CLF-C02 Practice Test 29 — 15 Questions

Question 1

A company's public-facing web application is being attacked with SQL injection and cross-site scripting (XSS) attempts. Which AWS service should they deploy to detect and block these web application attacks?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

AWS WAF. AWS WAF is a web application firewall that helps protect web applications from common web exploits like SQL injection and cross-site scripting (XSS). It allows you to create custom rules to filter and monitor HTTP(S) requests based on conditions such as IP addresses, HTTP headers, or request body patterns, and can block malicious traffic before it reaches your application.

Answer

AWS Shield Standard

Answer

Amazon GuardDuty

Answer

Amazon Inspector

Question 2

A company runs a web application on a single Amazon EC2 instance. To improve the application's ability to remain operational even if an entire data center becomes unavailable, the company deploys identical application instances across three AWS Availability Zones and places them behind an Application Load Balancer. Which characteristic of cloud computing does this architecture best demonstrate?

Accepted Answer

High availability. Deploying identical application instances across three Availability Zones and placing them behind an Application Load Balancer ensures that if an entire data center (AZ) becomes unavailable, traffic is automatically rerouted to healthy instances in the remaining AZs. This architecture directly demonstrates high availability, which is the ability of a system to remain operational despite component failures, by eliminating a single point of failure at the data center level.

Answer

Elasticity

Answer

Scalability

Answer

Agility

Question 3

A security engineer needs to apply network traffic filtering rules at the subnet level rather than the instance level. The solution must be stateless and must explicitly define both inbound and outbound rules, including allowing return traffic. Which AWS feature provides subnet-level stateless traffic control?

Accepted Answer

Network Access Control Lists (NACLs). Network Access Control Lists (NACLs) are the correct choice because they operate at the subnet level, are stateless (meaning they do not automatically allow return traffic), and require explicit inbound and outbound rules. This matches the requirement for stateless traffic filtering where both directions must be defined separately, including rules for return traffic.

Answer

Security groups

Answer

AWS WAF

Answer

VPC route tables

Question 4

A company runs non-production Amazon EC2 instances for development and testing. The finance team wants to automatically stop all non-production instances if the monthly spending exceeds $5,000. The team wants to set this up without writing custom scripts or using third-party tools. Which AWS feature should the finance team use to meet this requirement?

Accepted Answer

AWS Budgets with a budget action to stop EC2 instances. AWS Budgets allows you to set a cost budget (e.g., $5,000) and attach a budget action that triggers an AWS Systems Manager (SSM) automation document to stop EC2 instances when the actual or forecasted spend exceeds the threshold. This meets the requirement without custom scripts or third-party tools, as the budget action natively integrates with EC2 via SSM.

Answer

AWS Cost Explorer

Answer

AWS Trusted Advisor

Answer

AWS Config

Question 5

A financial institution runs its core banking application on-premises due to regulatory requirements. It has connected its data centre to AWS using AWS Direct Connect and runs analytics workloads on AWS that access data from the on-premises systems. Which cloud deployment model does this describe?

Accepted Answer

Hybrid cloud. This scenario describes a hybrid cloud deployment because the financial institution maintains its core banking application on an on-premises data center (private infrastructure) while also running analytics workloads on AWS (public cloud). The two environments are connected via AWS Direct Connect, a dedicated network link that enables secure, low-latency data transfer between the on-premises systems and AWS, allowing the analytics workloads to access on-premises data. Hybrid cloud specifically refers to the integration of on-premises private infrastructure with public cloud services, which matches this setup.

Answer

Public cloud

Answer

Private cloud

Answer

Multi-cloud

Question 6

An e-commerce company runs its website on Amazon EC2. During normal operation, 10 instances are sufficient. During a major sale event, traffic increases 20x and the Auto Scaling group automatically adds 190 additional instances within minutes. After the sale, the instances are terminated. Which cloud computing characteristic does this behaviour demonstrate?

