CLF-C02 Practice Test 15 — 15 Questions

Question 1

A company migrates its workloads to AWS. After the migration, the company receives a monthly invoice that shows precise charges for each service used, such as the exact number of Amazon EC2 instance hours consumed and the amount of data stored in Amazon S3. The company uses this detailed usage data to allocate costs to different departments. Which essential characteristic of cloud computing does this scenario best demonstrate?

Accepted Answer

Measured service. The scenario describes how the cloud provider meters and reports usage (e.g., EC2 instance hours, S3 storage amounts) and then bills precisely based on that consumption. This is the definition of 'measured service' — one of the five essential characteristics of cloud computing (NIST SP 800-145), where resource usage is monitored, controlled, and reported, providing transparency for both the provider and consumer.

Answer

Broad network access

Answer

Resource pooling

Answer

Rapid elasticity

Question 2

Which AWS service enables you to run relational database workloads with up to 5x the throughput of standard MySQL and 3x the throughput of standard PostgreSQL at a lower price point than commercial databases?

Accepted Answer

Amazon Aurora. Amazon Aurora is a MySQL and PostgreSQL-compatible relational database built for the cloud, offering up to 5x the throughput of standard MySQL and 3x the throughput of standard PostgreSQL. It achieves this performance through a distributed, auto-healing storage subsystem that separates compute from storage, and it is priced lower than commercial databases like Oracle or SQL Server while providing high availability and durability.

Answer

Amazon RDS for MySQL

Answer

Amazon Redshift

Answer

Amazon DynamoDB

Question 3

A company is migrating its workloads to AWS. The IT team is concerned that they will lose visibility into which specific physical server is running their application. A solutions architect explains that AWS abstracts the underlying hardware, allowing customers to focus on their applications without managing physical infrastructure. The architect also notes that AWS pools resources from a large number of data centers to serve multiple customers, and changes the physical location of resources dynamically. Which essential characteristic of cloud computing does this scenario best describe?

Accepted Answer

Resource pooling. The scenario describes AWS pooling compute resources from multiple data centers to serve multiple customers, with the physical location of resources changing dynamically. This directly aligns with the 'resource pooling' characteristic of cloud computing, where the provider's computing resources are pooled to serve multiple consumers using a multi-tenant model, with physical and virtual resources dynamically assigned and reassigned according to consumer demand. The customer has no knowledge or control over the exact physical location of the provided resources (e.g., which specific server runs their application), which matches the concern in the question.

Answer

Rapid elasticity

Answer

Measured service

Answer

On-demand self-service

Question 4

A company wants to deploy a web application and have AWS handle the infrastructure, OS, and runtime — they only want to manage the application code and configuration. Which AWS service provides this experience?

Accepted Answer

AWS Elastic Beanstalk. AWS Elastic Beanstalk is a Platform as a Service (PaaS) offering that automatically handles the provisioning of underlying infrastructure (EC2 instances, load balancers, auto-scaling groups), the operating system, and the runtime environment (e.g., Java, Python, Node.js). The customer only needs to upload their application code and configuration, and Elastic Beanstalk manages the deployment, capacity provisioning, load balancing, and health monitoring, matching the requirement exactly.

Answer

Amazon EC2

Answer

AWS Lambda

Answer

Amazon ECS

Question 5

A company runs a customer-facing web application on Amazon EC2 instances. The company wants to have access to technical support with a guaranteed response time of 1 hour for critical production system failures. The company also needs access to AWS Trusted Advisor to get cost optimization recommendations. Which AWS Support plan meets these requirements?

Accepted Answer

AWS Business Support. AWS Business Support is the minimum tier that provides a 1-hour response time for critical production system failures and includes full access to AWS Trusted Advisor, which offers cost optimization recommendations. Basic and Developer Support plans either lack Trusted Advisor or have slower response times, making Business Support the correct choice.

Answer

AWS Basic Support

Answer

AWS Developer Support

Answer

AWS Enterprise Support

Question 6

A company is planning to migrate its on-premises data center to AWS. The Chief Financial Officer wants to compare the total cost of ownership (TCO) of the current on-premises infrastructure against running equivalent workloads on AWS. The company needs a tool that allows them to input details about their existing servers, storage, and network usage to generate a detailed cost comparison report. Which AWS tool should the company use to meet this requirement?

