CLF-C02 Practice Test 29 — 15 Questions

Question 1

A company runs a combination of Amazon EC2 instances and AWS Lambda functions for its applications. The finance team wants to reduce costs by making a commitment to a consistent amount of compute usage (measured in dollars per hour) for a 1-year term. The team wants the flexibility to change instance families, sizes, and AWS regions, and also wants the commitment to cover both EC2 and Lambda usage. Which AWS pricing option should the team purchase?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Compute Savings Plans. Compute Savings Plans provide the required flexibility to change instance families, sizes, and AWS regions, and they automatically apply to both EC2 and Lambda usage. This plan offers a discounted hourly rate in exchange for a 1-year commitment to a consistent amount of compute spend (measured in dollars per hour), making it the only option that meets all the stated requirements.

Answer

EC2 Instance Savings Plans

Answer

Reserved Instances

Answer

Spot Instances

Question 2

A company plans to run a fleet of Amazon EC2 instances continuously for 3 years to support a steady-state application. The company wants the lowest possible cost for this predictable workload while maintaining the flexibility to change instance families if needed. Which AWS purchasing option should the company choose?

Accepted Answer

Compute Savings Plans. Compute Savings Plans offer the lowest cost for a predictable, steady-state workload over 3 years while allowing flexibility to change instance families. Unlike Reserved Instances, which lock you to a specific instance family, Compute Savings Plans apply to any EC2 instance (including those in different families) within a chosen region, automatically providing the highest discount (up to 66% vs On-Demand) for consistent compute usage.

Answer

On-Demand Instances

Answer

Standard Reserved Instances

Answer

Spot Instances

Question 3

A company has migrated all of its workloads to AWS and has decommissioned all of its on-premises data centres. All compute, storage, databases, and networking are now managed in AWS. Which cloud deployment model describes this architecture?

Accepted Answer

Public cloud. The company has migrated all workloads to AWS and decommissioned all on-premises data centers, meaning all infrastructure is hosted entirely on AWS's shared infrastructure. This is the definition of a public cloud deployment model, where resources are owned and operated by a third-party cloud provider (AWS) and delivered over the internet to multiple tenants. No private or on-premises components remain, so the architecture is purely public cloud.

Answer

Hybrid cloud

Answer

Private cloud

Answer

Multi-cloud

Question 4

A financial services company maintains a legacy on-premises database for sensitive customer data that must remain in a physically controlled environment due to regulatory requirements. The company runs its customer-facing web application on AWS to benefit from scalability and global reach. A dedicated encrypted VPN connection securely links the on-premises environment with the AWS cloud. Which cloud deployment model does this scenario BEST represent?

Accepted Answer

Hybrid cloud. This scenario best represents a hybrid cloud because it combines on-premises infrastructure (the legacy database) with public cloud resources (AWS) connected via a dedicated encrypted VPN. The hybrid cloud model allows the company to keep sensitive data in a physically controlled environment while leveraging AWS's scalability for the customer-facing web application.

Answer

Public cloud

Answer

Private cloud

Answer

Community cloud

Question 5

A company operates a global e-commerce website with static assets (product images, CSS, JavaScript) stored in an Amazon S3 bucket. Users in different geographic regions report slow page load times. The company wants to reduce latency without rearchitecting the application or moving the S3 bucket. Which AWS service should the company use to distribute the static assets closer to users?

Accepted Answer

Amazon CloudFront. Amazon CloudFront is a content delivery network (CDN) that caches static assets at edge locations worldwide, significantly reducing latency for users by serving content from the nearest edge location rather than from the origin S3 bucket. It integrates directly with S3 without requiring any application rearchitecture or bucket relocation, making it the ideal solution for this use case.

Answer

S3 Transfer Acceleration

Answer

Add more Amazon EC2 instances in different regions

Answer

Application Load Balancer with cross-zone load balancing

Question 6

A company runs a web application on Amazon EC2 instances that connect to a relational database. The application requires high database availability so that if the primary database instance fails, a standby instance automatically takes over without manual intervention. The company wants to minimize administrative overhead for database patching, backups, and replication. Which AWS service should the company use to meet these requirements?

Accepted Answer

Amazon RDS Multi-AZ. Amazon RDS Multi-AZ provides high availability by automatically provisioning and maintaining a synchronous standby replica in a different Availability Zone. If the primary database instance fails, Amazon RDS automatically fails over to the standby, ensuring minimal downtime without manual intervention. Additionally, RDS handles patching, backups, and replication automatically, reducing administrative overhead.

Answer

Amazon RDS Single-AZ

Answer

Amazon DynamoDB Global Tables

Answer

Amazon S3

Question 7

A company's public-facing web application is being attacked with SQL injection and cross-site scripting (XSS) attempts. Which AWS service should they deploy to detect and block these web application attacks?

Accepted Answer

AWS WAF. AWS WAF is a web application firewall that helps protect web applications from common web exploits like SQL injection and cross-site scripting (XSS). It allows you to create custom rules to filter and monitor HTTP(S) requests based on conditions such as IP addresses, HTTP headers, or request body patterns, and can block malicious traffic before it reaches your application.

Answer

AWS Shield Standard

Answer

Amazon GuardDuty

Answer

Amazon Inspector

Question 8

A company runs a web application on a single Amazon EC2 instance. To improve the application's ability to remain operational even if an entire data center becomes unavailable, the company deploys identical application instances across three AWS Availability Zones and places them behind an Application Load Balancer. Which characteristic of cloud computing does this architecture best demonstrate?

