CLF-C02 Practice Test 18 — 15 Questions

Question 1

Which Amazon EC2 Auto Scaling feature ensures a minimum number of healthy instances are always running, replacing terminated instances automatically?

Accepted Answer

Auto Scaling self-healing / instance replacement. Amazon EC2 Auto Scaling's self-healing (instance replacement) feature automatically detects and replaces unhealthy instances to maintain a minimum number of healthy instances. When an instance fails a health check, Auto Scaling terminates it and launches a new one to keep the desired capacity, ensuring high availability without manual intervention.

Answer

Auto Scaling scheduled scaling

Answer

EC2 Auto Recovery

Answer

Predictive scaling

Question 2

A company wants to receive alerts when their AWS spend exceeds a specific threshold. Which AWS service should they use to configure these alerts?

Accepted Answer

AWS Budgets. AWS Budgets allows you to set custom cost and usage budgets and receive alerts when your actual or forecasted spend exceeds a defined threshold. It is the primary service designed for proactive cost monitoring and alerting, supporting both monthly and daily budget tracking with configurable actions such as email notifications or automated responses via AWS Chatbot.

Answer

AWS Cost Explorer

Answer

AWS Cost and Usage Report

Answer

Amazon CloudWatch Billing alarms

Question 3

A company needs to ensure that all data transmitted between their on-premises servers and AWS is encrypted during transfer. Which AWS services provide encryption in transit? (Choose the most complete answer.)

Accepted Answer

AWS Site-to-Site VPN using IPsec encryption. AWS Site-to-Site VPN is the correct choice because it creates an encrypted tunnel between on-premises servers and AWS using IPsec (Internet Protocol Security) protocol suite. IPsec provides confidentiality, integrity, and authentication for all data packets traversing the public internet, ensuring encryption in transit as required by the question.

Answer

AWS Direct Connect with dedicated link guarantees

Answer

Amazon S3 SSE-S3 encryption

Answer

AWS KMS key rotation

Question 4

Which AWS service provides recommendations to help reduce costs, such as identifying idle EC2 instances, underutilized EBS volumes, and unassociated Elastic IPs?

Accepted Answer

AWS Trusted Advisor. AWS Trusted Advisor is the correct service because it provides automated cost optimization recommendations by analyzing your AWS environment. It specifically identifies idle EC2 instances, underutilized EBS volumes, and unassociated Elastic IPs, which are common sources of wasted spend. These checks are part of the cost optimization category within Trusted Advisor, and they help you reduce costs by right-sizing or releasing unused resources.

Answer

AWS Cost Explorer

Answer

Amazon CloudWatch

Answer

AWS Pricing Calculator

Question 5

A company architect is reviewing their architecture for the Operational Excellence pillar of the Well-Architected Framework. Which practice is a core recommendation of this pillar?

Accepted Answer

Perform operations as code using infrastructure-as-code and automated runbooks. The Operational Excellence pillar focuses on running and monitoring systems to deliver business value and continually improve supporting processes and procedures. Performing operations as code—using infrastructure-as-code (e.g., AWS CloudFormation, AWS CDK) and automated runbooks (e.g., AWS Systems Manager Automation)—is a core recommendation because it enables consistent, repeatable, and auditable operations, reducing human error and enabling rapid recovery.

Answer

Encrypt all data at rest using AWS KMS

Answer

Use Reserved Instances to minimize cost

Answer

Deploy across multiple Availability Zones

Question 6

Which AWS Cost Management tool provides daily forecasts and allows customers to track Reserved Instance and Savings Plans utilization and coverage?

Accepted Answer

AWS Cost Explorer. AWS Cost Explorer provides daily cost and usage forecasts for up to 12 months ahead and includes dedicated views for Reserved Instance (RI) and Savings Plans utilization and coverage. This allows customers to monitor how much of their reserved capacity is being used and whether their commitments are adequately covering actual usage.

Answer

AWS Pricing Calculator

Answer

AWS Cost and Usage Report

Answer

AWS Budgets

Question 7

Drag and drop the steps to set up an S3 bucket with versioning and public access blocked in the correct order.

Accepted Answer

Create bucket, Enable versioning, Block all public access, Upload objects, Set lifecycle rules. Bucket creation comes first, then enabling versioning, blocking public access, uploading objects, and optionally setting lifecycle rules.

Answer

Create bucket, Upload objects, Enable versioning, Block all public access, Set lifecycle rules

Answer

Create bucket, Block all public access, Enable versioning, Upload objects, Set lifecycle rules

Answer

Upload objects, Create bucket, Enable versioning, Block all public access, Set lifecycle rules

Question 8

A company needs to connect multiple VPCs and on-premises networks through a single hub, simplifying network management. Which AWS service acts as a cloud router to interconnect these networks?

