CLF-C02 Practice Test 10 — 10 Questions

Question 1

A company operates multiple AWS accounts under AWS Organizations. The security team needs to record all management events (for example, creating Amazon EC2 instances, modifying security groups, and deleting Amazon S3 buckets) across all accounts. The logs must be delivered to a single Amazon S3 bucket that is encrypted with an AWS KMS key and protected from modification. Which AWS feature should the team enable to achieve this centralized logging requirement?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

AWS CloudTrail. AWS CloudTrail is the correct service because it records all management events (API calls) across AWS accounts, and when configured as an organization trail in AWS Organizations, it automatically logs events from all member accounts to a single S3 bucket. This meets the requirement for centralized logging with encryption using AWS KMS and protection from modification via S3 bucket policies and versioning.

Answer

AWS Config

Answer

Amazon CloudWatch Logs

Answer

AWS Audit Manager

Question 2

A company is evaluating a migration of its on-premises virtualized workloads to AWS. The CFO wants to understand the potential cost savings over a three-year period by shifting from capital expenditure (hardware purchases) to operational expenditure (pay-as-you-go). The team needs a tool that can provide a detailed comparison of the total cost of ownership (TCO) for the current on-premises environment versus running the same workloads on AWS, including hardware, software, labor, and facilities costs. Which AWS tool should the team use?

Accepted Answer

AWS Total Cost of Ownership (TCO) Calculator. The AWS Total Cost of Ownership (TCO) Calculator is specifically designed to compare the costs of running workloads on-premises versus on AWS. It allows users to input details about their current on-premises infrastructure—including hardware, software, labor, and facilities—and generates a detailed side-by-side cost comparison over a specified period (e.g., three years). This directly addresses the CFO's need to understand potential savings from shifting from capital expenditure (CapEx) to operational expenditure (OpEx).

Answer

AWS Budgets

Answer

AWS Cost Explorer

Answer

AWS Trusted Advisor

Question 3

A company's website serves static content—such as images, videos, and CSS files—to a global audience. The company wants to reduce load times for users located far from the primary AWS Region where the application is hosted. Which component of the AWS global infrastructure is specifically designed to cache and deliver this content with low latency from locations close to end users?

Accepted Answer

Edge Locations. Edge Locations are part of AWS CloudFront, a content delivery network (CDN) that caches static content (e.g., images, videos, CSS) at geographically distributed points of presence (PoPs). When a user requests content, CloudFront serves it from the nearest Edge Location, reducing latency and improving load times for global audiences. This makes Edge Locations the correct choice for caching and delivering static content with low latency.

Answer

Regional Edge Caches

Answer

Availability Zones

Answer

AWS Outposts

Question 4

A company is planning to deploy a multi-tier web application on AWS. The architecture includes Amazon EC2 instances, an Application Load Balancer, an Amazon RDS database, and security groups. The company wants to define and provision these resources as reusable, version-controlled infrastructure so they can consistently deploy the same environment to development, testing, and production accounts. The solution should allow the team to use JSON or YAML templates to describe the resources and their dependencies. Which AWS service should the company use?

Accepted Answer

AWS CloudFormation. AWS CloudFormation is the correct service because it allows you to define and provision AWS infrastructure as code using JSON or YAML templates. This enables version-controlled, repeatable deployments across multiple accounts (development, testing, production) by describing resources like EC2 instances, ALBs, RDS databases, and security groups along with their dependencies in a declarative template.

Answer

AWS Elastic Beanstalk

Answer

AWS OpsWorks

Answer

AWS CodeDeploy

Question 5

A company stores sensitive customer data in an Amazon S3 bucket. The security team wants to record every GetObject and PutObject API call made against the bucket, including the identity of the caller, the source IP address, and the time of the request. They need to store these records in a separate centralized S3 bucket and analyze them using Amazon Athena for security audits. Which AWS feature should the security team enable?

Accepted Answer

AWS CloudTrail data events. AWS CloudTrail data events (Option C) are the correct choice because they capture detailed information about S3 object-level API operations such as GetObject and PutObject, including the caller identity, source IP address, and request time. These logs can be delivered to a centralized S3 bucket and queried using Amazon Athena for security audits, meeting all stated requirements.

