CLF-C02 Practice Test 25 — 15 Questions

Question 1

A company runs a web application on a single Amazon EC2 instance. As the application gains popularity, the instance frequently reaches 100% CPU utilization during peak hours, causing slow response times. The operations team is evaluating two approaches: (1) migrate the application to a larger EC2 instance type with more CPU and memory, or (2) add multiple smaller EC2 instances behind a load balancer and distribute the traffic. Which cloud computing concept does approach (1) represent?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Vertical scaling. Approach (1) involves moving the application to a larger EC2 instance type with more CPU and memory, which is the definition of vertical scaling (scaling up). This increases the capacity of a single resource rather than adding more instances.

Answer

Elasticity

Answer

High availability

Answer

Horizontal scaling

Question 2

A company spends over $75,000 per month on AWS services and needs ongoing, proactive cost optimization guidance from a designated AWS expert. The company also requires a 15-minute response time for their most critical production incidents. Which AWS Support plan should the company choose?

Accepted Answer

AWS Enterprise Support. AWS Enterprise Support is the correct choice because it provides a designated Technical Account Manager (TAM) for proactive cost optimization guidance and a 15-minute response time for critical production incidents. The company's monthly spend of over $75,000 and need for ongoing, expert-led cost optimization align with the Enterprise-level support features, which include a TAM who conducts regular business reviews and cost optimization workshops.

Answer

AWS Basic Support

Answer

AWS Developer Support

Answer

AWS Business Support

Question 3

A company operates over 100 AWS accounts consolidated under AWS Organizations. The finance team needs to analyze the company's historical AWS spending across all accounts for the past 6 months. They want to understand which services and regions drive the most costs, and they also need a 3-month forecast of future spending to inform budget planning. The team needs a visual dashboard that allows interactive filtering by account, service, and region without requiring custom scripts. Which AWS tool should the finance team use to meet these requirements?

Accepted Answer

AWS Cost Explorer. AWS Cost Explorer provides a pre-built, interactive dashboard that visualizes historical cost data (up to 12 months) and generates forecasts (up to 12 months) without requiring custom scripts. It supports filtering by account, service, and region, making it ideal for the finance team's requirements. This tool directly meets the need for a visual, filterable dashboard with built-in forecasting.

Answer

AWS Budgets

Answer

AWS Cost and Usage Report

Answer

AWS Trusted Advisor

Question 4

A company runs several Amazon EC2 instances for development and testing purposes. The finance team wants to identify any instances that have been running with very low CPU utilization (less than 10%) over the past two weeks so they can stop or resize them to reduce costs. Which AWS tool provides this specific recommendation as part of its cost optimization checks?

Accepted Answer

AWS Trusted Advisor. AWS Trusted Advisor provides cost optimization checks that include identifying Amazon EC2 instances with low utilization. Specifically, the 'Low Utilization Amazon EC2 Instances' check flags instances that have had a CPU utilization of 10% or less for the past 14 days, enabling the finance team to stop or resize them to reduce costs.

Answer

AWS Compute Optimizer

Answer

AWS Cost Explorer

Answer

AWS Budgets

Question 5

After GuardDuty generates a security finding about potentially compromised EC2 instances, a security analyst needs to investigate the full context of the threat — understanding which users, IPs, and resources were involved and how they relate to each other. Which AWS service helps investigators analyse and visualise these relationships?

Accepted Answer

Amazon Detective. Amazon Detective is designed specifically to analyze, investigate, and quickly identify the root cause of security findings by automatically collecting log data from AWS resources and building a graph model that shows relationships between users, IPs, and resources. When GuardDuty generates a finding about a potentially compromised EC2 instance, Detective can ingest that finding and provide a visual, interactive view of the entire resource interaction timeline, including network connections, API calls, and user activity, enabling investigators to understand the full context of the threat.

Answer

Amazon GuardDuty

Answer

AWS CloudTrail

Answer

AWS Security Hub

Question 6

A company uses separate AWS accounts for development, testing, and production. The finance team wants to receive a single monthly invoice that covers all accounts and to benefit from volume pricing discounts across the entire organization. Which AWS feature should the company use to achieve this?