Accepted Answer

Rapid elasticity. D is correct because the ability to automatically scale from 10 to 200 instances within minutes and then terminate them after the sale demonstrates rapid elasticity. This characteristic allows cloud resources to be provisioned and released elastically, often automatically, to scale rapidly outward and inward commensurate with demand. AWS Auto Scaling groups achieve this by using launch configurations, scaling policies, and CloudWatch alarms to dynamically adjust the EC2 instance count based on real-time metrics like CPU utilization or request count.

Answer

Resource pooling

Answer

On-demand self-service

Answer

Broad network access

Question 7

A company runs a steady, predictable workload on a diverse mix of Amazon EC2 instances spanning multiple instance families (e.g., M5, C5, R5) and AWS Regions. The company wants to maximize cost savings while retaining the ability to freely change instance families and Regions during the commitment term without losing the discount. Which AWS pricing model should the company use?

Accepted Answer

Compute Savings Plans. Compute Savings Plans (D) offer the highest flexibility by applying a discounted hourly commitment across any EC2 instance family, size, OS, tenancy, and region, automatically covering usage changes without losing the discount. This matches the requirement to freely change instance families and regions during the term while maximizing savings over On-Demand pricing.

Answer

On-Demand Instances

Answer

Reserved Instances

Answer

Spot Instances

Question 8

A startup wants to deploy their web application to AWS with minimal configuration. They want AWS to handle provisioning, load balancing, scaling, and health monitoring automatically. Which service is most appropriate?

Accepted Answer

AWS Elastic Beanstalk. AWS Elastic Beanstalk is the correct choice because it is a Platform-as-a-Service (PaaS) offering that automatically handles provisioning, load balancing, auto scaling, and health monitoring with minimal configuration. The startup simply uploads their web application code, and Elastic Beanstalk manages the underlying infrastructure, including the EC2 instances, Elastic Load Balancer, and CloudWatch health checks, without requiring manual setup.

Answer

Amazon EC2 with Auto Scaling

Answer

Amazon EKS

Answer

AWS CloudFormation

Question 9

A company ingests sensor data from IoT devices into an Amazon S3 bucket. The data is accessed frequently for the first 30 days, but after that, it is rarely queried. The company’s compliance policy requires all data to be retained for 7 years. The company wants to minimize storage costs by automatically moving data to more cost-effective storage classes as it ages, without any manual intervention. Which Amazon S3 feature should the company configure to meet these requirements?

Accepted Answer

S3 Lifecycle policy. An S3 Lifecycle policy automates the transition of objects between storage classes based on age. By configuring a lifecycle rule to move objects to S3 Standard-IA or S3 One Zone-IA after 30 days, and then to S3 Glacier Deep Archive after a longer period, the company can meet the 7-year retention requirement while minimizing costs without manual intervention.

Answer

S3 Object Lock

Answer

S3 Replication

Answer

S3 Transfer Acceleration

Question 10

A company runs a customer-facing web application with an Amazon RDS database. Initially, the database is deployed as a single instance in one Availability Zone (AZ). A power outage occurs in that AZ, causing the database to become unavailable for several hours. After the incident, the company modifies the database to use a Multi-AZ configuration. Shortly after the change, another power outage affects the same primary AZ. This time, the database automatically fails over to the standby instance in the other AZ without any manual intervention, and the application remains available. Which cloud computing concept does this scenario best demonstrate?

Accepted Answer

Fault tolerance. Fault tolerance is the ability of a system to continue operating without interruption when one or more of its components fail. In this scenario, the Multi-AZ RDS deployment automatically failed over to a standby instance in a different Availability Zone when the primary AZ experienced a power outage, ensuring the application remained available without manual intervention. This demonstrates fault tolerance because the system was designed to withstand the failure of an entire AZ and continue functioning.

Answer

Elasticity

Answer

Scalability

Answer

Resource pooling

Question 11

A company needs to provide secure, scalable file storage for thousands of concurrent users accessing the same shared file system from Linux-based EC2 instances. Which AWS service is most appropriate?

