserved-instances-application.html

    Adapted from community discussion by 517d694 · 2024-03-26 · 4 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    Supporting references

    • AWS documentation
    • AWS documentation
    • AWS documentation
    • AWS documentation
    • repost.aws documentation

    View community discussion4

    Candidate context

    Question 14 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by CLF-C02 or CertExamHQ.

    1. 5

       517d694

       2024-03-26

       Selected B4 upvotes

       The answer is B. The keyword here is that it's an on-demand instance, which is billed by the second: With On-Demand Instances, you pay for compute capacity by the second with no long-term commitments. You pay only for the seconds that your On-Demand Instances are in the running state, with a 60-second minimum https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2-on-demand-instances.html Reserved instances get rounded to an hour. https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/concepts-reserved-instances-application.html

    2. B

       blehbleh

       2024-01-18

       Selected B3 upvotes

       It is B. "Each partial instance-hour consumed is billed per-second for instances launched in Linux, Windows, or Windows with SQL Enterprise, SQL Standard, or SQL Web instances." https://repost.aws/knowledge-center/ec2-instance-hour-billing "We are excited to announce that Amazon EC2 usage of Linux based instances that are launched in On-Demand, Reserved and Spot form will be billed on one second increments, with a minimum of 60 seconds." https://aws.amazon.com/about-aws/whats-new/2017/10/announcing-amazon-ec2-per-second-billing/#:~:text=We%20are%20excited%20to%20announce%20that%20Amazon%20EC2,second%20billing%20with%20a%20minimum%20of%2060%20seconds

    3. R

       RanagKhalifa

       2024-02-28

       2 upvotes

       Announcing Amazon EC2 per second billing Posted On: Oct 2, 2017 We are excited to announce that Amazon EC2 usage of Linux based instances that are launched in On-Demand, Reserved and Spot form will be billed on one second increments, with a minimum of 60 seconds. Amazon EC2 Elastic GPUs and Amazon EBS volumes will also move from per hour billing to per second billing with a minimum of 60 seconds. As with EC2 instances, the list prices will continue to be displayed as it is today in GB-month for capacity, IOPS-month provisioned for io1 IOPS and per Million I/O requests for Magnetic IOPS. https://aws.amazon.com/about-aws/whats-new/2017/10/announcing-amazon-ec2-per-second-billing/#:~:text=We%20are%20excited%20to%20announce%20that%20Amazon%20EC2,second%20billing%20with%20a%20minimum%20of%2060%20seconds

    4. D

       d675329

       2024-05-14

       Selected B2 upvotes

       This is from the AWS documentation for On-Demand instance pricing Pricing is per instance-hour consumed for each instance, from the time an instance is launched until it is terminated or stopped. Each partial instance-hour consumed will be billed per-second for Linux, Windows, Windows with SQL Enterprise, Windows with SQL Standard, and Windows with SQL Web Instances, and as a full hour for all other instance types. https://aws.amazon.com/ec2/pricing/on-demand/ Since OS is Amazon Linux, billing is per second (granularity of billing is at the seconds level, whereas prices are mentioned per hour)

15. Question 15 of 25

    Which of the following are pillars of the AWS Well-Architected Framework? (Choose two.)

    • AHigh availability
    • BPerformance efficiency
    • CCost optimization
    • DGoing global in minutes
    • EContinuous development

    Show answer

    Correct answer: B

    How others answered

    • B84%

    Explanation

    They have told to choose two options. We can choose one checkbox only. Anyway correct answer is B & C. https://aws.amazon.com/architecture/well-architected/?wa-lens-whitepapers.sort-by=item.additionalFields.sortDate&wa-lens-whitepapers.sort-order=desc&wa-guidance-whitepapers.sort-by=item.additionalFields.sortDate&wa-guidance-whitepapers.sort-order=desc

    Adapted from community discussion by BShelat · 2024-01-13 · 2 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    Supporting references

    • AWS documentation
    • AWS documentation
    • AWS documentation

    View community discussion4

    Candidate context

    Question 15 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by CLF-C02 or CertExamHQ.

