CLF-C02 Practice Test 19 — 15 Questions

Question 1

Which AWS service enables developers to add user sign-up, sign-in, and access control to web and mobile applications quickly?

Accepted Answer

Amazon Cognito. Amazon Cognito is the correct AWS service for adding user sign-up, sign-in, and access control to web and mobile applications. It provides identity pools and user pools that handle authentication, authorization, and user management, including social identity providers (e.g., Google, Facebook) and enterprise federation via SAML 2.0 or OIDC. This allows developers to quickly integrate these features without building custom backend infrastructure.

Answer

AWS Directory Service

Answer

AWS IAM Identity Center

Answer

AWS IAM

Question 2

Which AWS service provides a fully managed NoSQL database designed for single-digit millisecond performance at any scale?

Accepted Answer

Amazon DynamoDB. Amazon DynamoDB is a fully managed NoSQL key-value and document database that delivers consistent single-digit millisecond latency at any scale. It achieves this through its distributed architecture, automatic partitioning, and SSD-backed storage, making it ideal for high-traffic web applications, gaming, and IoT workloads.

Answer

Amazon RDS

Answer

Amazon Redshift

Answer

Amazon ElastiCache

Question 3

Which AWS service helps detect unusual API activity and potential security threats by analyzing AWS CloudTrail, VPC Flow Logs, and DNS logs?

Accepted Answer

Amazon GuardDuty. Amazon GuardDuty is a threat detection service that uses machine learning, anomaly detection, and integrated threat intelligence to identify malicious activity. It analyzes data sources including AWS CloudTrail management and data events, VPC Flow Logs, and DNS logs to detect unusual API calls, potentially compromised instances, and other security threats.

Answer

AWS Security Hub

Answer

Amazon Macie

Answer

AWS CloudTrail

Question 4

A company discovers they have 30 EC2 instances running 24/7 that are almost never used — CPU utilisation under 1%. Terminating these idle instances would save thousands of dollars per month. Which AWS Well-Architected Framework pillar encourages this practice?

Accepted Answer

Cost Optimisation. The Cost Optimization pillar of the AWS Well-Architected Framework focuses on avoiding unnecessary costs by matching capacity with demand. Terminating idle EC2 instances (CPU utilization under 1%) directly reduces wasted spend, aligning with the pillar's principle of 'right-sizing' resources and eliminating unused components.

Answer

Operational Excellence

Answer

Reliability

Answer

Performance Efficiency

Question 5

A retail company wants to implement a recommendation engine based on customer purchase history. Which AWS service is designed to provide ML-based personalized recommendations with no ML experience required?

Accepted Answer

Amazon Personalize. Amazon Personalize is a fully managed AWS service that enables developers to build applications with real-time personalized recommendations without requiring any prior machine learning experience. It uses the same technology that powers Amazon.com's recommendation engine, processing customer purchase history to deliver tailored product suggestions.

Answer

Amazon SageMaker

Answer

Amazon Comprehend

Answer

Amazon Rekognition

Question 6

A company has a hybrid cloud environment with both on-premises servers and AWS. They want a consistent management experience across both environments. Which AWS service extends the same AWS Systems Manager capabilities to non-AWS servers?

Accepted Answer

AWS Systems Manager with hybrid activations. AWS Systems Manager with hybrid activations allows you to manage on-premises servers and other non-AWS compute resources using the same Systems Manager capabilities (e.g., Run Command, Patch Manager, Inventory) as you use for EC2 instances. By installing the SSM Agent on the non-AWS server and registering it via a hybrid activation, the server appears as a managed instance in Systems Manager, providing a consistent management plane across hybrid environments.

Answer

AWS Outposts

Answer

AWS Direct Connect

Answer

Amazon EC2 Systems Manager

Question 7

A company uses AWS Support and wants to know which plan provides the fastest response time for a business-critical system outage causing complete service disruption.

Accepted Answer

Enterprise Support (15-minute response). AWS Support plans define response times based on severity. For a business-critical system outage (severity-critical, complete service disruption), Enterprise Support provides a 15-minute response time, which is the fastest available. This is explicitly documented in AWS Support plan details, making option C correct.

Answer

Business Support (1-hour response)

Answer

Enterprise On-Ramp (30-minute response)

Answer

Developer Support (12-hour response)

Question 8

A development team is building a serverless image processing application. When a user uploads an image to Amazon S3, the application must perform three sequential steps: first, resize the image; second, generate a thumbnail; third, store metadata in Amazon DynamoDB. The team wants to define this workflow as a visual state machine, handle errors with retries, and manage the execution flow without writing custom orchestration code. Which AWS service should the team use?

Accepted Answer

AWS Step Functions. AWS Step Functions is the correct choice because it allows you to define a visual state machine that orchestrates three sequential steps (resize, thumbnail, metadata storage) without writing custom orchestration code. It natively supports error handling with retries and manages execution flow, making it ideal for serverless workflows that require coordination across multiple AWS services like Lambda and DynamoDB.

Answer

Amazon Simple Queue Service (SQS)

Answer

Amazon EventBridge

Answer

AWS Lambda

Question 9

Drag and drop the steps to set up a cross-region read replica for Amazon RDS in the correct order.

