CLF-C02 Practice Test 2 — 25 Questions

Question 1

A company's finance team needs the most granular AWS billing data available, including cost and usage data at the hourly level, broken down by resource ID and cost allocation tags, delivered to Amazon S3 for analysis with their BI tools. Which AWS service provides this?

Accepted Answer

AWS Cost and Usage Report. AWS Cost and Usage Report (CUR) is the correct choice because it provides the most granular billing data available, including hourly-level cost and usage, broken down by resource ID and cost allocation tags, and can be delivered to Amazon S3 for analysis with BI tools. This service is designed for detailed, customizable reports that meet the finance team's requirements for granularity and integration.

Answer

AWS Cost Explorer

Answer

AWS Budgets

Answer

Amazon CloudWatch Billing Metrics

Question 2

A finance team works with architects to eliminate unused EC2 instances, right-size over-provisioned resources, replace On-Demand instances with Reserved Instances for stable workloads, and adopt managed services to reduce operational overhead. Which AWS Well-Architected Framework pillar guides these activities?

Accepted Answer

Cost Optimisation. Option C is correct because the Cost Optimization pillar of the AWS Well-Architected Framework focuses on eliminating unused resources, right-sizing over-provisioned instances, using Reserved Instances for predictable workloads, and adopting managed services to reduce operational overhead. These activities directly target cost efficiency by aligning resource usage with demand and avoiding waste.

Answer

Operational Excellence

Answer

Reliability

Answer

Security

Question 3

AWS can offer lower pay-as-you-go pricing than a single company could achieve operating its own data centre because AWS aggregates usage from hundreds of thousands of customers. Which cloud computing benefit does this describe?

Accepted Answer

Benefit from massive economies of scale. The scenario describes AWS aggregating usage from hundreds of thousands of customers to achieve lower per-unit costs than a single company could achieve operating its own data center. This is the direct definition of economies of scale, where the massive scale of AWS's infrastructure (e.g., purchasing power for hardware, optimized data center design) reduces the average cost per customer, enabling lower pay-as-you-go pricing.

Answer

Trade capital expense for variable expense

Answer

Increase speed and agility

Answer

Go global in minutes

Question 4

A company stores log files in Amazon S3 Standard. After 30 days, the logs are rarely accessed. After 365 days, they should be archived and almost never retrieved. The company wants to automatically move objects between storage classes to minimise cost. Which S3 feature enables this automated transition?

Accepted Answer

S3 Lifecycle policy. S3 Lifecycle policies allow you to define rules that automatically transition objects between storage classes based on age or other criteria. In this scenario, a lifecycle rule can move logs from S3 Standard to a lower-cost infrequent access class after 30 days, and then to S3 Glacier Deep Archive after 365 days, minimizing storage costs without manual intervention.

Answer

S3 Versioning

Answer

S3 Intelligent-Tiering

Answer

S3 Event Notification

Question 5

A company needs to deploy their application in multiple geographic locations to ensure data sovereignty compliance and reduce latency for users in different continents. What is the AWS infrastructure concept that represents a distinct geographic area with multiple isolated locations?

Accepted Answer

AWS Region. An AWS Region is a distinct geographic area that contains multiple, isolated Availability Zones. This design allows customers to deploy applications across separate locations within a region for high availability, while also choosing specific regions to meet data sovereignty requirements and reduce latency for users on different continents.

Answer

Availability Zone

Answer

Edge Location

Answer

Local Zone

Question 6

Before moving to AWS, a company over-provisioned their data centre servers to handle projected peak traffic, resulting in expensive idle capacity most of the time. After migrating, the company uses Auto Scaling to match capacity exactly to actual demand. Which cloud benefit does this represent?

Accepted Answer

Stop guessing about capacity. Option C is correct because the scenario directly describes the cloud benefit of 'Stop guessing about capacity.' Before AWS, the company over-provisioned servers to handle projected peak traffic, leading to idle capacity. With Auto Scaling, AWS dynamically adjusts compute resources to match actual demand, eliminating the need to predict capacity in advance.

Answer

Trade capital expense for variable expense

Answer

Benefit from economies of scale

Answer

Increase speed and agility

Question 7

A company runs a database on an Amazon EC2 instance. They need block storage that persists independently from the EC2 instance — if the instance is stopped or terminated, the data must remain available. Which AWS storage service provides this?

Accepted Answer

Amazon EBS. Amazon EBS (Elastic Block Store) provides persistent block-level storage volumes that can be attached to an EC2 instance. Unlike instance store, EBS volumes persist independently of the instance lifecycle — data remains intact even when the instance is stopped or terminated, as long as the volume is not deleted. This makes EBS the correct choice for the requirement of persistent, independent block storage.