    1. [

       [Removed]

       2023-12-29

       Selected B24 upvotes

       BC. Operational Excellence Security Reliability Performance Efficiency Cost Optimization Sustainability

    2. B

       BShelat

       2024-01-13

       Selected B2 upvotes

       They have told to choose two options. We can choose one checkbox only. Anyway correct answer is B & C. https://aws.amazon.com/architecture/well-architected/?wa-lens-whitepapers.sort-by=item.additionalFields.sortDate&wa-lens-whitepapers.sort-order=desc&wa-guidance-whitepapers.sort-by=item.additionalFields.sortDate&wa-guidance-whitepapers.sort-order=desc

    3. K

       Kilobay1

       2024-09-05

       Selected B2 upvotes

       B and C I guess exam topics didn’t even read the question, asking for two answers

    4. G

       goldentugboat

       2024-04-07

       2 upvotes

       High availability falls under the reliability pillar but it's not it's own pillar. The six pillars are: Operational Excellence Security Reliability Performance Efficiency Cost Optimization Sustainability

16. Question 16 of 25

    Select 2

    A company wants to receive a notification when a specific AWS cost threshold is reached. Which AWS services or tools can the company use to meet this requirement? (Choose two.)

    • AAmazon Simple Queue Service (Amazon SQS)
    • BAWS Budgets
    • CCost Explorer
    • DAmazon CloudWatch
    • EAWS Cost and Usage Report

    Show answer

    Correct answer: B, D

    How others answered

    • BD93%

    Explanation

    B. AWS Budgets: AWS Budgets is a service that allows you to set custom cost and usage budgets for your AWS resources. You can configure a budget with a specific threshold and define actions, such as sending notifications, when that threshold is reached. D. Amazon CloudWatch: Amazon CloudWatch is a monitoring service that can be used to collect and track metrics, logs, and events from various AWS resources. It supports setting up alarms based on cost metrics, so you can create an alarm for a specific cost threshold and configure it to send notifications when the threshold is breached.

    Adapted from community discussion by NayeraB · 2023-10-17 · 18 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    Supporting references

    • AWS documentation
    • AWS documentation
    • AWS documentation

    View community discussion4

    Candidate context

    Question 16 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by CLF-C02 or CertExamHQ.

    1. N

       NayeraB

       2023-10-17

       Selected B, D18 upvotes

       B. AWS Budgets: AWS Budgets is a service that allows you to set custom cost and usage budgets for your AWS resources. You can configure a budget with a specific threshold and define actions, such as sending notifications, when that threshold is reached. D. Amazon CloudWatch: Amazon CloudWatch is a monitoring service that can be used to collect and track metrics, logs, and events from various AWS resources. It supports setting up alarms based on cost metrics, so you can create an alarm for a specific cost threshold and configure it to send notifications when the threshold is breached.

    2. T

       TheFivePips

       2024-01-24

       Selected B, D9 upvotes

       B. AWS Budgets: Allows the company to set custom cost and usage budgets that alert them when thresholds are exceeded. They can receive notifications via email or Amazon Simple Notification Service (Amazon SNS) when the budget thresholds are reached. D. Amazon CloudWatch: Can be used to create custom alarms based on cost metrics. The company can set up alarms to trigger notifications when specific cost thresholds are met or exceeded. CloudWatch Alarms can notify through various channels, including Amazon SNS. The other options are described as follows: A. Amazon Simple Queue Service (Amazon SQS): SQS is a fully managed message queuing service. C. Cost Explorer: Cost Explorer is a tool for exploring and analyzing AWS costs but does not provide direct notifications for cost thresholds. E. AWS Cost and Usage Report: The Cost and Usage Report provides detailed information about AWS costs but does not offer real-time notifications for cost thresholds.

    3. C

       chalaka

       2024-04-24

       Selected B, D1 upvote

       B. AWS Budgets: Allows the company to set custom cost and usage budgets that alert them when thresholds are exceeded. They can receive notifications via email or Amazon Simple Notification Service (Amazon SNS) when the budget thresholds are reached. D. Amazon CloudWatch: Can be used to create custom alarms based on cost metrics. The company can set up alarms to trigger notifications when specific cost thresholds are met or exceeded. CloudWatch Alarms can notify through various channels, including Amazon SNS.

    4. P

       parrtner73

       2023-10-15

       Selected B, D2 upvotes

       https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/monitor_estimated_charges_with_cloudwatch.html https://docs.aws.amazon.com/cost-management/latest/userguide/budgets-controls.html

17. Question 17 of 25

    Which AWS service or resource provides answers to the most frequently asked security-related questions that AWS receives from its users?

