CLF-C02 Practice Test 22 — 15 Questions

Question 1

A company runs a monthly batch data analytics job that requires 50 compute instances for exactly 2 hours. On AWS, the company launches 50 Amazon EC2 instances, runs the job, and then terminates all instances. The company's AWS bill shows a charge for only 100 instance-hours (50 instances × 2 hours). Which essential characteristic of cloud computing does this billing model best demonstrate?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Measured service. The billing model charges only for the actual compute time consumed (100 instance-hours), which is a direct application of the 'measured service' characteristic. Measured service means cloud providers meter and bill customers based on actual resource usage (e.g., EC2 instance-hours, storage GB-months), enabling pay-as-you-go pricing. In this scenario, the company is charged precisely for the 50 instances × 2 hours of runtime, with no upfront or fixed costs, demonstrating usage-based metering.

Answer

Resource pooling

Answer

On-demand self-service

Answer

Rapid elasticity

Question 2

A company runs a web application on Amazon EC2 instances that accepts user uploads. The uploads need to be processed by a backend service that performs virus scanning and thumbnail generation. The backend processing can take up to 30 seconds per upload. Users should not experience delays when submitting their files. The company wants to decouple the web tier from the processing tier so that the web application can immediately return a response to the user while the processing happens asynchronously. The solution must be fully managed, durable, and scale automatically with demand. Which AWS service should the company use?

Accepted Answer

Amazon Simple Queue Service (Amazon SQS). Amazon SQS is the correct choice because it provides a fully managed, durable, and scalable message queue that decouples the web tier from the processing tier. When a user uploads a file, the web application can immediately return a response after sending a message to an SQS queue, while the backend service polls the queue and processes the upload asynchronously, handling the up-to-30-second processing time without blocking the user.

Answer

Amazon Simple Notification Service (Amazon SNS)

Answer

Amazon Kinesis Data Streams

Answer

Amazon MQ

Question 3

A company runs a web application that connects to an Amazon RDS for MySQL database. The security policy requires that the database password be rotated every 30 days. The development team wants a fully managed solution that automatically rotates the password, handles the update in RDS, and provides the application with the latest credentials without any code changes. The application should also continue to work during the rotation process. Which AWS service should the company use to meet these requirements?

Accepted Answer

AWS Secrets Manager. AWS Secrets Manager is the correct choice because it provides a fully managed service for automatic password rotation every 30 days, directly integrates with Amazon RDS for MySQL to update the database credentials, and supplies the latest credentials to the application via the Secrets Manager API without requiring any code changes. The rotation process is designed to ensure application availability by using a staged rotation strategy (e.g., creating a new credential while the old one remains valid) so the application continues to work during the rotation.

Answer

AWS Systems Manager Parameter Store

Answer

AWS Key Management Service (AWS KMS)

Answer

AWS Identity and Access Management (IAM)

Question 4

A company operates an e-commerce website that sends transactional emails such as order confirmations, password reset links, and shipping updates to customers. The company expects email volume to grow significantly during promotional events. The development team wants a fully managed AWS service that can reliably send high volumes of transactional emails, provide real-time tracking of bounces and complaints, and allow integration through a simple API. The team does not want to manage any email servers. Which AWS service should the team use?

Accepted Answer

Amazon Simple Email Service (Amazon SES). Amazon Simple Email Service (Amazon SES) is a fully managed, cloud-based email sending service designed specifically for sending transactional and marketing emails at high volume. It provides a simple API for integration, real-time tracking of bounces, complaints, and deliveries via Amazon CloudWatch and Amazon SNS notifications, and eliminates the need to manage any email servers. This makes it the ideal choice for the e-commerce company's requirements.

Answer

Amazon Simple Notification Service (Amazon SNS)

Answer

Amazon Simple Queue Service (Amazon SQS)

Answer

Amazon Pinpoint

Question 5

A company operates in three separate AWS accounts: one for development, one for testing, and one for production. The company wants to take advantage of volume pricing discounts across all accounts for services such as Amazon S3 and Amazon EC2. The finance team also wants to view a single, consolidated monthly bill that aggregates charges from all accounts. Which AWS feature should the company implement?

