CLF-C02 Practice Test 18 — 15 Questions

Question 1

A company architect is reviewing their architecture for the Operational Excellence pillar of the Well-Architected Framework. Which practice is a core recommendation of this pillar?

Accepted Answer

Perform operations as code using infrastructure-as-code and automated runbooks. The Operational Excellence pillar focuses on running and monitoring systems to deliver business value and continually improve supporting processes and procedures. Performing operations as code—using infrastructure-as-code (e.g., AWS CloudFormation, AWS CDK) and automated runbooks (e.g., AWS Systems Manager Automation)—is a core recommendation because it enables consistent, repeatable, and auditable operations, reducing human error and enabling rapid recovery.

Answer

Encrypt all data at rest using AWS KMS

Answer

Use Reserved Instances to minimize cost

Answer

Deploy across multiple Availability Zones

Question 2

Which AWS Cost Management tool provides daily forecasts and allows customers to track Reserved Instance and Savings Plans utilization and coverage?

Accepted Answer

AWS Cost Explorer. AWS Cost Explorer provides daily cost and usage forecasts for up to 12 months ahead and includes dedicated views for Reserved Instance (RI) and Savings Plans utilization and coverage. This allows customers to monitor how much of their reserved capacity is being used and whether their commitments are adequately covering actual usage.

Answer

AWS Pricing Calculator

Answer

AWS Cost and Usage Report

Answer

AWS Budgets

Question 3

A company needs to connect multiple VPCs and on-premises networks through a single hub, simplifying network management. Which AWS service acts as a cloud router to interconnect these networks?

Accepted Answer

AWS Transit Gateway. AWS Transit Gateway acts as a cloud router, using a hub-and-spoke model to interconnect multiple VPCs and on-premises networks through a single gateway. It simplifies network management by centralizing routing, supporting transitive routing between all attached networks, and integrating with AWS Direct Connect and VPN connections.

Answer

VPC Peering

Answer

AWS Direct Connect

Answer

Internet Gateway

Question 4

Which AWS support feature provides a dedicated technical contact who provides proactive guidance, acts as an advocate for the customer, and helps with architectural reviews?

Accepted Answer

Technical Account Manager (TAM). The Technical Account Manager (TAM) is the correct answer because it is a dedicated AWS support resource, available only with the Enterprise Support plan, that provides proactive guidance, acts as a customer advocate, and conducts architectural reviews. Unlike other support roles, the TAM is assigned to a specific customer to help optimize their AWS environment, coordinate with AWS teams, and ensure the customer gets the most value from their investment.

Answer

AWS Solutions Architect

Answer

AWS IQ Expert

Answer

AWS Support Engineer

Question 5

A company wants to improve the resilience of their Amazon RDS database by ensuring that read traffic is distributed across multiple copies of the database and that a replica can be promoted if the primary fails. Which RDS feature enables this?

Accepted Answer

RDS Read Replicas. Amazon RDS Read Replicas allow you to create one or more copies of your database instance that serve read traffic, offloading read queries from the primary DB instance. In the event of a primary failure, a Read Replica can be manually promoted to a standalone primary instance, providing resilience and continuity for read-heavy workloads. This directly matches the requirement to distribute read traffic and enable replica promotion.

Answer

RDS Multi-AZ deployment

Answer

RDS Automated Backups

Answer

RDS Performance Insights

Question 6

What does the AWS Free Tier offer to new AWS customers?

Accepted Answer

Free usage of certain services up to specified limits for 12 months. The AWS Free Tier is designed to allow new customers to explore and experiment with AWS services at no cost for the first 12 months after sign-up. It includes specific usage limits per service (e.g., 750 hours of Amazon EC2 t2.micro instances per month, 5 GB of Amazon S3 standard storage, etc.), after which standard pay-as-you-go rates apply. This helps customers gain hands-on experience without upfront financial commitment.

Answer

Unlimited free usage of all AWS services forever

Answer

Free usage only for the first month after signup

Answer

Free usage for all services with a credit card on file

Question 7

A company wants to automate the deployment of its infrastructure across multiple AWS environments (development, staging, production). The operations team needs to define all AWS resources (such as Amazon EC2 instances, security groups, and load balancers) in a declarative JSON or YAML template. They want to version control these templates, quickly replicate the entire infrastructure in a new region, and ensure that each deployment is consistent and repeatable. Which AWS service should the company use to achieve this?

Accepted Answer

AWS CloudFormation. AWS CloudFormation is the correct choice because it allows you to define all AWS resources (EC2 instances, security groups, load balancers) in a declarative JSON or YAML template. These templates can be version-controlled, enabling you to replicate the entire infrastructure in a new region by simply reusing the same template, ensuring consistent and repeatable deployments across environments.

