CLF-C02 Practice Test 23 — 15 Questions

Question 1

A company is designing a microservices architecture on AWS. According to the AWS Well-Architected Framework's Operational Excellence pillar, which practice best supports the ability to safely make frequent, small changes to production?

Accepted Answer

Making frequent, small, reversible changes through automated CI/CD pipelines. Option B is correct because the Operational Excellence pillar emphasizes the ability to make frequent, small, reversible changes to reduce the blast radius of failures and enable rapid recovery. Automated CI/CD pipelines enforce consistent deployment practices, allowing teams to safely iterate on production with minimal risk. This approach aligns with the principle of 'perform operations as code' and supports the 'make frequent, small, reversible changes' design principle.

Answer

Performing large batch deployments monthly to minimize change frequency

Answer

Requiring manual approval for every code change

Answer

Deploying all microservices simultaneously in coordinated releases

Question 2

A retail company processes credit card payments and must comply with the Payment Card Industry Data Security Standard (PCI DSS). The company's compliance officer needs to obtain an official document from AWS that details the security controls AWS has implemented to support PCI DSS compliance for services such as Amazon RDS and Amazon EC2. The document must be downloadable as a PDF for review and audit purposes. Which AWS service should the compliance officer use to retrieve this document?

Accepted Answer

AWS Artifact. AWS Artifact is the correct service because it provides on-demand access to AWS compliance reports and security documents, including the PCI DSS compliance attestation and responsibility summary. The compliance officer can download the AWS PCI DSS compliance package as a PDF directly from the AWS Artifact console, which is specifically designed for audit and review purposes.

Answer

AWS Security Hub

Answer

AWS Config

Answer

AWS Trusted Advisor

Question 3

A startup is evaluating a migration from its on-premises infrastructure to AWS. The CTO notes that AWS can offer significantly lower per-unit costs for compute and storage compared to the startup's own data center. The CTO explains that AWS achieves this by pooling the demand of millions of customers, which allows AWS to negotiate better hardware prices and spread the fixed costs of data centers, power, cooling, and operational staff across a massive customer base. This specific cost advantage of cloud computing is best described by which fundamental concept?

Accepted Answer

Economies of scale. Economies of scale (Option B) is the correct concept because it directly describes how AWS achieves lower per-unit costs by aggregating demand from millions of customers. This massive scale allows AWS to negotiate bulk discounts on hardware, spread fixed costs (data centers, power, cooling, staff) over a huge customer base, and operate at a cost structure that individual startups cannot match. The CTO's description of pooling demand and spreading fixed costs is the textbook definition of economies of scale in cloud computing.

Answer

Elasticity

Answer

High availability

Answer

Fault tolerance

Question 4

A company needs to convert text documents into natural-sounding speech in multiple languages for an audiobook application. Which AWS service provides this capability?

Accepted Answer

Amazon Polly. Amazon Polly is a managed service that turns text into lifelike speech using deep learning technologies, supporting multiple languages and voices. It is specifically designed for text-to-speech (TTS) conversion, making it the correct choice for generating natural-sounding audio for an audiobook application.

Answer

Amazon Transcribe

Answer

Amazon Translate

Answer

Amazon Lex

Question 5

A healthcare company is migrating its application and patient data to AWS. To meet HIPAA requirements, the compliance officer must review and accept the AWS Business Associate Addendum (BAA). Additionally, the auditor requires the company to provide the latest AWS SOC 2 Type II report. The compliance officer needs a single self-service portal to access both documents directly from AWS. Which AWS service should the company use?

Accepted Answer

AWS Artifact. AWS Artifact is the correct service because it provides a self-service portal for on-demand access to AWS compliance reports, including the Business Associate Addendum (BAA) and SOC 2 Type II reports. This directly meets the compliance officer's requirement to review and accept the BAA and provide the latest SOC 2 report from a single AWS portal.

Answer

AWS Config

Answer

AWS Trusted Advisor

Answer

AWS Security Hub

Question 6

Which AWS service provides a private connection from an on-premises network to AWS that bypasses the public internet and provides consistent network performance?

Accepted Answer

AWS Direct Connect. AWS Direct Connect is the correct answer because it provides a dedicated, private network connection from an on-premises data center to AWS, completely bypassing the public internet. This ensures consistent network performance, lower latency, and higher bandwidth, as the connection is established through a standard 1 Gbps or 10 Gbps Ethernet fiber-optic cable linked to an AWS Direct Connect location.

Answer

AWS Site-to-Site VPN

Answer

Amazon CloudFront

Answer

AWS Transit Gateway

Question 7

A gaming company runs a multiplayer game backend on Amazon EC2 instances. The game experiences variable traffic patterns: low usage during weekday mornings and high usage during evenings and weekends. The company uses an Auto Scaling group to automatically add instances during peak hours and remove them during low traffic. The company is billed only for the compute capacity actually consumed during each hour. Which characteristic of cloud computing does this usage-based billing model best illustrate?

Accepted Answer

Measured service. The usage-based billing model, where the company pays only for the compute capacity consumed each hour, is a direct example of measured service. This characteristic of cloud computing involves metering resource usage (e.g., CPU hours, data transfer) and charging based on that consumption, which is exactly what the Auto Scaling group enables by dynamically adjusting instance count and billing only for active hours.

Answer

Rapid elasticity

Answer

Resource pooling

Answer

On-demand self-service

Question 8

A global company has employees who work from various locations and use different devices such as laptops, tablets, and smartphones to access corporate applications. The company plans to migrate its applications to AWS and wants all employees to access these applications directly from the internet using standard web browsers without requiring any dedicated hardware or software at each branch. Which essential characteristic of cloud computing does this scenario BEST demonstrate?