Accepted Answer

AWS Organizations with consolidated billing. AWS Organizations with consolidated billing is the correct feature because it allows the company to combine all three AWS accounts (development, testing, production) into a single organization, enabling volume pricing discounts across accounts for services like Amazon S3 and Amazon EC2. It also aggregates usage from all accounts into a single monthly bill, which the finance team can view. This is the only AWS feature that directly provides both consolidated billing and aggregated usage for pricing benefits.

Answer

AWS Cost Explorer

Answer

AWS Budgets

Answer

AWS Trusted Advisor

Question 6

A company is currently running its IT infrastructure in an on-premises data center. The finance department wants to understand how moving to the AWS Cloud would change the company's cost structure. In particular, they want to avoid large upfront hardware purchases and instead pay only for the resources they consume on a monthly basis. Which key cloud computing concept does this shift represent?

Accepted Answer

Pay-as-you-go pricing. Pay-as-you-go pricing is the cloud computing model that allows a company to avoid large upfront capital expenditures on hardware and instead pay only for the resources they consume on a monthly basis. This directly aligns with the finance department's goal of shifting from a capital expenditure (CapEx) model to an operational expenditure (OpEx) model, where costs are incurred based on actual usage rather than upfront purchases.

Answer

Elasticity

Answer

Economies of scale

Answer

High availability

Question 7

A company runs a data processing job once per month. The job takes approximately 3 hours to complete when run on a single server. The company wants to minimize operational overhead and pay only for the compute time used during the job. The job does not require user interaction and must be able to automatically retry if a task fails. Which AWS service should the company use?

Accepted Answer

AWS Batch. AWS Batch is designed for batch computing workloads that run to completion without user interaction. It automatically provisions the necessary compute resources (e.g., EC2 instances or Fargate), scales them to zero when idle, and provides built-in retry logic for failed tasks. This matches the requirement of a monthly 3-hour job with minimal operational overhead and pay-per-use billing.

Answer

AWS Lambda

Answer

Amazon EC2

Answer

AWS Elastic Beanstalk

Question 8

A company uses AWS Organizations to manage multiple accounts. The security team wants to enforce a policy that prevents any user or role in any member account from disabling AWS CloudTrail or deleting CloudTrail log files from Amazon S3. The team needs a solution that is centrally managed from the management account and applies to all current and future member accounts automatically. Which AWS feature should the security team use to meet these requirements?

Accepted Answer

Service Control Policies (SCPs). Service Control Policies (SCPs) are a feature of AWS Organizations that allow you to centrally control the maximum available permissions for all accounts within an organization. By attaching an SCP that explicitly denies the actions to disable CloudTrail or delete CloudTrail log files from S3, the security team can enforce this policy across all current and future member accounts from the management account, as SCPs automatically apply to new accounts added to the organization.

Answer

AWS Config conformance packs

Answer

IAM permissions boundaries

Answer

AWS CloudTrail data events

Question 9

A company has been using AWS for several months. The finance team wants to view a graphical dashboard of their monthly spending trends for the past 6 months and also obtain a forecast of their expected costs for the next month. The team needs an AWS managed service that provides this visualization and forecasting without requiring any additional data export or third-party tools. Which AWS service should the team use?

Accepted Answer

AWS Cost Explorer. AWS Cost Explorer provides a pre-built, managed graphical dashboard that visualizes historical spending trends and generates cost forecasts for the next month without requiring any data export or third-party tools. It allows filtering by time range (e.g., past 6 months) and automatically computes a forecast based on historical usage patterns using AWS's internal machine learning models.

Answer

AWS Budgets

Answer

AWS Cost and Usage Report

Answer

AWS Trusted Advisor

Question 10

A company is planning to migrate its on-premises workloads to AWS. The cloud architect needs to create a detailed estimate of the monthly AWS bill based on specific configuration details, such as the number of Amazon EC2 instances with particular instance types, storage volumes, data transfer amounts, and Amazon RDS database instances. The architect wants to input these known specifications and obtain an estimated monthly cost breakdown before launching any resources. Which AWS tool should the architect use to meet this requirement?

Accepted Answer

AWS Pricing Calculator. The AWS Pricing Calculator (formerly AWS Simple Monthly Calculator) allows users to input specific configuration details such as EC2 instance types, storage volumes, data transfer amounts, and RDS database instances to generate a detailed monthly cost estimate before launching any resources. This tool is designed for upfront cost planning and provides a breakdown of estimated charges based on the user's exact specifications, making it the correct choice for the architect's requirement.