Answer

AWS Config managed rules

Answer

Amazon S3 server access logging

Answer

Amazon GuardDuty

Question 6

A company uses Amazon S3 to store raw data files for a data analytics platform. The company requires that files remain immediately accessible for the first 30 days after upload. After 30 days, files must be automatically moved to a lower-cost storage class for archival access. After 7 years, files must be automatically deleted. The company wants to implement this data management strategy with minimal ongoing effort. Which AWS S3 feature should the company use?

Accepted Answer

S3 Lifecycle policies. S3 Lifecycle policies allow you to define rules that automatically transition objects between storage classes (e.g., from S3 Standard to S3 Glacier Deep Archive) and expire (delete) objects based on object age. This directly meets the requirement to keep files immediately accessible for 30 days, move them to a lower-cost archival class after 30 days, and delete them after 7 years, all with minimal ongoing effort.

Answer

S3 Intelligent-Tiering

Answer

S3 Object Lock

Answer

S3 Versioning

Question 7

A company runs an e-commerce application on a fleet of Amazon EC2 instances. The application experiences unpredictable traffic spikes during flash sales. To handle this, the company configures an Amazon EC2 Auto Scaling group to automatically add instances when CPU utilization exceeds 70% and remove instances when utilization drops below 30%. The company only pays for the instances that are running. This ability to dynamically add and remove compute capacity based on real-time demand best demonstrates which essential characteristic of cloud computing?

Accepted Answer

Elasticity. The scenario describes an Auto Scaling group that adds EC2 instances when CPU exceeds 70% and removes them when it drops below 30%, paying only for running instances. This ability to automatically scale compute capacity up and down in response to real-time demand is the defining characteristic of elasticity in cloud computing, which allows resources to be provisioned and de-provisioned dynamically to match workload fluctuations.

Answer

On-demand self-service

Answer

Measured service

Answer

Resource pooling

Question 8

A company has an on-premises file server that stores large datasets. The company wants to reduce its on-premises storage footprint by moving cold data to AWS. However, users need low-latency access to frequently used files, and the applications must be able to access the data using the standard SMB protocol. The company wants to cache frequently accessed data locally on-premises for low latency, while securely storing all data in Amazon S3. Which AWS service should the company use?

Accepted Answer

AWS Storage Gateway File Gateway. AWS Storage Gateway File Gateway is the correct choice because it provides on-premises caching of frequently accessed files for low-latency access via the standard SMB protocol, while all data is stored durably in Amazon S3. This directly meets the requirement to reduce on-premises storage footprint by moving cold data to AWS, while keeping hot data cached locally for performance.

Answer

Amazon FSx for Windows File Server

Answer

AWS DataSync

Answer

Amazon S3 with AWS Direct Connect

Question 9

A company runs a customer-facing web application on Amazon EC2 instances. The company wants to have access to technical support with a guaranteed response time of 1 hour for critical production system failures. The company also needs access to AWS Trusted Advisor to get cost optimization recommendations. Which AWS Support plan meets these requirements?

Accepted Answer

AWS Business Support. AWS Business Support is the minimum tier that provides a 1-hour response time for critical production system failures and includes full access to AWS Trusted Advisor, which offers cost optimization recommendations. Basic and Developer Support plans either lack Trusted Advisor or have slower response times, making Business Support the correct choice.

Answer

AWS Basic Support

Answer

AWS Developer Support

Answer

AWS Enterprise Support

Question 10

A financial services company runs a high-frequency trading application that must process transactions with sub-millisecond latency. The application must run in the company's own data center to meet strict latency requirements, but the company wants to use the same AWS management APIs, control plane, and tools (such as AWS CloudFormation and Amazon CloudWatch) for consistency across on-premises and cloud environments. The company also needs the ability to seamlessly run Amazon EBS-backed Amazon EC2 instances locally. Which AWS service should the company use to meet these requirements?

Accepted Answer

AWS Outposts. AWS Outposts is correct because it extends AWS infrastructure, services, APIs, and tools to on-premises data centers, enabling the company to run Amazon EBS-backed EC2 instances locally with sub-millisecond latency while using the same AWS management APIs, CloudFormation, and CloudWatch for consistency.

Answer

AWS Wavelength

Answer

AWS Local Zones

Answer

AWS Direct Connect