Accepted Answer

Enable Consolidated Billing in AWS Organizations. AWS Organizations with Consolidated Billing allows a company to combine usage across multiple accounts into a single monthly invoice, enabling the organization to aggregate usage and benefit from volume pricing discounts (e.g., tiered pricing for EC2, S3, or data transfer). The management account pays for all member accounts, and the consolidated view simplifies cost tracking while maximizing savings from AWS's graduated pricing model.

Answer

Set up an AWS Budget to track all account costs

Answer

Use Cost Explorer to generate a combined cost report

Answer

Activate AWS Trusted Advisor on the management account

Question 7

A company runs a web application on Amazon EC2 that connects to an Amazon RDS database. The database credentials are currently hardcoded in the application configuration file. The security team requires that the credentials be automatically rotated every 90 days and that the application retrieves them securely from a managed service without storing them in the application code. Which AWS service should the company use to meet these requirements?

Accepted Answer

AWS Secrets Manager. AWS Secrets Manager is the correct choice because it is purpose-built for securely storing, retrieving, and automatically rotating database credentials (including for Amazon RDS) on a schedule. It allows the application to fetch credentials at runtime via API calls, eliminating hardcoded secrets, and supports native rotation every 90 days without custom code.

Answer

AWS Key Management Service (AWS KMS)

Answer

AWS Systems Manager Parameter Store

Answer

AWS Certificate Manager (ACM)

Question 8

A company is migrating its on-premises applications to the AWS Cloud. The Chief Security Officer wants to confirm the division of security responsibilities. According to the AWS Shared Responsibility Model, which of the following tasks is the customer's responsibility?

Accepted Answer

Managing network access control lists (ACLs) for the customer's VPC. Managing network access control lists (ACLs) for a customer's VPC is explicitly a customer responsibility under the AWS Shared Responsibility Model. Customers control inbound and outbound traffic at the subnet level by configuring NACLs, which are stateless firewall rules. AWS provides the infrastructure and the VPC service, but the customer must define and manage the ACL rules to enforce network segmentation and security.

Answer

Ensuring the physical security of AWS data centers

Answer

Patching the hypervisor layer that runs Amazon EC2 instances

Answer

Replacing defective hardware components in the AWS global infrastructure

Question 9

A company operates 10 AWS accounts, each managed by a separate team. Each account runs its own Amazon EC2 instances and stores data in Amazon S3. The CFO wants to minimize overall costs by taking advantage of volume discount pricing tiers that AWS offers (e.g., lower per-GB storage costs as total S3 usage increases). Which AWS feature should the company use to combine usage from all accounts so they benefit from the highest possible volume discounts?

Accepted Answer

AWS Organizations with consolidated billing. AWS Organizations with consolidated billing allows you to aggregate usage from all member accounts into a single payer account. This combined usage qualifies for volume discount pricing tiers (e.g., lower S3 per-GB storage costs as total usage increases), enabling the company to benefit from the highest possible discounts across all 10 accounts.

Answer

AWS Budgets

Answer

AWS Cost Explorer

Answer

AWS Trusted Advisor

Question 10

A company is migrating its on-premises application to AWS. The application currently runs on a single server and experiences occasional traffic spikes that cause performance degradation. The company wants to take advantage of cloud computing benefits to handle these spikes automatically without manual intervention. Which AWS Cloud concept would directly address this requirement?

Accepted Answer

Elasticity. Elasticity is the correct concept because it refers to the ability of an AWS infrastructure to automatically scale resources up or down based on demand. In this scenario, the company needs to handle occasional traffic spikes without manual intervention, which is directly addressed by AWS Auto Scaling groups and services like Amazon EC2 Auto Scaling or AWS Lambda's concurrency scaling. This ensures that additional compute capacity is provisioned during spikes and released when demand decreases, optimizing both performance and cost.

Answer

High availability

Answer

Fault tolerance

Answer

Durability

Question 11

A company is migrating its customer-facing web application to AWS. The Chief Information Security Officer (CISO) is reviewing the division of security responsibilities. The CISO understands that AWS is responsible for the security of the physical data centers, hardware, and network infrastructure. The company, as the customer, is responsible for securing the application code, customer data, and operating system patches on Amazon EC2 instances. This division of security responsibilities is an example of which fundamental cloud computing concept?