Answer

AWS TCO Calculator

Answer

AWS Cost Explorer

Answer

AWS Budgets

Question 11

A company migrates its workloads to AWS. After the migration, the company receives a monthly invoice that shows precise charges for each service used, such as the exact number of Amazon EC2 instance hours consumed and the amount of data stored in Amazon S3. The company uses this detailed usage data to allocate costs to different departments. Which essential characteristic of cloud computing does this scenario best demonstrate?

Accepted Answer

Measured service. The scenario describes how the cloud provider meters and reports usage (e.g., EC2 instance hours, S3 storage amounts) and then bills precisely based on that consumption. This is the definition of 'measured service' — one of the five essential characteristics of cloud computing (NIST SP 800-145), where resource usage is monitored, controlled, and reported, providing transparency for both the provider and consumer.

Answer

Broad network access

Answer

Resource pooling

Answer

Rapid elasticity

Question 12

A company runs a global gaming application on Amazon EC2 instances behind an Application Load Balancer in the us-east-1 Region. Players in Europe and Asia report high latency and intermittent connection drops. The company wants to improve the application's performance for global users by routing traffic over the AWS global network. The company also needs two static IP addresses that users can whitelist in their firewalls for consistent access, and the solution must provide health checks to automatically route traffic away from unhealthy endpoints. Which AWS service should the company use?

Accepted Answer

AWS Global Accelerator. AWS Global Accelerator is correct because it uses the AWS global network to route traffic from users to the application, reducing latency and jitter by avoiding the public internet. It provides two static anycast IP addresses that remain consistent for firewall whitelisting, and it integrates with health checks to automatically reroute traffic away from unhealthy EC2 endpoints behind the Application Load Balancer.

Answer

Amazon CloudFront

Answer

AWS WAF

Answer

Amazon Route 53

Question 13

A company stores sensitive audit reports in an Amazon S3 bucket. An external auditor needs to download a specific report for a compliance review. The auditor does not have an AWS account and will only need access for 48 hours. The company wants to provide a secure, time-limited link that allows the auditor to download the file directly from S3 without making the bucket public or requiring the auditor to authenticate with AWS. Which AWS feature should the company use to meet these requirements?

Accepted Answer

S3 presigned URL generated with a 48-hour expiration. An S3 presigned URL allows the company to grant temporary, time-limited access to a specific object in a private S3 bucket without requiring the auditor to have AWS credentials. By generating the URL with a 48-hour expiration, the company meets the exact requirement for secure, time-bound access. The auditor can download the file directly via HTTPS using the presigned URL, which embeds the necessary authentication information.

Answer

S3 bucket policy with a condition that restricts access by IP address

Answer

IAM role with cross-account access for the auditor's AWS account

Answer

CloudFront signed URL using a trusted key group

Question 14

A healthcare company needs to store patient medical records that must be retained for 10 years to comply with regulatory requirements. These records are accessed very rarely, only in the event of an audit or legal request. Which Amazon S3 storage class is the MOST cost-effective choice for this data?

Accepted Answer

S3 Glacier Deep Archive. S3 Glacier Deep Archive is the most cost-effective choice because it is designed for long-term retention of rarely accessed data with a retrieval time of 12–48 hours. The 10-year retention requirement and infrequent access pattern (only during audits or legal requests) align perfectly with this storage class, offering the lowest storage cost among S3 classes while still meeting compliance needs.

Answer

S3 Standard

Answer

S3 Intelligent-Tiering

Answer

S3 One Zone-IA

Question 15

A company's security team discovers that database credentials are stored in plaintext in application configuration files. The team wants to implement a secure way to store, manage, and automatically rotate these credentials every 90 days. The solution must provide fine-grained IAM policies to control which users and applications can access the secrets and must integrate with AWS services like Amazon RDS for automatic rotation. Which AWS service should the company use to meet these requirements?

Accepted Answer

AWS Secrets Manager. AWS Secrets Manager is the correct service because it is purpose-built for securely storing, managing, and automatically rotating database credentials. It supports automatic rotation every 90 days for Amazon RDS, Aurora, Redshift, and DocumentDB with built-in Lambda rotation functions, and it integrates with IAM for fine-grained access control via resource-based and identity-based policies.

Answer

AWS Systems Manager Parameter Store

Answer

AWS Key Management Service (AWS KMS)

Answer

AWS Identity and Access Management (IAM)