    • AAWS Artifact
    • BAmazon Connect
    • CAWS Chatbot
    • DAWS Knowledge Center

    Show answer

    Correct answer: D

    How others answered

    • D93%

    Explanation

    A. AWS Artifact: AWS Artifact provides on-demand access to AWS compliance reports and documents. It includes various compliance-related documents, such as SOC reports, PCI DSS reports, and more. While it offers valuable compliance information, it may not directly address the most frequently asked security-related questions. B. Amazon Connect: Amazon Connect is a cloud-based contact center service. It is focused on providing customer service solutions and does not specifically provide answers to security-related questions. C. AWS Chatbot: AWS Chatbot is a service that allows users to receive notifications and interact with AWS resources using chat platforms like Slack and Amazon Chime. While it facilitates communication and notifications, it is not designed to provide answers to frequently asked security-related questions. D. AWS Knowledge Center: AWS Knowledge Center is a resource that provides answers to the most frequently asked security-related questions that AWS receives from its users. It offers a collection of articles, videos, and other resources to help users address common security queries and challenges.

    Adapted from community discussion by TheFivePips · 2024-01-24 · 27 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    Supporting references

    • repost.aws documentation
    • AWS documentation
    • repost.aws documentation
    • AWS documentation

    View community discussion4

    Candidate context

    Question 17 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by CLF-C02 or CertExamHQ.

    1. T

       TheFivePips

       2024-01-24

       Selected D27 upvotes

       A. AWS Artifact: AWS Artifact provides on-demand access to AWS compliance reports and documents. It includes various compliance-related documents, such as SOC reports, PCI DSS reports, and more. While it offers valuable compliance information, it may not directly address the most frequently asked security-related questions. B. Amazon Connect: Amazon Connect is a cloud-based contact center service. It is focused on providing customer service solutions and does not specifically provide answers to security-related questions. C. AWS Chatbot: AWS Chatbot is a service that allows users to receive notifications and interact with AWS resources using chat platforms like Slack and Amazon Chime. While it facilitates communication and notifications, it is not designed to provide answers to frequently asked security-related questions. D. AWS Knowledge Center: AWS Knowledge Center is a resource that provides answers to the most frequently asked security-related questions that AWS receives from its users. It offers a collection of articles, videos, and other resources to help users address common security queries and challenges.

    2. R

       Redderdirector

       2023-10-12

       Selected D4 upvotes

       Answer should be Knowledge centre, because right in the official exam guide; section 2.4: Identifying where security information is available, Knowledge centre is listed among AWS security centre and AWS security blog. Artifact is majorly for compliance reports and is unfortunately the answer chatGPT will give you if you ask it

    3. M

       Mike_84

       2023-12-11

       Selected D2 upvotes

       For me correct is D. Exploring both portals seems clear that AWS Knowledge Center provides answer to the most frequently asked security-related questions that AWS receives from its users. https://repost.aws/knowledge-center/all?view=all&search=security&sort=recent&page=eyJ2IjoyLCJuIjoic3d4czNIWmVNdkM2SDcyaHF5d3dKQT09IiwidCI6IlNrbEpvdy91TTJlSGFCZ0JFZ2M1RXc9PSJ9&pageSize=60 You can use AWS Artifact Reports to download AWS security and compliance documents, such as AWS ISO certifications, Payment Card Industry (PCI), and System and Organization Control (SOC) reports. You can use AWS Artifact Agreements to review, accept, and track the status of AWS agreements such as the Business Associate Addendum (BAA). https://aws.amazon.com/artifact/faq/

    4. A

       Anyio

       2023-10-15

       Selected D4 upvotes

       The correct answer is D. AWS Official Knowledge Center articles and videos covering the most frequent questions and requests that we receive from AWS customers. https://repost.aws/knowledge-center

18. Question 18 of 25

    Select 2

    Which capabilities are in the platform perspective of the AWS Cloud Adoption Framework (AWS CAF)? (Choose two.)

    • APerformance and capacity management
    • BData engineering
    • CContinuous integration and continuous delivery (CI/CD)
    • DInfrastructure protection
    • EChange and release management

    Show answer

    Correct answer: B, C

    How others answered

    • BC76%

    Explanation

    B. Data engineering: This capability focuses on managing data pipelines, data storage, and data processing workflows to enable efficient data management and analytics in the cloud. C. Continuous integration and continuous delivery (CI/CD): This capability involves implementing automated processes for building, testing, and deploying software applications in a continuous manner, ensuring faster delivery cycles and improved software quality. https://docs.aws.amazon.com/prescriptive-guidance/latest/aws-caf-platform-perspective/welcome.html

    Adapted from community discussion by chalaka · 2024-04-19 · 7 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    Supporting references

    • AWS documentation
    • AWS documentation
    • AWS documentation

    View community discussion4

    Candidate context

    Question 18 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by CLF-C02 or CertExamHQ.