Answer

Amazon S3

Answer

Instance Store

Answer

Amazon EFS

Question 8

A compliance team needs to track the configuration history of AWS resources, determine when a security group was last modified, and verify that all EC2 instances comply with a rule requiring encryption on all attached EBS volumes. Which AWS service provides these capabilities?

Accepted Answer

AWS Config. AWS Config is the correct service because it provides configuration history of AWS resources, tracks changes to security groups (including last modification time), and allows you to define rules—such as requiring encryption on all EBS volumes attached to EC2 instances—and evaluate resources against those rules. It records configuration changes as configuration items and can trigger evaluations against managed or custom rules, making it ideal for compliance auditing.

Answer

AWS CloudTrail

Answer

Amazon CloudWatch

Answer

Amazon GuardDuty

Question 9

A company deploys their web application across multiple isolated locations within the same AWS Region, each with independent power, cooling, and networking. This design ensures that a failure in one location does not affect the others. What are these isolated locations called?

Accepted Answer

Availability Zones. Availability Zones (AZs) are isolated locations within an AWS Region that consist of one or more data centers with independent power, cooling, and networking. This design ensures that a failure in one AZ does not affect the others, providing high availability and fault tolerance for applications. The scenario directly describes the defining characteristics of an Availability Zone.

Answer

AWS Regions

Answer

Edge Locations

Answer

VPC Subnets

Question 10

A company wants to deploy their application to users in North America, Europe, and Asia Pacific to reduce latency. Using AWS, they can provision infrastructure in new geographic regions within minutes using the same tools and templates. Which cloud benefit does this illustrate?

Accepted Answer

Go global in minutes. Option C is correct because the scenario describes deploying infrastructure across multiple geographic regions (North America, Europe, Asia Pacific) using the same tools and templates, which directly illustrates the 'Go global in minutes' benefit of AWS. This benefit leverages AWS's global infrastructure—such as Regions, Availability Zones, and CloudFront edge locations—to reduce latency for users worldwide without the need to negotiate with data center providers or build physical facilities.

Answer

Increased agility

Answer

Trade capital expense for variable expense

Answer

Stop guessing about capacity

Question 11

A company collects clickstream data from millions of users in real time and needs to process and analyse this data as it arrives — not after storing it — to detect patterns within seconds. Which AWS service is designed for real-time data streaming and processing?

Accepted Answer

Amazon Kinesis Data Streams. Amazon Kinesis Data Streams is purpose-built for real-time data streaming and processing, enabling you to ingest and analyze clickstream data as it arrives with sub-second latency. It supports custom processing using AWS Lambda, Kinesis Data Analytics, or Kinesis Data Firehose, making it ideal for detecting patterns in real-time without waiting for data to be stored.

Answer

Amazon SQS

Answer

Amazon S3

Answer

Amazon DynamoDB Streams

Question 12

Amazon CloudFront serves cached content to users from the closest possible network point, with over 400 such points globally. What are these network points called?

Accepted Answer

Edge Locations. Amazon CloudFront uses a global network of edge locations to cache and serve content to users with low latency. These edge locations are distinct from AWS Regions and Availability Zones, as they are specifically designed for content delivery rather than compute or storage. Option C correctly identifies these network points as Edge Locations.

Answer

Availability Zones

Answer

AWS Regions

Answer

Local Zones

Question 13

A solutions architect implements IAM least-privilege policies, enables encryption for all data at rest and in transit, configures VPC security groups and NACLs to limit network access, and sets up automated security incident detection. Which Well-Architected Framework pillar covers these activities?

Accepted Answer

Security. The Security pillar of the AWS Well-Architected Framework focuses on protecting data, systems, and assets through identity and access management (IAM least-privilege policies), data protection (encryption at rest and in transit), infrastructure protection (VPC security groups and NACLs), and detective controls (automated security incident detection). These activities directly map to the Security pillar's design principles and best practices.

Answer

Operational Excellence

Answer

Reliability

Answer

Cost Optimisation

Question 14

A company runs a MySQL database and wants to migrate to a cloud-native relational database that is fully managed, provides up to 5x the performance of standard MySQL, offers automated backups with point-in-time recovery, and is compatible with MySQL drivers and tools without application changes. Which AWS service meets these requirements?

Accepted Answer

Amazon Aurora. Amazon Aurora is a fully managed, MySQL-compatible relational database that delivers up to 5x the performance of standard MySQL, provides automated backups with point-in-time recovery, and is designed to work with existing MySQL drivers and tools without requiring application changes. This makes it the ideal choice for migrating a MySQL database to a cloud-native, high-performance relational database service.

