CLF-C02 Practice Test 13 — 15 Questions

Question 1

A company is evaluating a move to the AWS Cloud. The finance team learns that AWS can offer lower per-unit prices for compute and storage because AWS purchases hardware in very large volumes and operates at a massive scale. This cost advantage, which is then passed on to customers, is a direct benefit of which fundamental cloud computing concept?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Economies of scale. The scenario describes AWS leveraging its massive purchasing power to negotiate lower hardware costs, which are then passed to customers as lower per-unit prices. This is the direct definition of economies of scale, a fundamental cloud concept where average costs decrease as the scale of operations increases. Elasticity, high availability, and resource pooling are distinct concepts that do not inherently create the cost advantage described.

Answer

Elasticity

Answer

High availability

Answer

Resource pooling

Question 2

A company wants to create RESTful APIs that serve as the front door to their backend Lambda functions and EC2 services. They need features including API key management, throttling to protect backends from overload, and usage plan enforcement. Which AWS service provides this?

Accepted Answer

Amazon API Gateway. Amazon API Gateway is a fully managed service that makes it easy for developers to create, publish, maintain, monitor, and secure RESTful APIs at any scale. It directly provides built-in API key management, throttling (rate limiting and burst limits), and usage plan enforcement to protect backend services like Lambda functions and EC2 instances from overload. These features are core to API Gateway's functionality, making it the correct choice for acting as the front door to the described backend resources.

Answer

Amazon CloudFront

Answer

AWS Direct Connect

Answer

Amazon Route 53

Question 3

A company is developing a microservices application on AWS. The application has multiple independent services that must communicate asynchronously. The company needs a fully managed service to reliably store and deliver messages between these services, ensuring that each message is processed at least once and allowing the services to scale independently. Which AWS service should the company use?

Accepted Answer

Amazon Simple Queue Service (SQS). Amazon Simple Queue Service (SQS) is a fully managed message queuing service that enables asynchronous communication between microservices. It reliably stores messages in queues and ensures each message is delivered at least once, allowing services to poll and process messages independently, which supports decoupling and independent scaling.

Answer

Amazon Simple Notification Service (SNS)

Answer

Amazon MQ

Answer

Amazon Kinesis Data Streams

Question 4

A security team wants to automatically detect unusual activity in their AWS account, such as EC2 instances communicating with known malicious IP addresses, unusual API calls indicating credential compromise, or cryptocurrency mining activity. Which AWS service uses machine learning to detect these threats?

Accepted Answer

Amazon GuardDuty. Amazon GuardDuty is a threat detection service that uses machine learning, anomaly detection, and integrated threat intelligence to continuously monitor for malicious or unauthorized behavior in AWS accounts and workloads. It specifically analyzes VPC Flow Logs, AWS CloudTrail management and data events, and DNS logs to detect patterns such as EC2 instances communicating with known malicious IP addresses, unusual API calls indicative of credential compromise, and cryptocurrency mining activity. This makes it the correct choice for the described use case.

Answer

Amazon Inspector

Answer

AWS Security Hub

Answer

Amazon Macie

Question 5

A company needs to integrate their on-premises Active Directory with AWS to enable SSO for employees accessing AWS services. Which AWS service provides this federation capability?

Accepted Answer

AWS IAM Identity Center. AWS IAM Identity Center (formerly AWS SSO) is the correct service for integrating on-premises Active Directory with AWS to enable single sign-on (SSO) for employees accessing AWS services. It supports federation via SAML 2.0 or SCIM protocols, allowing you to connect your existing AD identity source and centrally manage user access to multiple AWS accounts and business applications.

Answer

Amazon Cognito

Answer

AWS Directory Service AD Connector

Answer

AWS IAM roles

Question 6

A company is evaluating a migration of its on-premises data center to AWS. The CIO wants a detailed report that compares the total cost of ownership (TCO) of the current on-premises infrastructure versus running the equivalent workloads on AWS. The report should include costs for hardware, software, labor, power, cooling, and facilities. Which AWS tool should the company use to generate this comparison?

Accepted Answer

AWS Total Cost of Ownership (TCO) Calculator. The AWS Total Cost of Ownership (TCO) Calculator is specifically designed to compare the costs of on-premises infrastructure with AWS, including hardware, software, labor, power, cooling, and facilities. It generates a detailed report that breaks down these cost categories, making it the correct tool for the CIO's requirement.

Answer

AWS Pricing Calculator

Answer

AWS Cost Explorer

Answer

AWS Trusted Advisor

Question 7

A solutions architect needs to isolate an application in its own virtual network within AWS, with full control over IP address ranges, subnet definitions, route tables, and internet gateway configuration. Which AWS service provides this capability?

Accepted Answer

Amazon VPC. Amazon VPC (Virtual Private Cloud) enables you to provision a logically isolated section of the AWS cloud where you can define your own IP address range (using CIDR notation, e.g., 10.0.0.0/16), create subnets, configure route tables, and attach an Internet Gateway for public internet access. This gives you full control over the virtual networking environment, exactly matching the requirement.

Answer

Amazon Route 53

Answer

Amazon CloudFront

Answer

AWS Direct Connect

Question 8

A company runs compute-intensive batch processing jobs that require high CPU performance. The workload is not memory-intensive and does not require GPU acceleration. Which Amazon EC2 instance family is the most appropriate choice?

Accepted Answer

Compute optimised (C family). The compute-optimized (C family) EC2 instances are designed for workloads that benefit from high-performance processors, such as batch processing, scientific modeling, and gaming servers. Since the job requires high CPU performance and is not memory-intensive or GPU-accelerated, the C family provides the best price-performance ratio for compute-bound tasks.

