CLF-C02 Practice Test 17 — 15 Questions

Question 1

A company runs an application with variable workloads. During business hours, they need 10 EC2 instances; overnight they only need 2. Which combination minimizes cost while meeting this requirement?

Accepted Answer

2 Reserved Instances + Auto Scaling with On-Demand for variable demand. It uses 2 Reserved Instances to cover the baseline workload (overnight) at a lower cost, and Auto Scaling with On-Demand Instances to dynamically add capacity during business hours. Reserved Instances provide a significant discount over On-Demand for steady-state usage, while On-Demand instances handle variable demand without upfront commitment, minimizing total cost.

Answer

10 On-Demand Instances running 24/7

Answer

10 Reserved Instances

Answer

10 Spot Instances with Auto Scaling

Question 2

A company has unpredictable, short-lived batch processing workloads that can be interrupted. Which EC2 purchasing option would provide the lowest cost for these workloads?

Accepted Answer

Spot Instances. Spot Instances (Option C) are the correct choice because they offer unused EC2 capacity at steep discounts (up to 90% off On-Demand) and are ideal for fault-tolerant, flexible, short-lived, or interruptible workloads. Since the company's batch processing jobs are unpredictable and can be interrupted, Spot Instances provide the lowest cost while tolerating the risk of termination when AWS needs the capacity back.

Answer

On-Demand Instances

Answer

Reserved Instances (1-year, No Upfront)

Answer

Dedicated Hosts

Question 3

A media company stores frequently accessed video thumbnails in Amazon S3. The thumbnails are read multiple times every day and must be highly available and durable. Which S3 storage class is most appropriate for this workload?

Accepted Answer

S3 Standard. S3 Standard is the most appropriate storage class because it offers high durability (99.999999999%) and high availability (99.99%) with low-latency access, making it ideal for frequently accessed, critical data like video thumbnails that are read multiple times daily. It provides automatic replication across a minimum of three Availability Zones, ensuring both high availability and durability without retrieval fees or minimum storage duration penalties.

Answer

S3 One Zone-IA

Answer

S3 Glacier Flexible Retrieval

Answer

S3 Standard-IA

Question 4

A company must encrypt all data at rest stored in Amazon S3 and wants AWS to manage the encryption keys. Which S3 encryption option requires the least operational overhead?

Accepted Answer

SSE-S3 (Amazon S3-Managed Keys). SSE-S3 uses Amazon S3-managed keys, where AWS fully handles key creation, management, and rotation with no configuration required from the user. This option provides the least operational overhead because you simply enable server-side encryption on the bucket or object, and AWS manages the entire encryption process transparently.

Answer

SSE-C (Customer-Provided Keys)

Answer

SSE-KMS (AWS KMS-Managed Keys)

Answer

Client-side encryption

Question 5

Which AWS service provides a managed way to create, control, and rotate encryption keys used to protect your data?

Accepted Answer

AWS Key Management Service (KMS). AWS Key Management Service (KMS) is the correct answer because it is a fully managed service that allows you to create, control, and rotate encryption keys used to protect your data. KMS integrates with other AWS services to encrypt data at rest and provides centralized key management, including automatic annual rotation for customer-managed keys. It uses hardware security modules (HSMs) to protect key material, but the service itself handles the management and rotation lifecycle.

Answer

AWS Certificate Manager

Answer

AWS Secrets Manager

Answer

AWS CloudHSM

Question 6

A company uses multiple AWS accounts managed under AWS Organizations. Which service allows them to share Reserved Instance discounts and Savings Plans across all accounts in the organization?

Accepted Answer

AWS Organizations with consolidated billing. AWS Organizations with consolidated billing enables you to aggregate usage across all member accounts, allowing Reserved Instance (RI) discounts and Savings Plans to be shared. This means that unused capacity from one account can be applied to reduce costs in another account within the same organization, maximizing overall savings.

Answer

AWS Cost Explorer

Answer

AWS Budgets

Answer

AWS Cost and Usage Report

Question 7

A company manages 15 AWS accounts and wants to centrally deploy and enforce consistent AWS WAF rules, security groups, and Shield Advanced protections across all accounts and regions from a single administrator account. Which AWS service provides this centralised security policy management?

Accepted Answer

AWS Firewall Manager. AWS Firewall Manager is the correct service because it provides centralized security policy management across multiple AWS accounts and regions. It allows an administrator to define and enforce AWS WAF rules, security group rules, and Shield Advanced protections from a single administrator account, ensuring consistent compliance across all accounts in an AWS Organization.

Answer

AWS WAF

Answer

AWS Security Hub

Answer

AWS Shield Advanced

Question 8

Which AWS service provides a concierge-like experience for navigating AWS services and finding the right resources, primarily available to Enterprise Support customers?