Answer

Amazon RDS for MySQL

Answer

Amazon DynamoDB

Answer

Amazon Redshift

Question 15

A company needs to migrate 80 TB of on-premises data to Amazon S3. Their internet connection is 100 Mbps and transferring this much data over the internet would take months. Which AWS service allows them to migrate this data physically without relying on internet bandwidth?

Accepted Answer

AWS Snowball Edge. AWS Snowball Edge is a physical data transport solution designed for large-scale data migrations when network transfer is impractical. With 80 TB of data and a 100 Mbps connection, internet transfer would take over 80 days, making Snowball Edge the correct choice as it allows you to ship the data on a ruggedized device directly to AWS, bypassing internet bandwidth entirely.

Answer

AWS DataSync

Answer

AWS Direct Connect

Answer

Amazon S3 Transfer Acceleration

Question 16

A company stores database passwords for their RDS instances and API keys for third-party services in their application code, which is a security risk. They want a managed service that securely stores these secrets, makes them available to applications via API, and automatically rotates database passwords. Which AWS service should they use?

Accepted Answer

AWS Secrets Manager. AWS Secrets Manager is the correct choice because it is a fully managed service specifically designed to securely store, retrieve, and automatically rotate secrets such as database passwords and API keys. It provides built-in integration with RDS for automatic rotation of database credentials without custom code, and it serves secrets via a secure API call, eliminating the need to hardcode secrets in application code.

Answer

AWS KMS

Answer

AWS Systems Manager Parameter Store

Answer

Amazon Cognito

Question 17

A new AWS customer wants to explore AWS services for the first time. They launch a t2.micro EC2 instance and use up to 5 GB of Amazon S3 storage. They want to understand if these will incur charges. Which AWS programme provides limited free usage of many services for new accounts during the first 12 months?

Accepted Answer

AWS Free Tier. The AWS Free Tier is designed specifically for new AWS customers, offering limited free usage of select services—including t2.micro EC2 instances and 5 GB of Amazon S3 storage—for the first 12 months after account creation. This program allows users to explore AWS services without incurring charges, as long as they stay within the defined usage limits. The scenario matches the Free Tier's eligibility criteria exactly, making option B correct.

Answer

AWS Enterprise Support

Answer

AWS Credits Programme

Answer

Reserved Instance discount

Question 18

A company wants to migrate 50 virtual machines from their on-premises data centre to AWS as quickly as possible to reduce data centre costs. They plan to move the VMs without making any changes to the applications. Which cloud migration strategy does this represent?

Accepted Answer

Rehost. Option C (Rehost) is correct because the company is migrating 50 virtual machines to AWS without making any changes to the applications, which is the defining characteristic of a 'lift and shift' migration. This strategy involves moving the VMs as-is, typically using AWS Server Migration Service (SMS) or AWS Application Migration Service (AWS MGN), to quickly reduce on-premises data center costs without application refactoring.

Answer

Refactor

Answer

Replatform

Answer

Retire

Question 19

A company used to spend $2 million upfront purchasing servers and building a data centre before launching a new product. With AWS, they provision resources as needed and pay monthly based on actual usage. Which cloud benefit does this represent?

Accepted Answer

Trade capital expense for variable expense. This scenario describes shifting from a large upfront capital expenditure (CapEx) on servers and data centers to a variable operational expenditure (OpEx) based on actual usage. AWS's pay-as-you-go model directly enables this trade, allowing the company to align costs with consumption rather than paying for idle capacity. This is the core benefit of trading capital expense for variable expense.

Answer

Stop guessing about capacity

Answer

Benefit from economies of scale

Answer

Increase speed and agility

Question 20

A company uses AWS Organizations to centrally manage multiple AWS accounts. The security team requires a mechanism to prevent any IAM user or role in any member account from modifying Amazon S3 bucket policies to grant public access. The solution must be enforced centrally and cannot be overridden by account administrators. Which AWS feature should the company use?

Accepted Answer

Service control policies (SCPs). Service control policies (SCPs) are the correct choice because they allow AWS Organizations to centrally define permission guardrails that apply to all IAM users and roles across member accounts. SCPs can explicitly deny actions like s3:PutBucketPolicy to prevent any account administrator from modifying S3 bucket policies to grant public access, and these restrictions cannot be overridden by any IAM entity within the member account.

Answer

IAM permissions boundaries

Answer

AWS Config conformance packs

Answer

AWS CloudTrail Insights