CLF-C02 Practice Test 17 — 15 Questions

Question 1

A company runs a critical application on Amazon EC2 instances in a specific Availability Zone. The operations team wants to be notified immediately if AWS experiences a service disruption that could affect their instances. They also want a personalized view of the impact of AWS service events on their specific AWS resources. Which AWS tool should they use?

Accepted Answer

AWS Personal Health Dashboard. AWS Personal Health Dashboard (AWS Health) provides a personalized view of the impact of AWS service events on your specific AWS resources and subscriptions. It delivers alerts and remediation guidance when AWS experiences issues that may affect your EC2 instances in a particular Availability Zone, enabling immediate notification and a tailored impact assessment.

Answer

AWS Trusted Advisor

Answer

AWS Service Health Dashboard

Answer

AWS CloudTrail

Question 2

A company runs a critical e-commerce application in a single AWS Region. The architecture team wants to ensure the application remains available even if an entire data center fails. They plan to deploy the application across multiple physically separate and independent locations within that Region. Which component of the AWS global infrastructure should the team use to achieve this goal?

Accepted Answer

Availability Zones. Availability Zones (AZs) are physically separate and independent data centers within an AWS Region, each with isolated power, cooling, and networking. By deploying the application across multiple AZs, the architecture ensures that if one entire data center fails, the application continues to run in the other AZs, meeting the goal of high availability within a single Region.

Answer

Edge Locations

Answer

AWS Local Zones

Answer

AWS Regions

Question 3

A company runs multiple workloads on Amazon EC2 instances. They expect consistent usage for the next three years but want the flexibility to change instance families (for example, from M5 to C5) if performance requirements shift. Which AWS pricing model meets these requirements while providing a significant discount over On-Demand pricing?

Accepted Answer

Compute Savings Plans. Compute Savings Plans (Option B) offer a significant discount (up to 66%) over On-Demand pricing in exchange for a commitment to a consistent amount of compute usage (measured in $/hour) for a 1- or 3-year term. Unlike Reserved Instances, Savings Plans are flexible across instance families (e.g., M5 to C5), regions, OS, and tenancy, making them ideal for workloads that may need to change instance types over time while still receiving a discounted rate.

Answer

Reserved Instances (Standard)

Answer

EC2 Instance Savings Plans

Answer

Spot Instances

Question 4

A company runs hundreds of Amazon EC2 instances for its application. The operations team manually reviews instance utilization metrics once a month to identify instances that are over-provisioned (e.g., using only 10% of CPU) or under-provisioned. They want to automate this analysis and receive rightsizing recommendations to optimize costs and performance. The solution must be natively provided by AWS and must use historical utilization data to generate recommendations. Which AWS service should the company use?

Accepted Answer

AWS Compute Optimizer. AWS Compute Optimizer is the correct choice because it is a native AWS service that uses machine learning to analyze historical utilization metrics (such as CPU, memory, and network) across EC2 instances and automatically generates rightsizing recommendations. It specifically identifies over-provisioned and under-provisioned instances to optimize both cost and performance, meeting the requirement for automated analysis based on historical data.

Answer

AWS Trusted Advisor

Answer

AWS Cost Explorer

Answer

AWS Systems Manager

Question 5

A company runs a combination of Amazon EC2 instances and AWS Lambda functions for its applications. The finance team wants to reduce costs by making a commitment to a consistent amount of compute usage (measured in dollars per hour) for a 1-year term. The team wants the flexibility to change instance families, sizes, and AWS regions, and also wants the commitment to cover both EC2 and Lambda usage. Which AWS pricing option should the team purchase?

Accepted Answer

Compute Savings Plans. Compute Savings Plans provide the required flexibility to change instance families, sizes, and AWS regions, and they automatically apply to both EC2 and Lambda usage. This plan offers a discounted hourly rate in exchange for a 1-year commitment to a consistent amount of compute spend (measured in dollars per hour), making it the only option that meets all the stated requirements.