Accepted Answer

AWS Support Concierge (Account Team). AWS Support Concierge (Account Team) is a dedicated service provided to Enterprise Support customers that offers a concierge-like experience for navigating AWS services and finding the right resources. It acts as a single point of contact for account-level inquiries, such as billing, account management, and service limit increases, rather than providing technical troubleshooting.

Answer

AWS IQ

Answer

AWS Marketplace

Answer

AWS re:Post

Question 9

A company is evaluating whether to use AWS Compute Savings Plans or EC2 Instance Savings Plans. Which statement correctly describes when EC2 Instance Savings Plans provide the highest discount?

Accepted Answer

When the workload uses a consistent instance family within a single Region. EC2 Instance Savings Plans offer the highest discount (up to 72% compared to On-Demand) because they require a commitment to a specific instance family within a single AWS Region. This allows AWS to optimize capacity planning and pass greater savings to the customer, whereas Compute Savings Plans are more flexible but provide lower discounts (up to 66%).

Answer

When the workload spans multiple AWS Regions

Answer

When the workload uses multiple instance families

Answer

When the workload runs on AWS Fargate

Question 10

Which Amazon EC2 pricing option allows customers to bid for unused EC2 capacity with potential savings of up to 90%, while accepting that instances may be interrupted?

Accepted Answer

Spot Instances. Spot Instances allow customers to bid for unused EC2 capacity, offering potential savings of up to 90% compared to On-Demand pricing. However, these instances can be interrupted (terminated or hibernated) by AWS when the Spot price exceeds the customer's bid or when capacity is needed for On-Demand or Reserved Instance customers, making them ideal for fault-tolerant and flexible workloads.

Answer

On-Demand Instances

Answer

Reserved Instances

Answer

Dedicated Instances

Question 11

A company wants to centralize backup management across multiple AWS services (EC2, RDS, EFS, DynamoDB) from a single place. Which AWS service provides centralized backup management with policy-based scheduling?

Accepted Answer

AWS Backup. AWS Backup is the correct service because it provides a fully managed, centralized backup solution that supports multiple AWS services including EC2, RDS, EFS, and DynamoDB. It allows you to define backup policies with schedule-based automation, retention rules, and lifecycle management from a single console, eliminating the need for custom scripts or per-service manual snapshots.

Answer

Amazon S3 Lifecycle policies

Answer

AWS DataSync

Answer

Amazon EBS Snapshots

Question 12

Which Amazon EC2 Auto Scaling feature ensures a minimum number of healthy instances are always running, replacing terminated instances automatically?

Accepted Answer

Auto Scaling self-healing / instance replacement. Amazon EC2 Auto Scaling's self-healing (instance replacement) feature automatically detects and replaces unhealthy instances to maintain a minimum number of healthy instances. When an instance fails a health check, Auto Scaling terminates it and launches a new one to keep the desired capacity, ensuring high availability without manual intervention.

Answer

Auto Scaling scheduled scaling

Answer

EC2 Auto Recovery

Answer

Predictive scaling

Question 13

A company wants to receive alerts when their AWS spend exceeds a specific threshold. Which AWS service should they use to configure these alerts?

Accepted Answer

AWS Budgets. AWS Budgets allows you to set custom cost and usage budgets and receive alerts when your actual or forecasted spend exceeds a defined threshold. It is the primary service designed for proactive cost monitoring and alerting, supporting both monthly and daily budget tracking with configurable actions such as email notifications or automated responses via AWS Chatbot.

Answer

AWS Cost Explorer

Answer

AWS Cost and Usage Report

Answer

Amazon CloudWatch Billing alarms

Question 14

A company needs to ensure that all data transmitted between their on-premises servers and AWS is encrypted during transfer. Which AWS services provide encryption in transit? (Choose the most complete answer.)

Accepted Answer

AWS Site-to-Site VPN using IPsec encryption. AWS Site-to-Site VPN is the correct choice because it creates an encrypted tunnel between on-premises servers and AWS using IPsec (Internet Protocol Security) protocol suite. IPsec provides confidentiality, integrity, and authentication for all data packets traversing the public internet, ensuring encryption in transit as required by the question.

Answer

AWS Direct Connect with dedicated link guarantees

Answer

Amazon S3 SSE-S3 encryption

Answer

AWS KMS key rotation

Question 15

Which AWS service provides recommendations to help reduce costs, such as identifying idle EC2 instances, underutilized EBS volumes, and unassociated Elastic IPs?

Accepted Answer

AWS Trusted Advisor. AWS Trusted Advisor is the correct service because it provides automated cost optimization recommendations by analyzing your AWS environment. It specifically identifies idle EC2 instances, underutilized EBS volumes, and unassociated Elastic IPs, which are common sources of wasted spend. These checks are part of the cost optimization category within Trusted Advisor, and they help you reduce costs by right-sizing or releasing unused resources.

Answer

AWS Cost Explorer

Answer

Amazon CloudWatch

Answer

AWS Pricing Calculator