CLF-C02 Practice Test 30 — 15 Questions

Question 1

A company runs a customer-facing web application with an Amazon RDS database. Initially, the database is deployed as a single instance in one Availability Zone (AZ). A power outage occurs in that AZ, causing the database to become unavailable for several hours. After the incident, the company modifies the database to use a Multi-AZ configuration. Shortly after the change, another power outage affects the same primary AZ. This time, the database automatically fails over to the standby instance in the other AZ without any manual intervention, and the application remains available. Which cloud computing concept does this scenario best demonstrate?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Fault tolerance. Fault tolerance is the ability of a system to continue operating without interruption when one or more of its components fail. In this scenario, the Multi-AZ RDS deployment automatically failed over to a standby instance in a different Availability Zone when the primary AZ experienced a power outage, ensuring the application remained available without manual intervention. This demonstrates fault tolerance because the system was designed to withstand the failure of an entire AZ and continue functioning.

Answer

Elasticity

Answer

Scalability

Answer

Resource pooling

Question 2

A company needs to provide secure, scalable file storage for thousands of concurrent users accessing the same shared file system from Linux-based EC2 instances. Which AWS service is most appropriate?

Accepted Answer

Amazon EFS. Amazon EFS (Elastic File System) is the correct choice because it provides a fully managed, scalable, and elastic NFS file system that can be concurrently accessed by thousands of Linux-based EC2 instances. It automatically scales storage capacity up and down as files are added or removed, and it supports the NFSv4.1 and NFSv4.0 protocols, making it ideal for shared file workloads on Linux.

Answer

Amazon EBS Multi-Attach

Answer

Amazon S3

Answer

Amazon FSx for Windows File Server

Question 3

A company runs a critical database on a single Amazon EC2 instance in a single Availability Zone. To increase fault tolerance and minimize downtime, the architecture team decides to deploy the database across multiple Availability Zones using a primary/standby configuration. This design pattern of distributing resources across isolated locations to ensure continuous operation even if an entire data center fails best demonstrates which fundamental concept of cloud computing?

Accepted Answer

High availability. Deploying a critical database across multiple Availability Zones in a primary/standby configuration ensures that if one data center (AZ) fails, the standby instance can take over with minimal downtime. This design directly implements high availability (HA), which is the ability of a system to remain operational despite component failures. The scenario specifically describes fault tolerance through geographic redundancy, which is the core of HA in cloud computing.

Answer

Elasticity

Answer

Scalability

Answer

Security

Question 4

A small business owner wants to host a simple WordPress website on AWS with a predictable flat monthly price, without learning about VPCs, security groups, instance types, or other AWS complexity. Which AWS service is designed for this simplified use case?

Accepted Answer

Amazon Lightsail. Amazon Lightsail is designed specifically for users who need a simple, predictable monthly pricing model without managing underlying AWS infrastructure like VPCs, security groups, or instance types. It provides pre-configured virtual private servers (VPS) with a fixed monthly cost, including a one-click WordPress deployment, making it ideal for a small business owner who wants to avoid AWS complexity.

Answer

Amazon EC2 with a t3.micro

Answer

AWS Elastic Beanstalk

Answer

AWS Lambda

Question 5

A company operates three separate AWS accounts, one for production, one for development, and one for testing. The finance team wants to receive a single monthly invoice that shows the total charges from all three accounts combined. They also want to aggregate usage across accounts to benefit from volume discounts on Amazon S3 and Amazon EC2. Additionally, the team wants to apply a single payment method (credit card) to cover charges for all accounts. Which AWS feature should the finance team use to meet these requirements?

Accepted Answer

Consolidated Billing through AWS Organizations. Consolidated Billing through AWS Organizations is the correct feature because it allows the finance team to link multiple AWS accounts under a single organization, enabling a single monthly invoice that aggregates charges from all accounts. This aggregation also combines usage across accounts for services like Amazon S3 and Amazon EC2, allowing the team to benefit from volume discounts. Additionally, Consolidated Billing supports a single payment method (credit card) that covers charges for all linked accounts, meeting all stated requirements.

Answer

AWS Budgets

Answer

AWS Cost Explorer

Answer

AWS Cost and Usage Report

Question 6

A company hosts its website on a single Amazon EC2 instance in the us-east-1 Region. The website includes static assets such as images, CSS, and JavaScript files. Users in Europe and Asia report that the website loads slowly because the static assets must travel from the us-east-1 Region. The company wants to reduce latency for global users and decrease the load on the EC2 instance by serving static content from locations that are closer to the users. Which AWS service should the company use to meet these requirements?

Accepted Answer

Amazon CloudFront. Amazon CloudFront is a content delivery network (CDN) that caches static assets (images, CSS, JavaScript) at edge locations worldwide. By serving content from edge locations closer to users in Europe and Asia, CloudFront reduces latency and offloads requests from the origin EC2 instance, decreasing its load. This directly meets the requirements for global latency reduction and reduced EC2 load.

Answer

AWS Global Accelerator

Answer

Amazon Route 53 with latency-based routing

Answer

Amazon S3 Transfer Acceleration

Question 7

A healthcare company is required to encrypt all protected health information (PHI) stored in Amazon S3. The company must maintain control over the encryption keys, rotate them annually, and log all key usage. Which AWS service or feature should they use to meet these requirements?

Accepted Answer

AWS Key Management Service (AWS KMS) with customer managed keys. AWS KMS with customer managed keys is correct because it allows the healthcare company to maintain full control over the encryption keys, enforce annual rotation (via automatic or manual key rotation), and log all key usage through AWS CloudTrail. This meets the compliance requirements for protecting PHI in S3 while retaining key management authority.