Accepted Answer

AWS Transit Gateway. AWS Transit Gateway acts as a cloud router, using a hub-and-spoke model to interconnect multiple VPCs and on-premises networks through a single gateway. It simplifies network management by centralizing routing, supporting transitive routing between all attached networks, and integrating with AWS Direct Connect and VPN connections.

Answer

VPC Peering

Answer

AWS Direct Connect

Answer

Internet Gateway

Question 9

Which AWS support feature provides a dedicated technical contact who provides proactive guidance, acts as an advocate for the customer, and helps with architectural reviews?

Accepted Answer

Technical Account Manager (TAM). The Technical Account Manager (TAM) is the correct answer because it is a dedicated AWS support resource, available only with the Enterprise Support plan, that provides proactive guidance, acts as a customer advocate, and conducts architectural reviews. Unlike other support roles, the TAM is assigned to a specific customer to help optimize their AWS environment, coordinate with AWS teams, and ensure the customer gets the most value from their investment.

Answer

AWS Solutions Architect

Answer

AWS IQ Expert

Answer

AWS Support Engineer

Question 10

A company wants to improve the resilience of their Amazon RDS database by ensuring that read traffic is distributed across multiple copies of the database and that a replica can be promoted if the primary fails. Which RDS feature enables this?

Accepted Answer

RDS Read Replicas. Amazon RDS Read Replicas allow you to create one or more copies of your database instance that serve read traffic, offloading read queries from the primary DB instance. In the event of a primary failure, a Read Replica can be manually promoted to a standalone primary instance, providing resilience and continuity for read-heavy workloads. This directly matches the requirement to distribute read traffic and enable replica promotion.

Answer

RDS Multi-AZ deployment

Answer

RDS Automated Backups

Answer

RDS Performance Insights

Question 11

What does the AWS Free Tier offer to new AWS customers?

Accepted Answer

Free usage of certain services up to specified limits for 12 months. The AWS Free Tier is designed to allow new customers to explore and experiment with AWS services at no cost for the first 12 months after sign-up. It includes specific usage limits per service (e.g., 750 hours of Amazon EC2 t2.micro instances per month, 5 GB of Amazon S3 standard storage, etc.), after which standard pay-as-you-go rates apply. This helps customers gain hands-on experience without upfront financial commitment.

Answer

Unlimited free usage of all AWS services forever

Answer

Free usage only for the first month after signup

Answer

Free usage for all services with a credit card on file

Question 12

A company wants to automate the deployment of its infrastructure across multiple AWS environments (development, staging, production). The operations team needs to define all AWS resources (such as Amazon EC2 instances, security groups, and load balancers) in a declarative JSON or YAML template. They want to version control these templates, quickly replicate the entire infrastructure in a new region, and ensure that each deployment is consistent and repeatable. Which AWS service should the company use to achieve this?

Accepted Answer

AWS CloudFormation. AWS CloudFormation is the correct choice because it allows you to define all AWS resources (EC2 instances, security groups, load balancers) in a declarative JSON or YAML template. These templates can be version-controlled, enabling you to replicate the entire infrastructure in a new region by simply reusing the same template, ensuring consistent and repeatable deployments across environments.

Answer

AWS Elastic Beanstalk

Answer

AWS OpsWorks

Answer

AWS CodePipeline

Question 13

Which AWS service provides a fully managed content delivery network (CDN) that caches content at global edge locations to reduce latency for end users?

Accepted Answer

Amazon CloudFront. Amazon CloudFront is a fully managed content delivery network (CDN) that caches static and dynamic content at global edge locations. By serving cached content from the edge closest to the user, CloudFront significantly reduces latency and improves data transfer speeds for end users.

Answer

AWS Global Accelerator

Answer

Amazon Route 53

Answer

AWS Transfer Acceleration

Question 14

Which Amazon S3 feature allows you to automatically delete objects after a specified number of days to reduce storage costs?

Accepted Answer

S3 Lifecycle policies with expiration rules. S3 Lifecycle policies with expiration rules allow you to define rules that automatically delete objects after a specified number of days. This is a cost-optimization feature that helps reduce storage costs by removing data that is no longer needed, such as logs or temporary files, without manual intervention.

Answer

S3 Versioning

Answer

S3 Object Lock

Answer

S3 Block Public Access

Question 15

Which AWS support plan is the minimum level required to access the full set of AWS Trusted Advisor checks?

Accepted Answer

Business. The Business support plan is the minimum level required to access the full set of AWS Trusted Advisor checks. While the Basic and Developer plans provide access to only a subset of seven core checks (such as service limits and security groups), the Business plan unlocks all Trusted Advisor checks, including cost optimization, performance, and fault tolerance checks. The Enterprise plan also provides full access but is not the minimum level required.

Answer

Basic

Answer

Developer

Answer

Enterprise