Accepted Answer

Broad network access. The scenario describes employees accessing corporate applications from various devices and locations using only standard web browsers, without dedicated hardware or software. This directly aligns with the cloud computing characteristic of broad network access, which mandates that resources are accessible over the network by standard mechanisms (e.g., HTTPS, TLS 1.2/1.3) from heterogeneous client platforms (laptops, tablets, smartphones). The key is that no site-to-site VPN appliances or thick client software are required—just a browser and an internet connection.

Answer

Measured service

Answer

Resource pooling

Answer

Rapid elasticity

Question 9

A company needs to implement a disaster recovery strategy where data is continuously replicated to AWS but AWS compute resources are only started during a declared disaster. Which DR strategy does this describe?

Accepted Answer

Pilot Light. The Pilot Light strategy involves continuously replicating data to AWS (e.g., using AWS Database Migration Service or S3 replication) while keeping only a minimal core set of AWS resources (like a small EC2 instance or RDS database) running. Compute resources are not fully provisioned until a disaster is declared, at which point they are scaled up to handle production traffic. This matches the description of data being continuously replicated but compute only started during a declared disaster.

Answer

Backup and Restore

Answer

Warm Standby

Answer

Multi-Site Active/Active

Question 10

A social media company hosts a web application on AWS that serves millions of users worldwide. The application delivers static content such as images, videos, and CSS files. To improve load times for users in different geographic regions, the company wants to cache this content at AWS locations that are as close to end users as possible. Which component of the AWS global infrastructure should the company use?

Accepted Answer

Edge Locations. Edge Locations are part of the AWS CloudFront content delivery network (CDN) and are specifically designed to cache static content (e.g., images, videos, CSS) at geographically dispersed points of presence (PoPs) close to end users. This reduces latency by serving content from the nearest edge location rather than the origin server, directly addressing the requirement to improve load times for a global user base.

Answer

Availability Zones

Answer

Regional Edge Caches

Answer

AWS Direct Connect Locations

Question 11

Which statement accurately describes the relationship between AWS Regions and Availability Zones?

Accepted Answer

Each Region contains multiple Availability Zones connected with low-latency networking. Option C is correct because an AWS Region is a geographical area that consists of multiple, isolated Availability Zones (AZs), each containing one or more data centers. These AZs within a Region are connected via redundant, low-latency networking (typically less than 2 milliseconds round-trip time) to enable high availability and fault tolerance for applications.

Answer

Each Availability Zone contains multiple Regions

Answer

Each Region is a single large data center

Answer

Availability Zones in the same Region share the same power infrastructure

Question 12

A media company processes user-uploaded images. When a user uploads a high-resolution image to an Amazon S3 bucket, the company must automatically generate three resized thumbnail versions (small, medium, large) within seconds. The company wants a solution that requires no infrastructure management and scales automatically to handle thousands of concurrent uploads. Which AWS service should the company use to execute the thumbnail generation code?

Accepted Answer

AWS Lambda. AWS Lambda is the correct choice because it is a serverless compute service that executes code in response to S3 events (e.g., object creation) without provisioning or managing servers. It scales automatically to handle thousands of concurrent uploads, and the 15-minute execution timeout is sufficient for generating three thumbnail versions within seconds. This meets the requirement for no infrastructure management and automatic scaling.

Answer

Run the thumbnailing code on Amazon EC2 instances behind an Application Load Balancer

Answer

Amazon ECS with AWS Fargate launch type

Answer

AWS Elastic Beanstalk

Question 13

A healthcare company needs to extract structured medical data from clinical notes and medical documents. Which AWS service provides ML-powered extraction of medical information from unstructured text?

Accepted Answer

Amazon Comprehend Medical. Amazon Comprehend Medical is specifically designed to extract structured medical information such as diagnoses, medications, and test results from unstructured clinical text using natural language processing (NLP) and machine learning. It is the only AWS service purpose-built for healthcare use cases like parsing clinical notes and medical documents.

Answer

Amazon Textract

Answer

Amazon Comprehend

Answer

Amazon Rekognition

Question 14

A financial services company is undergoing an external audit. The auditor requests copies of AWS SOC 2, ISO 27001, and PCI DSS compliance reports to validate the company's cloud infrastructure controls. Where can the company's compliance team obtain these reports in a centralized manner?

Accepted Answer

AWS Artifact. AWS Artifact is the correct service because it provides a centralized, self-service portal for on-demand access to AWS compliance reports, including SOC 2, ISO 27001, and PCI DSS. The compliance team can download these reports directly without needing to contact AWS support, making it the single source of truth for audit evidence.

Answer

AWS Config

Answer

AWS Audit Manager

Answer

AWS Security Hub

Question 15

A start-up is evaluating cloud providers for its new application. The company's CTO learns that the cloud provider negotiates bulk discounts with hardware vendors and data center operators, and passes these savings on to customers through lower service prices. The CTO also notes that the provider's vast infrastructure allows customers to benefit from the provider's operational expertise in running large-scale data centers. Which benefit of cloud computing does this scenario BEST represent?

Accepted Answer

Economies of scale. Economies of scale occur when a cloud provider achieves lower per-unit costs by operating at a massive scale. The provider purchases hardware in bulk, optimizes data center operations, and leverages expertise across many customers. These savings are then reflected in lower prices for all customers. The scenario directly describes this benefit—lower prices from bulk purchasing and operational expertise passed on to the customer.

Answer

Pay-as-you-go pricing

Answer

Resource pooling

Answer

High availability