Accepted Answer

Amazon EFS. Amazon EFS (Elastic File System) is the correct choice because it provides a fully managed, scalable, and elastic NFS file system that can be concurrently accessed by thousands of Linux-based EC2 instances. It automatically scales storage capacity up and down as files are added or removed, and it supports the NFSv4.1 and NFSv4.0 protocols, making it ideal for shared file workloads on Linux.

Answer

Amazon EBS Multi-Attach

Answer

Amazon S3

Answer

Amazon FSx for Windows File Server

Question 12

A company runs a critical database on a single Amazon EC2 instance in a single Availability Zone. To increase fault tolerance and minimize downtime, the architecture team decides to deploy the database across multiple Availability Zones using a primary/standby configuration. This design pattern of distributing resources across isolated locations to ensure continuous operation even if an entire data center fails best demonstrates which fundamental concept of cloud computing?

Accepted Answer

High availability. Deploying a critical database across multiple Availability Zones in a primary/standby configuration ensures that if one data center (AZ) fails, the standby instance can take over with minimal downtime. This design directly implements high availability (HA), which is the ability of a system to remain operational despite component failures. The scenario specifically describes fault tolerance through geographic redundancy, which is the core of HA in cloud computing.

Answer

Elasticity

Answer

Scalability

Answer

Security

Question 13

A small business owner wants to host a simple WordPress website on AWS with a predictable flat monthly price, without learning about VPCs, security groups, instance types, or other AWS complexity. Which AWS service is designed for this simplified use case?

Accepted Answer

Amazon Lightsail. Amazon Lightsail is designed specifically for users who need a simple, predictable monthly pricing model without managing underlying AWS infrastructure like VPCs, security groups, or instance types. It provides pre-configured virtual private servers (VPS) with a fixed monthly cost, including a one-click WordPress deployment, making it ideal for a small business owner who wants to avoid AWS complexity.

Answer

Amazon EC2 with a t3.micro

Answer

AWS Elastic Beanstalk

Answer

AWS Lambda

Question 14

A company operates three separate AWS accounts, one for production, one for development, and one for testing. The finance team wants to receive a single monthly invoice that shows the total charges from all three accounts combined. They also want to aggregate usage across accounts to benefit from volume discounts on Amazon S3 and Amazon EC2. Additionally, the team wants to apply a single payment method (credit card) to cover charges for all accounts. Which AWS feature should the finance team use to meet these requirements?

Accepted Answer

Consolidated Billing through AWS Organizations. Consolidated Billing through AWS Organizations is the correct feature because it allows the finance team to link multiple AWS accounts under a single organization, enabling a single monthly invoice that aggregates charges from all accounts. This aggregation also combines usage across accounts for services like Amazon S3 and Amazon EC2, allowing the team to benefit from volume discounts. Additionally, Consolidated Billing supports a single payment method (credit card) that covers charges for all linked accounts, meeting all stated requirements.

Answer

AWS Budgets

Answer

AWS Cost Explorer

Answer

AWS Cost and Usage Report

Question 15

A company hosts its website on a single Amazon EC2 instance in the us-east-1 Region. The website includes static assets such as images, CSS, and JavaScript files. Users in Europe and Asia report that the website loads slowly because the static assets must travel from the us-east-1 Region. The company wants to reduce latency for global users and decrease the load on the EC2 instance by serving static content from locations that are closer to the users. Which AWS service should the company use to meet these requirements?

Accepted Answer

Amazon CloudFront. Amazon CloudFront is a content delivery network (CDN) that caches static assets (images, CSS, JavaScript) at edge locations worldwide. By serving content from edge locations closer to users in Europe and Asia, CloudFront reduces latency and offloads requests from the origin EC2 instance, decreasing its load. This directly meets the requirements for global latency reduction and reduced EC2 load.

Answer

AWS Global Accelerator

Answer

Amazon Route 53 with latency-based routing

Answer

Amazon S3 Transfer Acceleration