Accepted Answer

Shared responsibility model. The shared responsibility model. This model delineates security obligations between AWS and the customer: AWS secures the cloud infrastructure (physical data centers, hardware, network), while the customer secures what is in the cloud (application code, customer data, OS patches on EC2 instances). The scenario directly describes this division, making it a textbook example of the shared responsibility model.

Answer

Resource pooling

Answer

Elasticity

Answer

Measured service

Question 12

A company hosts a critical e-commerce web application on Amazon EC2 instances behind an Application Load Balancer (ALB). The security team is concerned about Layer 7 attacks, such as SQL injection and cross-site scripting (XSS). They also want to automatically block traffic from known malicious IP addresses. The company needs a managed web application firewall that integrates directly with the ALB. Which AWS service should the company use?

Accepted Answer

AWS WAF. AWS WAF is a managed web application firewall that protects web applications from common Layer 7 attacks, such as SQL injection and cross-site scripting (XSS), by inspecting HTTP/HTTPS requests. It integrates directly with an Application Load Balancer (ALB) to allow you to create custom rules that block or allow traffic based on request patterns, including automatically blocking traffic from known malicious IP addresses using managed IP reputation lists.

Answer

AWS Shield Advanced

Answer

Amazon GuardDuty

Answer

AWS Firewall Manager

Question 13

A company is planning to migrate its on-premises data center to AWS. The Chief Financial Officer wants to compare the total cost of ownership (TCO) of the current on-premises infrastructure against running equivalent workloads on AWS. The company needs a tool that allows them to input details about their existing servers, storage, and network usage to generate a detailed cost comparison report. Which AWS tool should the company use to meet this requirement?

Accepted Answer

AWS Total Cost of Ownership (TCO) Calculator. The AWS Total Cost of Ownership (TCO) Calculator is specifically designed to compare the costs of on-premises infrastructure with AWS by allowing users to input details about their existing servers, storage, and network usage. It generates a detailed report that highlights potential savings from migrating to AWS, directly addressing the CFO's requirement for a cost comparison.

Answer

AWS Pricing Calculator

Answer

AWS Budgets

Answer

AWS Cost Explorer

Question 14

A gaming company wants to deploy its multiplayer game to players in North America, Europe, and Asia. The company needs to ensure that players in all three regions experience low latency when connecting to game servers, and the game servers must be located as close as possible to the players. The company chooses AWS to host the game servers. Which benefit of cloud computing does this scenario best illustrate?

Accepted Answer

Global reach – because AWS has regions around the world, allowing the company to deploy game servers geographically close to players.. This scenario best illustrates global reach because AWS operates multiple geographic regions worldwide, enabling the gaming company to deploy game servers in North America, Europe, and Asia. By placing infrastructure close to players, the company minimizes network latency and improves the real-time multiplayer experience. This is a core benefit of cloud computing that on-premises solutions cannot easily replicate without significant investment.

Answer

Rapid elasticity – because AWS can automatically scale the number of game servers based on player demand.

Answer

Pay-as-you-go – because the company only pays for game server compute hours used.

Answer

Resource pooling – because multiple players share the same underlying server resources.

Question 15

A company's security policy prohibits opening SSH (port 22) or RDP (port 3389) to the internet for any Amazon EC2 instance. The operations team needs a way to establish secure shell sessions to manage instances directly from the AWS Management Console without managing bastion hosts or SSH keys. Which AWS service provides this capability?

Accepted Answer

AWS Systems Manager Session Manager. AWS Systems Manager Session Manager enables secure shell access to EC2 instances directly from the AWS Management Console without opening inbound ports (22 or 3389) or managing bastion hosts. It uses the SSM Agent and AWS Identity and Access Management (IAM) policies to establish a bidirectional connection over HTTPS (port 443), eliminating the need for SSH keys or public IP addresses. This fully satisfies the security policy requirement while providing the desired management capability.

Answer

AWS Certificate Manager

Answer

AWS CloudHSM

Answer

Amazon GuardDuty