CLF-C02 Practice Test 16 — 15 Questions

Question 1

A company is migrating its on-premises data analytics workload to AWS. Previously, the company had to purchase and maintain dedicated servers with fixed capacity to handle peak workloads, resulting in low utilization during off-peak hours. On AWS, the company can launch compute resources, run the analytics job, and terminate the resources when done. The company only pays for the compute time and storage used during the job. Which essential characteristic of cloud computing does this scenario BEST demonstrate?

Accepted Answer

Measured service. Measured service is the cloud characteristic that enables pay-as-you-go pricing by metering resource usage (compute time, storage) and billing only for what is consumed. In this scenario, the company launches resources for the analytics job, runs it, and terminates them, paying solely for the compute time and storage used — a direct demonstration of metered usage and cost transparency.

Answer

Rapid elasticity

Answer

Resource pooling

Answer

On-demand self-service

Question 2

A company is designing a highly available application that must remain operational even if a single physical data center fails. The application will be deployed in the us-east-1 Region. The company wants to distribute the application across multiple physical locations within the Region, where each location has independent power, cooling, and networking. Which AWS Global Infrastructure component should the company use to meet this requirement?

Accepted Answer

Availability Zone. Availability Zones (AZs) are distinct physical locations within an AWS Region, each with independent power, cooling, and networking, and are interconnected through low-latency links. By deploying the application across multiple AZs, the company ensures high availability and fault tolerance against the failure of a single physical data center. This directly meets the requirement to remain operational even if one physical data center fails.

Answer

AWS Region

Answer

Edge Location

Answer

Local Zone

Question 3

A company operates in three separate AWS accounts: one for development, one for testing, and one for production. The company wants to take advantage of volume pricing discounts across all accounts for services such as Amazon S3 and Amazon EC2. The finance team also wants to view a single, consolidated monthly bill that aggregates charges from all accounts. Which AWS feature should the company implement?

Accepted Answer

AWS Organizations with consolidated billing. AWS Organizations with consolidated billing is the correct feature because it allows the company to combine all three AWS accounts (development, testing, production) into a single organization, enabling volume pricing discounts across accounts for services like Amazon S3 and Amazon EC2. It also aggregates usage from all accounts into a single monthly bill, which the finance team can view. This is the only AWS feature that directly provides both consolidated billing and aggregated usage for pricing benefits.

Answer

AWS Cost Explorer

Answer

AWS Budgets

Answer

AWS Trusted Advisor

Question 4

A company operates a healthcare application on AWS that must comply with HIPAA regulations. The application stores sensitive patient data in Amazon S3. The compliance team requires that all data at rest in S3 be encrypted with a key that the company manages. The company also needs the ability to automatically rotate the encryption key every 365 days and to audit all key usage through AWS CloudTrail. Which AWS service should the company use to meet these requirements?

Accepted Answer

AWS Key Management Service (KMS) with a customer managed key. AWS KMS with a customer managed key (CMK) allows the company to create and control the encryption key used for S3 server-side encryption, meeting HIPAA's requirement for customer-managed keys. KMS supports automatic key rotation every 365 days (or custom period) and integrates with AWS CloudTrail to log every key usage (e.g., Decrypt, Encrypt API calls) for auditing. This combination satisfies all stated requirements: encryption at rest, customer-managed key, automatic rotation, and auditability.

Answer

AWS Certificate Manager (ACM)

Answer

AWS CloudHSM

Answer

Amazon S3 server-side encryption with S3-managed keys (SSE-S3)

Question 5

A company operates five separate AWS accounts for different business units. The finance team wants to aggregate the usage across all accounts to benefit from volume pricing discounts and to receive a single monthly bill. The company does not need to centrally manage permissions or apply service control policies at this time. Which AWS feature should the company use to meet these requirements?

Accepted Answer

Consolidated Billing through AWS Organizations. AWS Organizations provides Consolidated Billing, which allows a company to aggregate usage across multiple AWS accounts into a single monthly bill. This enables the finance team to benefit from volume pricing discounts because AWS combines usage across all accounts, potentially lowering the overall cost tier. The requirement does not include centralized permission management or service control policies, so the basic Consolidated Billing feature of AWS Organizations is sufficient.