    1. C

       chalaka

       2024-04-19

       Selected B, C7 upvotes

       B. Data engineering: This capability focuses on managing data pipelines, data storage, and data processing workflows to enable efficient data management and analytics in the cloud. C. Continuous integration and continuous delivery (CI/CD): This capability involves implementing automated processes for building, testing, and deploying software applications in a continuous manner, ensuring faster delivery cycles and improved software quality. https://docs.aws.amazon.com/prescriptive-guidance/latest/aws-caf-platform-perspective/welcome.html

    2. [

       [Removed]

       2023-12-29

       Selected B, C4 upvotes

       According to the Platform Perspective: Platform Architecture Data Architecture Platform Engineering Data Engineering Provisioning and Orchestration Modern Application Development Continuous Integration and Continuous Delivery. So B & C

    3. S

       Sandy1254

       2024-01-17

       Selected B, C3 upvotes

       https://docs.aws.amazon.com/whitepapers/latest/overview-aws-cloud-adoption-framework/platform-perspective.html

    4. J

       JamesGant

       2023-12-31

       Selected B, C2 upvotes

       Answers are - BC According to AWS, Platform perspectives are: Platform architecture Platform engineering Data architecture Data engineering Provisioning and orchestration Modern application development Continuous integration and continuous delivery

19. Question 19 of 25

    A company wants to provide access to Windows file shares in AWS from its on-premises workloads. The company does not want to provision any additional infrastructure or applications in its data center. Which AWS service will meet these requirements?

    • AAmazon FSx File Gateway
    • BAWS DataSync
    • CAmazon S3
    • DAWS Snow Family

    Show answer

    Correct answer: A

    How others answered

    • A100%

    Explanation

    Amazon FSx File Gateway optimizes on-premises access to fully managed, highly reliable file shares in Amazon FSx for Windows File Server. https://aws.amazon.com/storagegateway/file/fsx/

    Adapted from community discussion by petercorn · 2024-07-10 · 2 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    Supporting references

    • AWS documentation
    • AWS documentation
    • AWS documentation

    View community discussion4

    Candidate context

    Question 19 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by CLF-C02 or CertExamHQ.

    1. [

       [Removed]

       2024-09-23

       Selected A1 upvote

       Amazon FSx File Gateway Fast, low-latency access on premises to fully managed file shares Amazon FSx File Gateway optimizes on-premises access to fully managed, highly reliable file shares in Amazon FSx for Windows File Server. Customers with unstructured or file data, whether from SMB-based group shares, or business applications, may require on-premises access to meet low-latency requirements. Amazon FSx File Gateway helps accelerate your file-based storage migration to the cloud to enable faster performance, improved data protection, and reduced cost. https://aws.amazon.com/storagegateway/file/fsx/

    2. A

       Ashisohail

       2024-06-29

       2 upvotes

       A FSX seems a correct option. but please find more about it. Amazon FSx File Gateway optimizes on-premises access to fully managed, highly reliable file shares in Amazon FSx for Windows File Server. Customers with unstructured or file data, whether from SMB-based group shares, or business applications, may require on-premises access to meet low-latency requirements. Amazon FSx File Gateway helps accelerate your file-based storage migration to the cloud to enable faster performance, improved data protection, and reduced cost.

    3. M

       Mike1987

       2024-06-29

       Selected A2 upvotes

       Amazon FSx File Gateway is a service that enables on-premises access to file data stored in Amazon FSx for Windows File Server. It allows you to access Amazon FSx file shares from your on-premises workloads without provisioning additional infrastructure or applications in your data center.

    4. P

       petercorn

       2024-07-10

       Selected A2 upvotes

       Amazon FSx File Gateway optimizes on-premises access to fully managed, highly reliable file shares in Amazon FSx for Windows File Server. https://aws.amazon.com/storagegateway/file/fsx/

20. Question 20 of 25

    Select 2

    A company launched an Amazon EC2 instance with the latest Amazon Linux 2 Amazon Machine Image (AMI). Which actions can a system administrator take to connect to the EC2 instance? (Choose two.)

    • AUse Amazon EC2 Instance Connect.
    • BUse a Remote Desktop Protocol (RDP) connection.
    • CUse AWS Batch.
    • DUse AWS Systems Manager Session Manager.
    • EUse Amazon Connect.

    Show answer

    Correct answer: A, D

    How others answered

    • AD100%

    Explanation

    Session Manager enables you to establish secure connections to your Amazon Elastic Compute Cloud (EC2) instances, edge devices, on-premises servers, and virtual machines (VMs). https://docs.aws.amazon.com/systems-manager/latest/userguide/session-manager.html Amazon EC2 Instance Connect provides a simple and secure way to connect to your Linux instances with Secure Shell (SSH). https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/connect-linux-inst-eic.html

    Adapted from community discussion by petercorn · 2024-01-11 · 3 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    Supporting references

    • AWS documentation
    • AWS documentation
    • AWS documentation

    View community discussion4

    Candidate context

    Question 20 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by CLF-C02 or CertExamHQ.