Answer

EC2 Instance Savings Plans

Answer

Reserved Instances

Answer

Spot Instances

Question 6

A company runs a nightly batch processing job on AWS that takes exactly 2 hours to complete. The company uses a fixed set of Amazon EC2 instances for the job. AWS automatically tracks the number of instance-hours consumed each month and bills the company precisely for that usage. The company does not need to sign a long-term contract or pay for idle resources. Which essential characteristic of cloud computing does this scenario best illustrate?

Accepted Answer

Measured service. The scenario describes AWS automatically tracking and billing precisely for the number of instance-hours consumed each month, without requiring a long-term contract or payment for idle resources. This directly illustrates the 'measured service' characteristic, where cloud resource usage is metered, monitored, and reported transparently, enabling pay-as-you-go billing. The fixed 2-hour nightly job and exact billing per instance-hour confirm that usage is measured and charged accordingly.

Answer

Resource pooling

Answer

Rapid elasticity

Answer

Broad network access

Question 7

A company runs a customer relationship management (CRM) application on a single Amazon RDS for PostgreSQL instance. The application experiences heavy read traffic during business hours, often causing the primary database to become overloaded with SELECT queries. The company needs a solution that offloads read queries to a separate database endpoint and provides automatic failover to a standby database in a different Availability Zone if the primary fails. Which combination of Amazon RDS features should the company use to meet these requirements?

Accepted Answer

Multi-AZ deployment with one or more Read Replicas. Option C is correct because it combines Multi-AZ deployment for automatic failover to a standby in a different Availability Zone with Read Replicas to offload SELECT queries to a separate database endpoint. Multi-AZ ensures high availability by synchronously replicating data to a standby instance, while Read Replicas asynchronously replicate data to handle read-heavy traffic without burdening the primary.

Answer

Multi-AZ deployment only

Answer

Read Replicas only

Answer

Cross-Region Read Replicas only

Question 8

A company runs an e-commerce website on Amazon EC2 instances. The website experiences unpredictable traffic spikes during flash sales and returns to normal traffic levels afterward. To handle this, the company configures an Auto Scaling group that adds EC2 instances when the average CPU utilization exceeds 70% and removes instances when it drops below 30%. Which essential characteristic of cloud computing does this configuration primarily demonstrate?

Accepted Answer

Elasticity. This configuration demonstrates elasticity because it automatically scales EC2 instances up during flash sales (when CPU exceeds 70%) and scales them down when traffic normalizes (CPU below 30%). Elasticity is the ability to dynamically provision and de-provision resources to match demand, which is exactly what Auto Scaling groups with CPU utilization thresholds achieve.

Answer

High availability

Answer

Fault tolerance

Answer

Durability

Question 9

A company runs a large-scale e-commerce platform on AWS and is preparing for a major product launch. The company needs the highest level of AWS support, including a response time of 15 minutes or less for critical business-impacting issues. Additionally, the company wants a designated Technical Account Manager (TAM) to provide proactive guidance and a personalized onboarding plan. Which AWS Support plan should the company select?

Accepted Answer

AWS Enterprise Support. AWS Enterprise Support is the only plan that offers a 15-minute response time for critical business-impacting issues and includes a designated Technical Account Manager (TAM) who provides proactive guidance and a personalized onboarding plan. This meets the company's requirements for the highest level of support during a major product launch.

Answer

AWS Developer Support

Answer

AWS Business Support

Answer

AWS Enterprise On-Ramp

Question 10

A company runs a web application behind an Application Load Balancer (ALB) in a VPC. The application must comply with a security standard that requires encryption in transit for all web traffic. The company needs a service to centrally manage SSL/TLS certificates, automatically renew them, and deploy them to the ALB without manual intervention. Which AWS service should the company use to meet these requirements?

Accepted Answer

AWS Certificate Manager (ACM). AWS Certificate Manager (ACM) is the correct service because it provides centralized management of SSL/TLS certificates, supports automatic renewal for certificates issued by ACM, and can seamlessly deploy these certificates to an Application Load Balancer (ALB) without any manual intervention. This directly meets the requirement for encryption in transit and compliance with the security standard.