Answer

AWS Cost Explorer

Answer

AWS Budgets

Answer

AWS Trusted Advisor

Question 6

A company runs a containerized application on Amazon ECS using a mix of Amazon EC2 On-Demand instances from different instance families (e.g., M5, C5, R5). The workload is consistent, and the company is willing to commit to a 1-year term to reduce costs. However, the team expects to change instance families within the next 12 months due to new hardware requirements and wants the flexibility to switch instance families without incurring a financial penalty. Which pricing option best meets these requirements?

Accepted Answer

Compute Savings Plans. Compute Savings Plans provide the most flexibility by applying a discounted hourly commitment (e.g., $10/hour) across any EC2 instance family, region, OS, or tenancy, and also cover Fargate and Lambda usage. Since the company expects to change instance families within the 1-year term, Compute Savings Plans allow switching without penalty, unlike instance-specific plans.

Answer

EC2 Instance Savings Plans

Answer

Convertible Reserved Instances

Answer

Standard Reserved Instances

Question 7

A company manages multiple AWS accounts under AWS Organizations. The security team wants to enforce a policy that prohibits launching Amazon EC2 instances of instance families g (GPU) and p (GPU) across all accounts to control costs. The team needs a centralized method to block these instance types at the organization level, and the policy must be applied proactively before any instance is launched. Which AWS solution should the team use?

Accepted Answer

Apply an AWS Organizations Service Control Policy (SCP) that denies ec2:RunInstances when the requested instance type belongs to the g or p families.. Option C is correct because AWS Organizations Service Control Policies (SCPs) are the only centralized mechanism that can proactively deny API actions across all accounts in the organization before the action occurs. By creating an SCP with a Deny effect on ec2:RunInstances where the instance type matches 'g*' or 'p*', the security team enforces the restriction at the root, OU, or account level, preventing any user or role from launching GPU instances regardless of their IAM permissions.

Answer

Create an AWS IAM policy with a Deny effect for ec2:RunInstances where the instance type starts with 'g' or 'p' and attach it to a specific IAM role in each account.

Answer

Use an AWS Config managed rule to detect GPU instance launches and trigger an auto-remediation action that terminates the instances.

Answer

Use AWS Trusted Advisor cost optimization checks to identify GPU instances and then manually disable them in each account.

Question 8

A company runs a batch processing job on a single Amazon EC2 instance. The job takes 10 hours to complete. The company needs to reduce the processing time to under 1 hour to meet a new business requirement. The data can be split into independent chunks that can be processed in parallel. Which cloud computing concept would most directly enable the company to achieve this goal?

Accepted Answer

Scalability. Scalability is the correct answer because it refers to the ability to increase resources to handle increased load. By scaling horizontally (adding more EC2 instances) and processing the independent data chunks in parallel, the batch job can be completed in under 1 hour instead of 10 hours.

Answer

Elasticity

Answer

High availability

Answer

Fault tolerance

Question 9

A company is designing a highly available application on AWS. The architect plans to deploy application instances across multiple Availability Zones and implement health checks to automatically route traffic away from failed instances. These design decisions primarily contribute to which pillar of the AWS Well-Architected Framework?

Accepted Answer

Reliability. Deploying application instances across multiple Availability Zones and using health checks to route traffic away from failed instances directly increases the system's ability to recover from failures and remain operational. This aligns with the Reliability pillar of the AWS Well-Architected Framework, which focuses on ensuring a workload performs its intended function correctly and consistently when expected, including the ability to recover from infrastructure or service disruptions.

Answer

Operational Excellence

Answer

Security

Answer

Performance Efficiency

Question 10

A company is evaluating a migration of its on-premises virtualized workloads to AWS. The CFO wants to understand the potential cost savings over a three-year period by shifting from capital expenditure (hardware purchases) to operational expenditure (pay-as-you-go). The team needs a tool that can provide a detailed comparison of the total cost of ownership (TCO) for the current on-premises environment versus running the same workloads on AWS, including hardware, software, labor, and facilities costs. Which AWS tool should the team use?

Accepted Answer

AWS Total Cost of Ownership (TCO) Calculator. The AWS Total Cost of Ownership (TCO) Calculator is specifically designed to compare the costs of running workloads on-premises versus on AWS. It allows users to input details about their current on-premises infrastructure—including hardware, software, labor, and facilities—and generates a detailed side-by-side cost comparison over a specified period (e.g., three years). This directly addresses the CFO's need to understand potential savings from shifting from capital expenditure (CapEx) to operational expenditure (OpEx).