    1. P

       petercorn

       2024-01-11

       Selected A, D3 upvotes

       Session Manager enables you to establish secure connections to your Amazon Elastic Compute Cloud (EC2) instances, edge devices, on-premises servers, and virtual machines (VMs). https://docs.aws.amazon.com/systems-manager/latest/userguide/session-manager.html Amazon EC2 Instance Connect provides a simple and secure way to connect to your Linux instances with Secure Shell (SSH). https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/connect-linux-inst-eic.html

    2. M

       Mike1987

       2023-12-29

       Selected A, D3 upvotes

       The correct options for connecting to an Amazon EC2 instance launched with the latest Amazon Linux 2 AMI are: A. Use Amazon EC2 Instance Connect. D. Use AWS Systems Manager Session Manager

    3. B

       BShelat

       2024-01-14

       Selected A, D2 upvotes

       https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/connect-linux-inst-eic.html https://docs.aws.amazon.com/systems-manager/latest/userguide/session-manager.html

    4. [

       [Removed]

       2024-03-23

       Selected A, D2 upvotes

       https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/connect-to-linux-instance.html

21. Question 21 of 25

    A company wants to deploy some of its resources in the AWS Cloud. To meet regulatory requirements, the data must remain local and on premises. There must be low latency between AWS and the company resources. Which AWS service or feature can be used to meet these requirements?

    • AAWS Local Zones
    • BAvailability Zones
    • CAWS Outposts
    • DAWS Wavelength Zones

    Show answer

    Correct answer: C

    How others answered

    • C100%

    Explanation

    C. AWS Outposts AWS Outposts allows you to deploy AWS-designed infrastructure on-premises, providing a consistent hybrid experience. With AWS Outposts, you can run compute and storage workloads locally on your premises while seamlessly connecting to the rest of AWS's broad array of services in the cloud. In this scenario, if the company wants to keep the data local and on-premises to meet regulatory requirements and maintain low latency between AWS and on-premises resources, AWS Outposts would be the suitable option. It extends the AWS infrastructure to your on-premises location, providing a hybrid solution that combines the benefits of both on-premises and cloud resources.

    Adapted from community discussion by OOJay · 2024-07-01 · 2 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    Supporting references

    • AWS documentation
    • AWS documentation
    • AWS documentation
    • AWS documentation

    View community discussion4

    Candidate context

    Question 21 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by CLF-C02 or CertExamHQ.

    1. [

       [Removed]

       2024-09-23

       Selected C1 upvote

       AWS Outposts is a family of fully managed solutions delivering AWS infrastructure and services to virtually any on-premises or edge location for a truly consistent hybrid experience. Outposts solutions allow you to extend and run native AWS services on premises, and is available in a variety of form factors, from 1U and 2U Outposts servers to 42U Outposts racks, and multiple rack deployments. With AWS Outposts, you can run some AWS services locally and connect to a broad range of services available in the local AWS Region. Run applications and workloads on premises using familiar AWS services, tools, and APIs. Outposts supports workloads and devices requiring low latency access to on-premises systems, local data processing, data residency, and application migration with local system interdependencies. https://aws.amazon.com/outposts/

    2. B

       BShelat

       2024-07-14

       Selected C3 upvotes

       https://docs.aws.amazon.com/outposts/latest/userguide/what-is-outposts.html https://docs.aws.amazon.com/local-zones/latest/ug/what-is-aws-local-zones.html Outposts are created on premise. Local zones are not on premise. Both provide low latency.

    3. O

       OOJay

       2024-07-01

       2 upvotes

       C. AWS Outposts AWS Outposts allows you to deploy AWS-designed infrastructure on-premises, providing a consistent hybrid experience. With AWS Outposts, you can run compute and storage workloads locally on your premises while seamlessly connecting to the rest of AWS's broad array of services in the cloud. In this scenario, if the company wants to keep the data local and on-premises to meet regulatory requirements and maintain low latency between AWS and on-premises resources, AWS Outposts would be the suitable option. It extends the AWS infrastructure to your on-premises location, providing a hybrid solution that combines the benefits of both on-premises and cloud resources.