Accepted Answer

Enable automatic backups on the source DB instance, then create the read replica in the target region, then wait for the replica to be created and synchronized, then optionally promote the replica to a standalone DB instance.. Cross-region read replica: enable backups, configure, create replica, wait, and optionally promote.

Answer

Create the read replica in the target region, then enable automatic backups on the source DB instance, then wait for the replica to be created and synchronized, then optionally promote the replica to a standalone DB instance.

Answer

Enable automatic backups on the source DB instance, then wait for the replica to be created and synchronized, then create the read replica in the target region, then optionally promote the replica to a standalone DB instance.

Answer

Create the read replica in the target region, then wait for the replica to be created and synchronized, then enable automatic backups on the source DB instance, then optionally promote the replica to a standalone DB instance.

Question 10

Which AWS service provides a fully managed NoSQL database with single-digit millisecond latency at any scale?

Accepted Answer

Amazon DynamoDB. Amazon DynamoDB is a fully managed NoSQL key-value and document database that delivers consistent single-digit millisecond latency at any scale. It achieves this through its distributed architecture, automatic partitioning, and SSD-backed storage, making it ideal for high-traffic applications like gaming, ad tech, and IoT.

Answer

Amazon RDS

Answer

Amazon ElastiCache

Answer

Amazon Redshift

Question 11

A customer is evaluating moving to AWS and asks about the total cost of ownership (TCO) benefits. Which of the following is NOT a factor that reduces TCO when migrating to AWS?

Accepted Answer

Staff training costs for cloud technologies. Staff training costs for cloud technologies are an additional investment required when migrating to AWS, not a factor that reduces total cost of ownership (TCO). While AWS reduces hardware and facility costs, training represents a new expense for upskilling teams on cloud services like EC2, S3, and IAM, which increases rather than decreases TCO.

Answer

Eliminating hardware refresh cycles

Answer

Reducing data center facility costs

Answer

Pay-as-you-go pricing model

Question 12

Which AWS service provides a managed graph database for storing and querying highly connected data?

Accepted Answer

Amazon Neptune. Amazon Neptune is a fully managed graph database service optimized for storing and querying highly connected data. It supports both property graph models (using Apache TinkerPop Gremlin) and RDF models (using SPARQL), making it ideal for use cases like social networks, fraud detection, and knowledge graphs.

Answer

Amazon DocumentDB

Answer

Amazon Keyspaces

Answer

Amazon QLDB

Question 13

Match each AWS pricing concept to its definition.

Accepted Answer

On-Demand: Pay for compute capacity by the hour or second with no long-term commitments.. On-Demand is pay-as-you-go, Reserved Instances require a term commitment, Spot Instances are interruptible, and Savings Plans offer flexibility. Common confusions include mixing up On-Demand with Spot Instances.

Answer

On-Demand: Pay a low price but instances can be terminated.

Answer

Reserved Instances: Pay only for resources used per second.

Question 14

A company runs a nightly batch processing job on a single on-premises server. The job takes 4 hours to complete, and if the server fails during processing, the job must start over from the beginning. The company is migrating this workload to AWS. The solutions architect proposes running the job across multiple Amazon EC2 instances that process different chunks of data simultaneously. The architect also plans to configure the system so that if any single instance fails, its chunk is automatically reprocessed by another instance, ensuring the overall job still completes. Which benefit of cloud computing does this architecture primarily demonstrate?

Accepted Answer

Horizontal scaling. The architecture distributes the workload across multiple EC2 instances, each processing a separate chunk of data. This is the definition of horizontal scaling (scaling out). If an instance fails, its chunk is automatically reprocessed by another instance, which demonstrates the fault tolerance and parallelism that horizontal scaling enables, not just adding more capacity.

Answer

Elasticity

Answer

High availability

Answer

Global reach

Question 15

A company runs a multi-tier web application on Amazon EC2 instances. The security team wants to continuously monitor the configuration of the EC2 security groups to ensure that no security group allows inbound SSH (port 22) access from the entire internet (0.0.0.0/0). If a security group is modified to allow such access, the company must be automatically notified and provided with a detailed record of the change, including the user who made the change. Which combination of AWS services should the company use to meet these requirements?

Accepted Answer

AWS Config with a managed rule to check for unrestricted SSH access, and Amazon Simple Notification Service (Amazon SNS) to send notifications when the rule is non-compliant.. AWS Config continuously monitors the configuration of AWS resources, including security groups, and can evaluate them against managed rules such as 'restricted-ssh' (which checks that inbound SSH traffic is not allowed from 0.0.0.0/0). When a security group becomes non-compliant, AWS Config can trigger an Amazon SNS notification to alert the security team, and the detailed configuration history (including the user who made the change via CloudTrail integration) is available in the AWS Config timeline. This combination directly meets the requirements for continuous monitoring, automatic notification, and a detailed record of the change.

Answer

AWS CloudTrail to log all API calls, and Amazon CloudWatch Logs to analyze the logs for security group modifications and trigger a notification.

Answer

AWS Trusted Advisor to check for security groups with unrestricted SSH access on a periodic basis, and Amazon Simple Email Service (Amazon SES) to send email alerts.

Answer

AWS Systems Manager Inventory to collect configuration data from EC2 instances, and Amazon CloudWatch Events to trigger a Lambda function that checks security group rules.