Answer

AWS Budgets

Answer

AWS Cost Explorer

Answer

AWS Trusted Advisor

Question 11

A company plans to deploy a multi-tier web application on AWS. The architecture includes Amazon EC2 instances for the web and application tiers, an Application Load Balancer for traffic distribution, and an Amazon RDS database for the data tier. The company wants to automate the provisioning and configuration of all these AWS resources in a repeatable and predictable manner. The solution should allow the infrastructure definition to be stored in a version control system and be used to create identical environments for development, testing, and production with minimal manual effort. Which AWS service should the company use to define and manage the infrastructure as code?

Accepted Answer

AWS CloudFormation. AWS CloudFormation is the correct service because it enables you to define your entire multi-tier infrastructure—EC2 instances, Application Load Balancer, and RDS database—as a declarative JSON or YAML template. This template can be stored in a version control system and used to provision identical environments across development, testing, and production with a single API call, ensuring repeatability and predictability.

Answer

AWS Elastic Beanstalk

Answer

AWS OpsWorks

Answer

AWS CodeDeploy

Question 12

A company manages a web application that consists of Amazon EC2 instances, an Amazon RDS database, and an Amazon S3 bucket. The team deploys the application to separate development, test, and production environments. Currently, the team manually configures each environment, which has led to configuration drift and deployment errors. The company wants to define the entire infrastructure as code, store the definition in a version control system, and deploy it consistently across all environments with a single template. Which AWS service should the company use to meet these requirements?

Accepted Answer

AWS CloudFormation. AWS CloudFormation is the correct choice because it enables you to define your entire infrastructure—including EC2 instances, RDS databases, and S3 buckets—as code in a JSON or YAML template. This template can be stored in a version control system and deployed consistently across development, test, and production environments using a single template, eliminating configuration drift and manual errors.

Answer

AWS Elastic Beanstalk

Answer

AWS OpsWorks

Answer

AWS CodeDeploy

Question 13

A company runs a batch processing application in Docker containers. The application runs for several hours at a time and requires significant CPU and memory resources. The company wants to run these containers on AWS without provisioning or managing any underlying EC2 instances or cluster capacity. They need a service that automatically scales based on demand and charges only for the resources consumed by the containers. Which AWS service should the company use?

Accepted Answer

AWS Fargate. AWS Fargate is the correct choice because it is a serverless compute engine for containers that eliminates the need to provision or manage EC2 instances. It automatically scales based on demand and charges only for the CPU and memory resources consumed by the containers, which aligns perfectly with the requirement to run long-running batch processing without managing underlying infrastructure.

Answer

Amazon ECS with EC2 launch type

Answer

Amazon EKS with managed node groups

Answer

AWS Lambda

Question 14

A company is planning to migrate its on-premises database and web application to AWS. The solutions architect needs to provide a detailed monthly cost estimate for the AWS resources that will be used, including Amazon EC2 instances, Amazon RDS database instances, and Amazon S3 storage. The architect wants to specify instance types, storage sizes, data transfer amounts, and other parameters to get a precise estimate before building the environment. Which AWS tool should the architect use?

Accepted Answer

AWS Pricing Calculator. The AWS Pricing Calculator (formerly Simple Monthly Calculator) allows users to specify exact instance types, storage sizes, data transfer amounts, and other parameters for services like EC2, RDS, and S3 to generate a detailed monthly cost estimate before provisioning resources. This makes it the correct tool for the architect's requirement of a precise, pre-build cost estimate.

Answer

AWS Cost Explorer

Answer

AWS Budgets

Answer

AWS Total Cost of Ownership (TCO) Calculator

Question 15

A company is preparing for an annual compliance audit. The auditor requests a copy of the AWS SOC 2 Type II report to review AWS's controls. Which AWS service or tool can the company use to obtain this report?

Accepted Answer

AWS Artifact. AWS Artifact is the correct service because it provides on-demand access to AWS compliance reports, including SOC reports, PCI reports, and ISO certifications. The company can use AWS Artifact to download the SOC 2 Type II report directly, fulfilling the auditor's request without needing to contact AWS support.

Answer

AWS Config

Answer

AWS Trusted Advisor

Answer

AWS Security Hub