Accepted Answer

AWS Total Cost of Ownership (TCO) Calculator. The AWS Total Cost of Ownership (TCO) Calculator is specifically designed to compare the costs of on-premises infrastructure with AWS by allowing users to input details about their existing servers, storage, and network usage. It generates a detailed report that highlights potential savings from migrating to AWS, directly addressing the CFO's requirement for a cost comparison.

Answer

AWS Pricing Calculator

Answer

AWS Budgets

Answer

AWS Cost Explorer

Question 7

A company has a compliance requirement that all Amazon S3 buckets must have server-side encryption (SSE) enabled and must block all public access. The company has hundreds of existing S3 buckets and creates new ones regularly. The security team needs a centralized AWS service that can continuously evaluate all buckets against these two rules, automatically detect noncompliant buckets, and then automatically remediate them by enabling SSE and blocking public access. Additionally, the team wants to receive notifications when compliance changes occur. Which AWS service should the security team use?

Accepted Answer

AWS Config with managed rules and automatic remediation. AWS Config with managed rules such as 's3-bucket-server-side-encryption-enabled' and 's3-bucket-public-read-prohibited' can continuously evaluate all S3 buckets against these compliance requirements. When a noncompliant bucket is detected, AWS Config can automatically remediate it using SSM Automation documents (e.g., enabling SSE-S3 or SSE-KMS and applying bucket policies to block public access). Additionally, AWS Config can send notifications via Amazon SNS when compliance changes occur, meeting all stated requirements.

Answer

AWS Security Hub

Answer

AWS IAM Access Analyzer

Answer

Amazon Macie

Question 8

A company plans to migrate a three-tier web application to AWS. The application will run on Amazon EC2 instances, use an Amazon RDS database, and an Application Load Balancer. The CFO needs a detailed monthly cost estimate before migration. The solutions architect needs to model different instance types, storage sizes, and data transfer volumes, and then share the estimate with the finance team. Which AWS service should the solutions architect use to meet these requirements?

Accepted Answer

AWS Pricing Calculator. AWS Pricing Calculator allows the solutions architect to model different EC2 instance types, RDS storage sizes, and data transfer volumes to generate a detailed monthly cost estimate. It provides granular control over pricing assumptions, including reserved vs. on-demand instances, and produces a shareable estimate link for the finance team. This makes it the correct tool for pre-migration cost modeling.

Answer

AWS Cost Explorer

Answer

AWS Budgets

Answer

AWS Cost and Usage Report

Question 9

A company is migrating its on-premises applications to the AWS Cloud. The Chief Security Officer wants to confirm the division of security responsibilities. According to the AWS Shared Responsibility Model, which of the following tasks is the customer's responsibility?

Accepted Answer

Managing network access control lists (ACLs) for the customer's VPC. Option C is correct because managing network access control lists (ACLs) for a customer's VPC is explicitly a customer responsibility under the AWS Shared Responsibility Model. Customers control inbound and outbound traffic at the subnet level by configuring NACLs, which are stateless firewall rules. AWS provides the infrastructure and the VPC service, but the customer must define and manage the ACL rules to enforce network segmentation and security.

Answer

Ensuring the physical security of AWS data centers

Answer

Patching the hypervisor layer that runs Amazon EC2 instances

Answer

Replacing defective hardware components in the AWS global infrastructure

Question 10

A company operates a critical e-commerce platform on AWS that generates significant revenue. The management team requires a dedicated Technical Account Manager (TAM) to provide proactive guidance and operational best practices. Additionally, they need the fastest possible response time for critical system failures, targeting a response within 15 minutes. Which AWS Support plan should the company choose?

Accepted Answer

Enterprise Support. The company requires a dedicated Technical Account Manager (TAM) and the fastest possible response time for critical system failures (15-minute response). Only the Enterprise Support plan includes a designated TAM and provides a 15-minute response time for business-critical system failures. The Enterprise On-Ramp Support plan offers a TAM but has a longer 30-minute response time for critical cases, and the Business Support plan does not include a TAM at all.

Answer

Basic Support

Answer

Business Support

Answer

Enterprise On-Ramp Support

Question 11

A company manages multiple AWS accounts under AWS Organizations. The finance team needs to set a monthly spending limit for each account, receive automatic email alerts when spending reaches 80% of that limit, and also view a graphical dashboard showing historical cost trends across all accounts. Which combination of AWS services should the company use to meet these requirements?