    4. P

       petercorn

       2024-07-11

       Selected C1 upvote

       https://docs.aws.amazon.com/outposts/latest/server-userguide/what-is-outposts.html

22. Question 22 of 25

    Select 2

    Which of the following AWS services are serverless? (Choose two.)

    • AAWS Outposts
    • BAmazon EC2
    • CAmazon Elastic Kubernetes Service (Amazon EKS)
    • DAWS Fargate
    • EAWS Lambda

    Show answer

    Correct answer: D, E

    How others answered

    • DE100%

    Explanation

    Answer is A & E The AWS services that are considered serverless are: D. AWS Fargate AWS Fargate is a serverless compute engine for containers that allows you to run containers without managing the underlying infrastructure. E. AWS Lambda AWS Lambda is a fully serverless compute service that allows you to run code without provisioning or managing servers. It automatically scales your applications in response to incoming traffic.

    Adapted from community discussion by Aghajee · 2024-01-10 · 4 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    Supporting references

    • AWS documentation
    • AWS documentation
    • AWS documentation
    • AWS documentation

    View community discussion3

    Candidate context

    Question 22 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by CLF-C02 or CertExamHQ.

    1. A

       Aghajee

       2024-01-10

       4 upvotes

       Answer is A & E The AWS services that are considered serverless are: D. AWS Fargate AWS Fargate is a serverless compute engine for containers that allows you to run containers without managing the underlying infrastructure. E. AWS Lambda AWS Lambda is a fully serverless compute service that allows you to run code without provisioning or managing servers. It automatically scales your applications in response to incoming traffic.

    2. B

       BShelat

       2024-01-14

       Selected D, E1 upvote

       https://docs.aws.amazon.com/AmazonECS/latest/userguide/what-is-fargate.html https://docs.aws.amazon.com/lambda/latest/dg/welcome.html

    3. P

       petercorn

       2024-01-11

       Selected D, E1 upvote

       https://aws.amazon.com/fargate/ https://aws.amazon.com/lambda/

23. Question 23 of 25

    Which option is a customer responsibility when using Amazon DynamoDB under the AWS Shared Responsibility Model?

    • APhysical security of DynamoDB
    • BPatching of DynamoDB
    • CAccess to DynamoDB tables
    • DEncryption of data at rest in DynamoDB

    Show answer

    Correct answer: C

    How others answered

    • C88%

    Explanation

    based on docs, AWS DynamoDB is automatically encrypted your data as default (but RDS you must turn on this feature by your self) ref: https://docs.aws.amazon.com/amazondynamodb/latest/developerguide/EncryptionAtRest.html ref: https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/Overview.Encryption.html#Overview.Encryption.Determining

    Adapted from community discussion by James_Srm · 2024-02-09 · 22 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    Supporting references

    • AWS documentation
    • AWS documentation
    • AWS documentation
    • AWS documentation

    View community discussion4

    Candidate context

    Question 23 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by CLF-C02 or CertExamHQ.

    1. J

       James_Srm

       2024-02-09

       Selected C22 upvotes

       based on docs, AWS DynamoDB is automatically encrypted your data as default (but RDS you must turn on this feature by your self) ref: https://docs.aws.amazon.com/amazondynamodb/latest/developerguide/EncryptionAtRest.html ref: https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/Overview.Encryption.html#Overview.Encryption.Determining

    2. G

       goushaa

       2024-09-22

       8 upvotes

       Under the AWS Shared Responsibility Model, the customer's responsibilities when using Amazon DynamoDB include: C. Access to DynamoDB tables The customer is responsible for managing and controlling access to their DynamoDB tables. This includes defining appropriate permissions, user access control, and authentication mechanisms to ensure that only authorized users or services can access the tables. The other options are not customer responsibilities: D. Encryption of data at rest in DynamoDB: AWS provides encryption of data at rest as a built-in feature for DynamoDB. The customer can enable encryption for their tables, but AWS handles the actual implementation and management of the encryption process. Therefore, the correct customer responsibility is C. Access to DynamoDB tables.

    3. T

       TheFivePips

       2024-09-22

       Selected C4 upvotes

       Under the AWS Shared Responsibility Model, the responsibility for certain aspects of a service is divided between AWS and the customer. Regarding Amazon DynamoDB: The customer is responsible for: C. Access to DynamoDB tables This means that the customer is responsible for managing and controlling access to their DynamoDB tables, including setting up appropriate IAM (Identity and Access Management) permissions and policies. AWS is responsible for: A. Physical security of DynamoDB B. Patching of DynamoDB D. Encryption of data at rest in DynamoDB AWS takes care of the physical infrastructure, patches and updates the DynamoDB service, and provides encryption mechanisms for data at rest. It's important for customers to be aware of their responsibilities and configure access controls accordingly to ensure the security of their DynamoDB tables.