Answer

AWS Elastic Beanstalk

Answer

AWS OpsWorks

Answer

AWS CodePipeline

Question 8

Which AWS service provides a fully managed content delivery network (CDN) that caches content at global edge locations to reduce latency for end users?

Accepted Answer

Amazon CloudFront. Amazon CloudFront is a fully managed content delivery network (CDN) that caches static and dynamic content at global edge locations. By serving cached content from the edge closest to the user, CloudFront significantly reduces latency and improves data transfer speeds for end users.

Answer

AWS Global Accelerator

Answer

Amazon Route 53

Answer

AWS Transfer Acceleration

Question 9

Which Amazon S3 feature allows you to automatically delete objects after a specified number of days to reduce storage costs?

Accepted Answer

S3 Lifecycle policies with expiration rules. S3 Lifecycle policies with expiration rules allow you to define rules that automatically delete objects after a specified number of days. This is a cost-optimization feature that helps reduce storage costs by removing data that is no longer needed, such as logs or temporary files, without manual intervention.

Answer

S3 Versioning

Answer

S3 Object Lock

Answer

S3 Block Public Access

Question 10

Which AWS support plan is the minimum level required to access the full set of AWS Trusted Advisor checks?

Accepted Answer

Business. The Business support plan is the minimum level required to access the full set of AWS Trusted Advisor checks. While the Basic and Developer plans provide access to only a subset of seven core checks (such as service limits and security groups), the Business plan unlocks all Trusted Advisor checks, including cost optimization, performance, and fault tolerance checks. The Enterprise plan also provides full access but is not the minimum level required.

Answer

Basic

Answer

Developer

Answer

Enterprise

Question 11

Which AWS service enables developers to add user sign-up, sign-in, and access control to web and mobile applications quickly?

Accepted Answer

Amazon Cognito. Amazon Cognito is the correct AWS service for adding user sign-up, sign-in, and access control to web and mobile applications. It provides identity pools and user pools that handle authentication, authorization, and user management, including social identity providers (e.g., Google, Facebook) and enterprise federation via SAML 2.0 or OIDC. This allows developers to quickly integrate these features without building custom backend infrastructure.

Answer

AWS Directory Service

Answer

AWS IAM Identity Center

Answer

AWS IAM

Question 12

Which AWS service provides a fully managed NoSQL database designed for single-digit millisecond performance at any scale?

Accepted Answer

Amazon DynamoDB. Amazon DynamoDB is a fully managed NoSQL key-value and document database that delivers consistent single-digit millisecond latency at any scale. It achieves this through its distributed architecture, automatic partitioning, and SSD-backed storage, making it ideal for high-traffic web applications, gaming, and IoT workloads.

Answer

Amazon RDS

Answer

Amazon Redshift

Answer

Amazon ElastiCache

Question 13

Which AWS service helps detect unusual API activity and potential security threats by analyzing AWS CloudTrail, VPC Flow Logs, and DNS logs?

Accepted Answer

Amazon GuardDuty. Amazon GuardDuty is a threat detection service that uses machine learning, anomaly detection, and integrated threat intelligence to identify malicious activity. It analyzes data sources including AWS CloudTrail management and data events, VPC Flow Logs, and DNS logs to detect unusual API calls, potentially compromised instances, and other security threats.

Answer

AWS Security Hub

Answer

Amazon Macie

Answer

AWS CloudTrail

Question 14

A company discovers they have 30 EC2 instances running 24/7 that are almost never used — CPU utilisation under 1%. Terminating these idle instances would save thousands of dollars per month. Which AWS Well-Architected Framework pillar encourages this practice?

Accepted Answer

Cost Optimisation. The Cost Optimization pillar of the AWS Well-Architected Framework focuses on avoiding unnecessary costs by matching capacity with demand. Terminating idle EC2 instances (CPU utilization under 1%) directly reduces wasted spend, aligning with the pillar's principle of 'right-sizing' resources and eliminating unused components.

Answer

Operational Excellence

Answer

Reliability

Answer

Performance Efficiency

Question 15

A retail company wants to implement a recommendation engine based on customer purchase history. Which AWS service is designed to provide ML-based personalized recommendations with no ML experience required?

Accepted Answer

Amazon Personalize. Amazon Personalize is a fully managed AWS service that enables developers to build applications with real-time personalized recommendations without requiring any prior machine learning experience. It uses the same technology that powers Amazon.com's recommendation engine, processing customer purchase history to deliver tailored product suggestions.

Answer

Amazon SageMaker

Answer

Amazon Comprehend

Answer

Amazon Rekognition