Answer

Memory optimised (R family)

Answer

Storage optimised (I family)

Answer

Accelerated computing (P family)

Question 9

A company runs a customer-facing web application on Amazon EC2 instances. The application experiences unpredictable traffic patterns, with occasional spikes during marketing campaigns and lulls at other times. The company configures an Auto Scaling group to automatically add EC2 instances when CPU utilization exceeds 70% and remove instances when it drops below 30%. This ability to scale computing resources up and down in response to demand best represents which essential characteristic of cloud computing?

Accepted Answer

Elasticity. The scenario describes an Auto Scaling group that dynamically adjusts the number of EC2 instances based on CPU utilization thresholds (70% scale-up, 30% scale-down). This ability to automatically provision and de-provision computing resources to match demand is the defining characteristic of elasticity in cloud computing, which allows resources to scale out during spikes and scale in during lulls, optimizing cost and performance.

Answer

High availability

Answer

Security

Answer

Cost management

Question 10

A healthcare company is migrating its application and patient data to AWS. To meet HIPAA requirements, the compliance officer must review and accept the AWS Business Associate Addendum (BAA). Additionally, the auditor requires the company to provide the latest AWS SOC 2 Type II report. The compliance officer needs a single self-service portal to access both documents directly from AWS. Which AWS service should the company use?

Accepted Answer

AWS Artifact. AWS Artifact is the correct service because it provides a self-service portal for on-demand access to AWS compliance reports, including the Business Associate Addendum (BAA) and SOC 2 Type II reports. This directly meets the compliance officer's requirement to review and accept the BAA and provide the latest SOC 2 report from a single AWS portal.

Answer

AWS Config

Answer

AWS Trusted Advisor

Answer

AWS Security Hub

Question 11

A company runs a critical application on Amazon EC2 instances in a specific Availability Zone. The operations team wants to be notified immediately if AWS experiences a service disruption that could affect their instances. They also want a personalized view of the impact of AWS service events on their specific AWS resources. Which AWS tool should they use?

Accepted Answer

AWS Personal Health Dashboard. AWS Personal Health Dashboard (AWS Health) provides a personalized view of the impact of AWS service events on your specific AWS resources and subscriptions. It delivers alerts and remediation guidance when AWS experiences issues that may affect your EC2 instances in a particular Availability Zone, enabling immediate notification and a tailored impact assessment.

Answer

AWS Trusted Advisor

Answer

AWS Service Health Dashboard

Answer

AWS CloudTrail

Question 12

A company wants to run a MySQL database in AWS without managing database software installation, applying patches, setting up backups, or configuring replication for high availability. Which AWS service meets these requirements?

Accepted Answer

Amazon RDS. Amazon RDS is a managed database service that automates database software installation, patching, backup, and replication for high availability. By choosing RDS for MySQL, the company offloads these administrative tasks to AWS, meeting the requirement to avoid manual management of the database software, patches, backups, and replication configuration.

Answer

Amazon EC2 with a self-managed MySQL installation

Answer

Amazon Redshift

Answer

Amazon ElastiCache

Question 13

A company's employees access AWS services using the AWS Management Console from their office laptops, the AWS mobile app on their smartphones, and the AWS CLI from their home computers. Which cloud computing characteristic does this illustrate?

Accepted Answer

Broad network access. Broad network access is the correct answer because the scenario describes employees accessing AWS services from multiple types of devices (office laptops, smartphones, home computers) using different access methods (AWS Management Console, AWS mobile app, AWS CLI). This directly illustrates the cloud characteristic that resources are available over the network and can be accessed by standard protocols (e.g., HTTPS for the console and mobile app, HTTP/HTTPS for CLI API calls) from a wide range of client platforms, including mobile phones, laptops, and workstations.

Answer

Rapid elasticity

Answer

Resource pooling

Answer

Measured service

Question 14

A company's finance team needs to analyze AWS spending in detail. They require a report that includes hourly cost data for each AWS service, each individual resource (e.g., a specific EC2 instance), and any cost allocation tags applied. The team plans to export this data to an Amazon S3 bucket and then import it into a custom business intelligence (BI) analytics dashboard. Which AWS tool should the finance team use to generate this level of detailed cost data?

Accepted Answer

AWS Cost and Usage Report. The AWS Cost and Usage Report (CUR) is the correct tool because it provides the granular, hourly cost data broken down by AWS service, individual resource (e.g., specific EC2 instance IDs), and cost allocation tags. It can be delivered to an S3 bucket for integration with custom BI tools like Amazon QuickSight or third-party dashboards, meeting the finance team's exact requirements.

Answer

AWS Cost Explorer

Answer

AWS Budgets

Answer

AWS Trusted Advisor

Question 15

A healthcare startup is migrating its patient records database to Amazon RDS for PostgreSQL. The company must comply with HIPAA and ensure that all protected health information (PHI) is encrypted at rest and in transit. Which task is the company responsible for under the AWS shared responsibility model?

Accepted Answer

Enabling encryption at rest for the Amazon RDS instance and configuring SSL for connections.. Under the AWS shared responsibility model, the customer is responsible for encryption in transit and at rest for the data they store in AWS services. For Amazon RDS, enabling encryption at rest (via AWS KMS) and configuring SSL/TLS for client connections are customer-side tasks. AWS handles the physical security of data centers and the underlying infrastructure, but the customer must explicitly enable these encryption features to meet HIPAA compliance.

Answer

Encrypting the physical disk drives in the AWS data center that host the database.

Answer

Applying operating system patches to the Amazon RDS database engine.

Answer

Configuring network ACLs to block all traffic except from authorized sources.