    4. M

       Mohammed_Kamal

       2023-10-18

       Selected C4 upvotes

       if people say it is D, so this mean aws responsible for access the table !? no sense + data is encrypted at rest by default

24. Question 24 of 25

    A company wants to monitor for misconfigured security groups that are allowing unrestricted access to specific ports. Which AWS service will meet this requirement?

    • AAWS Trusted Advisor
    • BAmazon CloudWatch
    • CAmazon GuardDuty
    • DAWS Health Dashboard

    Show answer

    Correct answer: A

    How others answered

    • A74%
    • C21%

    Only 74% agreed on this answer — treat it as contested rather than settled.

    Explanation

    This question seems to go a little bit too far into the weeds for what this test is supposed to be. The AWS documentation specifically mentions TrustedAdvisor in the article about unrestricted security groups, but Trusted advisor isn't focused on security specifically like GuardDuty. However, GuardDuty doesn't focus on this issue specifically, either. A. AWS Trusted Advisor: A service that provides best practices and recommendations for your AWS environment. It includes security checks, such as identifying security groups with unrestricted access. B. Amazon CloudWatch: A monitoring service, and while it can provide insights into resource utilization and logs, it doesn't specifically focus on identifying misconfigured security groups. C. Amazon GuardDuty: A threat detection service that continuously monitors for malicious activity and unauthorized behavior in AWS accounts. GuardDuty doesn't specifically perform configuration checks for security groups with unrestricted access. D. AWS Health Dashboard: Provides information about the status of AWS services. It doesn't typically perform detailed security configuration checks.

    Adapted from community discussion by TheFivePips · 2024-01-24 · 21 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    Supporting references

    • AWS documentation
    • AWS documentation
    • AWS documentation
    • AWS documentation

    View community discussion4

    Candidate context

    Question 24 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by CLF-C02 or CertExamHQ.

    1. T

       TheFivePips

       2024-01-24

       21 upvotes

       This question seems to go a little bit too far into the weeds for what this test is supposed to be. The AWS documentation specifically mentions TrustedAdvisor in the article about unrestricted security groups, but Trusted advisor isn't focused on security specifically like GuardDuty. However, GuardDuty doesn't focus on this issue specifically, either. A. AWS Trusted Advisor: A service that provides best practices and recommendations for your AWS environment. It includes security checks, such as identifying security groups with unrestricted access. B. Amazon CloudWatch: A monitoring service, and while it can provide insights into resource utilization and logs, it doesn't specifically focus on identifying misconfigured security groups. C. Amazon GuardDuty: A threat detection service that continuously monitors for malicious activity and unauthorized behavior in AWS accounts. GuardDuty doesn't specifically perform configuration checks for security groups with unrestricted access. D. AWS Health Dashboard: Provides information about the status of AWS services. It doesn't typically perform detailed security configuration checks.

    2. M

       morccini

       2023-11-02

       12 upvotes

       Based on Chat GPT: C. Amazon GuardDuty Amazon GuardDuty is an AWS service that is designed to monitor and detect potential security threats in your AWS environment. It helps to identify unusual and unauthorized activities, including misconfigured security groups that may be allowing unrestricted access to specific ports. GuardDuty uses machine learning and threat intelligence to analyze data and generate alerts, making it an effective tool for enhancing the security of your AWS infrastructure. While options like AWS Trusted Advisor and Amazon CloudWatch offer valuable monitoring capabilities, they do not specifically focus on detecting security group misconfigurations. Therefore, in this scenario, Amazon GuardDuty is the most appropriate choice.

    3. J

       James_Srm

       2024-02-10

       Selected A6 upvotes

       A.AWS Trusted Advisor you guy stop arguing and please look at this official docs here: https://docs.aws.amazon.com/awssupport/latest/user/security-checks.html#security-groups-specific-ports-unrestricted check on "Security Groups – Unrestricted Access" and you will see the answer is choice A.

    4. C

       cloudrishank

       2023-12-01

       Selected A4 upvotes

       Security Groups - Specific Ports Unrestricted Checks security groups for rules that allow unrestricted access (0.0.0.0/0) to specific ports. Unrestricted access increases opportunities for malicious activity (hacking, denial-of-service attacks, loss of data). The ports with highest risk are flagged red, and those with less risk are flagged yellow. Ports flagged green are typically used by applications that require unrestricted access, such as HTTP and SMTP. If you have intentionally configured your security groups in this manner, we recommend using additional security measures to secure your infrastructure (such as IP tables).