Answer

AWS Key Management Service (AWS KMS)

Answer

AWS Secrets Manager

Answer

AWS Identity and Access Management (IAM)

Question 11

A company's development team regularly creates temporary test environments. Each time, they log into the AWS Management Console, select the required Amazon EC2 instance types and storage, and launch the resources without needing to contact AWS support or their IT department. The team also terminates the resources when testing is complete. Which essential characteristic of cloud computing does this scenario best demonstrate?

Accepted Answer

On-demand self-service. The scenario describes the development team provisioning and terminating EC2 instances and storage directly through the AWS Management Console without requiring human intervention from AWS support or their IT department. This is the precise definition of on-demand self-service, one of the five essential characteristics of cloud computing as defined by NIST SP 800-145, where a consumer can unilaterally provision computing capabilities as needed automatically.

Answer

Broad network access

Answer

Resource pooling

Answer

Measured service

Question 12

A company runs a critical web application on a single Amazon EC2 instance in a single Availability Zone. The company wants to design the architecture so that the application continues to operate even if the physical server hosting the instance fails. Which AWS Cloud concept does this design objective primarily address?

Accepted Answer

Fault tolerance. Fault tolerance is the correct concept because the design objective is to ensure continuous operation despite the failure of a physical server hosting the EC2 instance. This is achieved by deploying the application across multiple Availability Zones (AZs) using an Auto Scaling group and an Elastic Load Balancer, so that if one instance or AZ fails, traffic is automatically routed to healthy instances in another AZ. The scenario explicitly focuses on surviving infrastructure failure, which is the core definition of fault tolerance.

Answer

Elasticity

Answer

Scalability

Answer

Cost optimization

Question 13

A company runs multiple workloads on AWS and must ensure that all Amazon S3 buckets have server-side encryption enabled. The compliance team wants to automatically detect any S3 bucket that is created without encryption and receive an alert. They also want to continuously monitor existing buckets for compliance. Which AWS service should they use?

Accepted Answer

AWS Config. AWS Config is the correct service because it provides continuous monitoring and evaluation of AWS resource configurations against desired policies. You can create an AWS Config rule, such as the managed rule 's3-bucket-server-side-encryption-enabled', which automatically checks whether each S3 bucket has server-side encryption enabled. When a non-compliant bucket is detected (either newly created or existing), AWS Config can trigger an Amazon SNS notification to alert the compliance team, meeting both the detection and alerting requirements.

Answer

Amazon GuardDuty

Answer

AWS CloudTrail

Answer

Amazon Inspector

Question 14

A company needs to synchronize data in real time between its on-premises Oracle database and an Amazon RDS MySQL instance during a migration. Which AWS service handles ongoing data replication between heterogeneous databases?

Accepted Answer

AWS Database Migration Service (DMS). AWS Database Migration Service (DMS) is the correct choice because it supports ongoing replication (change data capture, CDC) from an on-premises Oracle database to an Amazon RDS MySQL instance, even when the source and target are heterogeneous database engines. DMS uses a replication instance to read the source database's transaction logs and apply changes in near real time to the target, making it ideal for continuous synchronization during a migration.

Answer

AWS DataSync

Answer

AWS Snowball

Answer

Amazon Kinesis Data Streams

Question 15

A company runs a web application on Amazon EC2 instances that accepts user uploads. The uploads need to be processed by a backend service that performs virus scanning and thumbnail generation. The backend processing can take up to 30 seconds per upload. Users should not experience delays when submitting their files. The company wants to decouple the web tier from the processing tier so that the web application can immediately return a response to the user while the processing happens asynchronously. The solution must be fully managed, durable, and scale automatically with demand. Which AWS service should the company use?

Accepted Answer

Amazon Simple Queue Service (Amazon SQS). Amazon SQS is the correct choice because it provides a fully managed, durable, and scalable message queue that decouples the web tier from the processing tier. When a user uploads a file, the web application can immediately return a response after sending a message to an SQS queue, while the backend service polls the queue and processes the upload asynchronously, handling the up-to-30-second processing time without blocking the user.

Answer

Amazon Simple Notification Service (Amazon SNS)

Answer

Amazon Kinesis Data Streams

Answer

Amazon MQ