Answer

Amazon S3 server-side encryption with Amazon S3-managed keys (SSE-S3)

Answer

Amazon S3 server-side encryption with customer-provided keys (SSE-C)

Answer

AWS Certificate Manager (ACM)

Question 8

A security team suspects unauthorised network traffic is reaching a subnet in their VPC. They need to capture metadata about the IP traffic (source IP, destination IP, port, protocol, accept/reject status) flowing through their VPC network interfaces for analysis. Which AWS feature provides this network traffic metadata?

Accepted Answer

VPC Flow Logs. VPC Flow Logs capture metadata about IP traffic flowing through VPC network interfaces, including source/destination IP addresses, ports, protocol numbers, and accept/reject status (based on security group and NACL rules). This is the correct service because it is specifically designed to log network traffic metadata at the VPC, subnet, or network interface level, enabling security analysis without impacting network performance.

Answer

AWS CloudTrail

Answer

Amazon GuardDuty

Answer

AWS WAF logs

Question 9

A cloud provider uses shared physical infrastructure to serve many customers. Each customer's compute and storage resources are logically isolated and secure, but the underlying hardware is pooled across all customers. Which essential characteristic of cloud computing does this scenario BEST describe?

Accepted Answer

Resource pooling. Resource pooling is the correct characteristic because the scenario describes a multi-tenant model where physical and virtual resources are dynamically assigned and reassigned according to consumer demand. The cloud provider's shared infrastructure (compute, storage, network) is pooled to serve multiple customers, with logical isolation ensuring each customer's data remains secure despite the shared underlying hardware. This directly matches the NIST SP 800-145 definition of resource pooling.

Answer

On-demand self-service

Answer

Broad network access

Answer

Rapid elasticity

Question 10

A startup runs an application on AWS and receives a monthly bill that charges exactly for the number of compute hours used, the gigabytes of data stored, and the gigabytes of data transferred. The company pays nothing for resources they did not use. Which cloud computing characteristic does this represent?

Accepted Answer

Measured service. This scenario describes a pay-per-use model where costs directly correlate with actual consumption of compute hours, storage, and data transfer. Measured service is the cloud characteristic that enables this by automatically monitoring, controlling, and reporting resource usage, providing transparency for both the provider and consumer. AWS implements this through services like AWS CloudTrail and detailed billing reports, ensuring customers are charged only for what they consume.

Answer

Rapid elasticity

Answer

On-demand self-service

Answer

Resource pooling

Question 11

A startup can now test a new application idea by provisioning cloud resources in minutes, run the experiment for a week, and tear down the resources if the idea fails — spending only a few dollars. Previously, the same experiment would have required months of procurement and significant capital expenditure. Which cloud benefit does this illustrate?

Accepted Answer

Increased agility. The scenario describes the ability to rapidly provision, experiment with, and decommission cloud resources in minutes, which directly illustrates increased agility. Agility in cloud computing refers to the speed at which resources can be deployed, scaled, and released, enabling fast experimentation without long procurement cycles.

Answer

Economies of scale

Answer

Elimination of capital expense

Answer

Global reach

Question 12

A company wants to implement a hub-and-spoke network architecture where multiple VPCs can communicate with a shared services VPC (containing DNS, monitoring, and security tools) but not with each other. Which AWS networking feature enables this?

Accepted Answer

AWS Transit Gateway with route tables. AWS Transit Gateway with route tables is the correct choice because it acts as a central hub that connects multiple VPCs (spokes) to a shared services VPC, while using separate route tables to prevent inter-spoke communication. This allows the shared services VPC to be reachable from all other VPCs, but the route tables can be configured to not propagate routes between the spoke VPCs, enforcing the desired isolation.

Answer

VPC Peering with route table customization

Answer

Internet Gateway with security groups

Answer

VPC Endpoints

Question 13

A retail company's order processing system receives large bursts of orders during flash sales. The order intake API gets overwhelmed because it directly calls a downstream processing service that is slower. The company wants to decouple the API from the processing service so orders are not lost during spikes. Which AWS service should they use?

Accepted Answer

Amazon SQS. Amazon SQS (Simple Queue Service) is the correct choice because it provides a fully managed message queue that decouples the order intake API from the downstream processing service. When the API receives a burst of orders, it can immediately push each order message into an SQS queue, and the processing service can poll and consume messages at its own pace, ensuring no orders are lost even during traffic spikes.

Answer

Amazon SNS

Answer

Amazon EventBridge

Answer

AWS Step Functions

Question 14

A company wants to accelerate their machine learning workflows by using pre-trained foundation models for tasks like text generation and image creation without training models from scratch. Which AWS service provides access to pre-trained foundation models via API?

Accepted Answer

Amazon Bedrock. Amazon Bedrock is a fully managed service that provides access to pre-trained foundation models (FMs) from leading AI providers like AI21 Labs, Anthropic, Cohere, Meta, Stability AI, and Amazon via a single API. It enables you to build generative AI applications for tasks such as text generation and image creation without managing underlying infrastructure or training models from scratch.

Answer

Amazon SageMaker

Answer

Amazon Rekognition

Answer

AWS DeepComposer

Question 15

Which AWS feature allows multiple AWS accounts to be managed under one umbrella, receive a single consolidated bill, and potentially share volume discounts?

Accepted Answer

AWS Organizations. AWS Organizations is the correct service because it provides centralized management of multiple AWS accounts, enabling a single consolidated bill and the ability to aggregate usage across accounts to qualify for volume discounts. It allows you to create a hierarchy of accounts with organizational units (OUs) and apply service control policies (SCPs) for governance, while the consolidated billing feature combines all usage into a single payer account for pricing benefits.

Answer

AWS Control Tower

Answer

AWS IAM Identity Center

Answer

AWS Cost Explorer