25. Question 25 of 25

    A company is deploying a machine learning (ML) research project that will require a lot of compute power over several months. The ML processing jobs do not need to run at specific times. Which Amazon EC2 instance purchasing option will meet these requirements at the lowest cost?

    • AOn-Demand Instances
    • BSpot Instances
    • CReserved Instances
    • DDedicated Instances

    Show answer

    Correct answer: B

    How others answered

    • B75%
    • A25%

    Explanation

    Alright guys, I found this. Pretty sure it settles things. https://naterar.medium.com/a-deep-dive-into-aws-instance-types-solving-high-cpu-workload-and-memory-spikes-57e8b5623777 Spot: Spot instances can be valuable for handling sporadic high CPU workloads and memory spikes. >>>However, the inherent uncertainty of availability makes them less reliable for consistent, high-demand workloads.<<< On-Demand: provide the necessary computational horsepower exactly when needed, making them ideal for dealing with unexpected CPU and memory demands. So, yeah, I'd say 'A'.

    Adapted from community discussion by uugla_john · 2023-10-23 · 19 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    Supporting references

    • AWS documentation
    • AWS documentation
    • AWS documentation
    • AWS documentation
    • AWS documentation

    View community discussion4

    Candidate context

    Question 25 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by CLF-C02 or CertExamHQ.

    1. U

       uugla_john

       2023-10-23

       19 upvotes

       Alright guys, I found this. Pretty sure it settles things. https://naterar.medium.com/a-deep-dive-into-aws-instance-types-solving-high-cpu-workload-and-memory-spikes-57e8b5623777 Spot: Spot instances can be valuable for handling sporadic high CPU workloads and memory spikes. >>>However, the inherent uncertainty of availability makes them less reliable for consistent, high-demand workloads.<<< On-Demand: provide the necessary computational horsepower exactly when needed, making them ideal for dealing with unexpected CPU and memory demands. So, yeah, I'd say 'A'.

    2. T

       TheFivePips

       2024-01-24

       Selected B13 upvotes

       A. On-Demand Instances: On-Demand Instances provide the highest level of flexibility and do not require any upfront commitment. On-Demand Instances are suitable for workloads with variable usage patterns, but they are generally more expensive than other purchasing options. B. Spot Instances: Spot Instances are the most cost-effective option for scenarios where the workload is flexible and can be interrupted. Spot Instances allow you to use spare EC2 capacity at a significantly lower cost than On-Demand Instances. Spot Instances are suitable for workloads like batch processing, data analysis, and machine learning jobs that do not require continuous, uninterrupted operation C. Reserved Instances: Reserved Instances involve a commitment to a specific instance type in a particular region for a term of 1 or 3 years. In exchange for this commitment, users receive a significant discount compared to On-Demand Instances. D. Dedicated Instances: Dedicated Instances are instances that run on hardware dedicated to a single customer. They are typically used in scenarios where compliance or regulatory requirements mandate dedicated hardware.

    3. P

       pure_edge

       2024-03-03

       5 upvotes

       Correct answer should be B. On-Demand Instances: These instances allow you to pay for compute capacity by the hour or second, with no long-term commitments. They are suitable for short-term, spiky, or unpredictable workloads that cannot be interrupted. However, they are not the lowest cost option for long-term, predictable workloads. Spot Instances: This is the correct choice. Spot Instances allow you to bid on spare Amazon EC2 computing capacity. Spot Instances are available at up to a 90% discount compared to On-Demand prices. They are ideal for workloads that are not time-sensitive and can tolerate interruptions. Since the company's ML processing jobs do not need to run at specific times, Spot Instances offer a cost-effective solution for long-term, predictable workloads.

    4. T

       tqiu654

       2023-11-17

       Selected B3 upvotes

       GPT: For a machine learning (ML) research project that requires a lot of compute power over several months, where the processing jobs do not need to run at specific times, the most cost-effective Amazon EC2 instance purchasing option would be: B. Spot Instances: Amazon EC2 Spot Instances offer the ability to purchase unused EC2 capacity at a significantly reduced rate compared to On-Demand prices. Spot Instances are ideal for workloads that are flexible in terms of when they can run and can tolerate interruptions, such as batch processing jobs in ML projects. Since your ML processing jobs do not need to run at specific times, Spot Instances can provide the necessary compute power at a lower cost. However, it's important to note that Spot Instances can be terminated by AWS with a two-minute warning if AWS needs the capacity back, so it's vital to design your applications to handle such interruptions.

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

CLF-C02 practice, question 1 of 25