Accepted Answer

High availability. Deploying identical application instances across three Availability Zones and placing them behind an Application Load Balancer ensures that if an entire data center (AZ) becomes unavailable, traffic is automatically rerouted to healthy instances in the remaining AZs. This architecture directly demonstrates high availability, which is the ability of a system to remain operational despite component failures, by eliminating a single point of failure at the data center level.

Answer

Elasticity

Answer

Scalability

Answer

Agility

Question 9

A security engineer needs to apply network traffic filtering rules at the subnet level rather than the instance level. The solution must be stateless and must explicitly define both inbound and outbound rules, including allowing return traffic. Which AWS feature provides subnet-level stateless traffic control?

Accepted Answer

Network Access Control Lists (NACLs). Network Access Control Lists (NACLs) are the correct choice because they operate at the subnet level, are stateless (meaning they do not automatically allow return traffic), and require explicit inbound and outbound rules. This matches the requirement for stateless traffic filtering where both directions must be defined separately, including rules for return traffic.

Answer

Security groups

Answer

AWS WAF

Answer

VPC route tables

Question 10

A company runs non-production Amazon EC2 instances for development and testing. The finance team wants to automatically stop all non-production instances if the monthly spending exceeds $5,000. The team wants to set this up without writing custom scripts or using third-party tools. Which AWS feature should the finance team use to meet this requirement?

Accepted Answer

AWS Budgets with a budget action to stop EC2 instances. AWS Budgets allows you to set a cost budget (e.g., $5,000) and attach a budget action that triggers an AWS Systems Manager (SSM) automation document to stop EC2 instances when the actual or forecasted spend exceeds the threshold. This meets the requirement without custom scripts or third-party tools, as the budget action natively integrates with EC2 via SSM.

Answer

AWS Cost Explorer

Answer

AWS Trusted Advisor

Answer

AWS Config

Question 11

A financial institution runs its core banking application on-premises due to regulatory requirements. It has connected its data centre to AWS using AWS Direct Connect and runs analytics workloads on AWS that access data from the on-premises systems. Which cloud deployment model does this describe?

Accepted Answer

Hybrid cloud. This scenario describes a hybrid cloud deployment because the financial institution maintains its core banking application on an on-premises data center (private infrastructure) while also running analytics workloads on AWS (public cloud). The two environments are connected via AWS Direct Connect, a dedicated network link that enables secure, low-latency data transfer between the on-premises systems and AWS, allowing the analytics workloads to access on-premises data. Hybrid cloud specifically refers to the integration of on-premises private infrastructure with public cloud services, which matches this setup.

Answer

Public cloud

Answer

Private cloud

Answer

Multi-cloud

Question 12

An e-commerce company runs its website on Amazon EC2. During normal operation, 10 instances are sufficient. During a major sale event, traffic increases 20x and the Auto Scaling group automatically adds 190 additional instances within minutes. After the sale, the instances are terminated. Which cloud computing characteristic does this behaviour demonstrate?

Accepted Answer

Rapid elasticity. D is correct because the ability to automatically scale from 10 to 200 instances within minutes and then terminate them after the sale demonstrates rapid elasticity. This characteristic allows cloud resources to be provisioned and released elastically, often automatically, to scale rapidly outward and inward commensurate with demand. AWS Auto Scaling groups achieve this by using launch configurations, scaling policies, and CloudWatch alarms to dynamically adjust the EC2 instance count based on real-time metrics like CPU utilization or request count.

Answer

Resource pooling

Answer

On-demand self-service

Answer

Broad network access

Question 13

A company runs a steady, predictable workload on a diverse mix of Amazon EC2 instances spanning multiple instance families (e.g., M5, C5, R5) and AWS Regions. The company wants to maximize cost savings while retaining the ability to freely change instance families and Regions during the commitment term without losing the discount. Which AWS pricing model should the company use?

Accepted Answer

Compute Savings Plans. Compute Savings Plans (D) offer the highest flexibility by applying a discounted hourly commitment across any EC2 instance family, size, OS, tenancy, and region, automatically covering usage changes without losing the discount. This matches the requirement to freely change instance families and regions during the term while maximizing savings over On-Demand pricing.

Answer

On-Demand Instances

Answer

Reserved Instances

Answer

Spot Instances

Question 14

A startup wants to deploy their web application to AWS with minimal configuration. They want AWS to handle provisioning, load balancing, scaling, and health monitoring automatically. Which service is most appropriate?

Accepted Answer

AWS Elastic Beanstalk. AWS Elastic Beanstalk is the correct choice because it is a Platform-as-a-Service (PaaS) offering that automatically handles provisioning, load balancing, auto scaling, and health monitoring with minimal configuration. The startup simply uploads their web application code, and Elastic Beanstalk manages the underlying infrastructure, including the EC2 instances, Elastic Load Balancer, and CloudWatch health checks, without requiring manual setup.

Answer

Amazon EC2 with Auto Scaling

Answer

Amazon EKS

Answer

AWS CloudFormation

Question 15

A company ingests sensor data from IoT devices into an Amazon S3 bucket. The data is accessed frequently for the first 30 days, but after that, it is rarely queried. The company’s compliance policy requires all data to be retained for 7 years. The company wants to minimize storage costs by automatically moving data to more cost-effective storage classes as it ages, without any manual intervention. Which Amazon S3 feature should the company configure to meet these requirements?

Accepted Answer

S3 Lifecycle policy. An S3 Lifecycle policy automates the transition of objects between storage classes based on age. By configuring a lifecycle rule to move objects to S3 Standard-IA or S3 One Zone-IA after 30 days, and then to S3 Glacier Deep Archive after a longer period, the company can meet the 7-year retention requirement while minimizing costs without manual intervention.

Answer

S3 Object Lock

Answer

S3 Replication

Answer

S3 Transfer Acceleration