Accepted Answer

AWS Budgets and AWS Cost Explorer. AWS Budgets allows you to set custom monthly spending limits per AWS account and configure alerts (via Amazon SNS or email) when actual or forecasted costs exceed a threshold, such as 80% of the budget. AWS Cost Explorer provides a graphical dashboard with historical cost trends and enables filtering by linked accounts, making it the correct service for visualizing trends across all accounts under AWS Organizations. Together, they satisfy the requirements for per-account limits, email alerts at 80%, and a historical cost dashboard.

Answer

AWS Budgets and Amazon QuickSight

Answer

AWS Cost Explorer and Amazon CloudWatch

Answer

AWS Cost Explorer and AWS Trusted Advisor

Question 12

A company is developing a real-time multiplayer game that requires extremely low latency (under 10ms) for player interactions. The game will be accessed by mobile users on 5G networks in select metropolitan areas. The company wants to run the game server logic as close to the users as possible, leveraging the low latency of 5G and avoiding the round trip to an AWS Region. Which AWS service should the company use to deploy the game server compute at the edge of the 5G network?

Accepted Answer

AWS Wavelength. AWS Wavelength is designed specifically to bring AWS compute and storage services to the edge of 5G networks, embedding AWS infrastructure within telecommunications providers' data centers. This enables sub-10ms latency for mobile users by eliminating the round trip to a regional AWS Region, making it ideal for real-time multiplayer game server logic on 5G.

Answer

AWS Outposts

Answer

AWS Local Zones

Answer

AWS Global Accelerator

Question 13

A company manages 15 AWS accounts through AWS Organizations. The finance team needs to perform custom analysis of monthly costs across all accounts. They want to download a detailed, hourly-level CSV file that breaks down usage and costs by service, by member account, and by user-defined cost allocation tags. The file must be delivered to an Amazon S3 bucket daily, and the team will then query the data using Amazon Athena and create dashboards in Amazon QuickSight. Which AWS feature should they configure to meet these requirements?

Accepted Answer

AWS Cost and Usage Report (CUR). The AWS Cost and Usage Report (CUR) is the only feature that delivers a detailed, hourly-level CSV file with granular breakdowns by service, member account, and user-defined cost allocation tags. It can be automatically published to an S3 bucket daily, enabling downstream analysis with Athena and QuickSight.

Answer

AWS Budgets

Answer

AWS Cost Explorer

Answer

AWS Trusted Advisor

Question 14

A company operates a seasonal e-commerce website. During holiday sales, traffic can increase by 500% within minutes. The company uses AWS Auto Scaling to automatically add Amazon EC2 instances when CPU utilization exceeds a threshold and remove instances during off-peak hours. The company pays only for the compute capacity it actually consumes, with no upfront commitment. This scenario best demonstrates which essential characteristics of cloud computing?

Accepted Answer

Rapid elasticity and measured service. The scenario demonstrates rapid elasticity because the Auto Scaling group can instantly add hundreds of EC2 instances to handle a 500% traffic surge, and then remove them when demand drops. It also demonstrates measured service because the company pays only for the compute capacity actually consumed, with no upfront commitment, which is metered and billed based on usage.

Answer

On-demand self-service and broad network access

Answer

Resource pooling and high availability

Answer

Fault tolerance and disaster recovery

Question 15

A company is migrating an on-premises application to AWS. The application will run on Amazon EC2 instances and use an Amazon RDS for MySQL database. The security team needs to understand which security controls remain the company's responsibility after the migration. Under the AWS Shared Responsibility Model, which of the following is the customer's responsibility?

Accepted Answer

Patching the guest operating system on the Amazon EC2 instances.. Under the AWS Shared Responsibility Model, the customer is responsible for patching the guest operating system on Amazon EC2 instances because EC2 is an Infrastructure as a Service (IaaS) offering where AWS manages the hypervisor and physical infrastructure, but the customer has full control over the OS, applications, and configurations. In contrast, for Amazon RDS, AWS handles patching of the database engine (e.g., MySQL) and the underlying OS, making option A AWS's responsibility. Physical security at AWS data centers is always AWS's responsibility, not the customer's.

Answer

Patching the MySQL database engine for the Amazon RDS instance.

Answer

Providing physical security at the AWS data center facilities.

Answer

Replacing failed network switches in the AWS global network.