CLF-C02 Practice Test 31 — 15 Questions

Question 1

A company runs a database on an Amazon EC2 instance. They need block storage that persists independently from the EC2 instance — if the instance is stopped or terminated, the data must remain available. Which AWS storage service provides this?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Amazon EBS. Amazon EBS (Elastic Block Store) provides persistent block-level storage volumes that can be attached to an EC2 instance. Unlike instance store, EBS volumes persist independently of the instance lifecycle — data remains intact even when the instance is stopped or terminated, as long as the volume is not deleted. This makes EBS the correct choice for the requirement of persistent, independent block storage.

Answer

Amazon S3

Answer

Instance Store

Answer

Amazon EFS

Question 2

A company runs a set of Amazon EC2 instances that handle a consistent, predictable workload 24 hours a day, 7 days a week. The company expects to continue running this workload for the next three years. The finance team wants to minimize the total cost of these EC2 instances while maintaining flexibility to change instance families if needed. Which AWS pricing option should the company choose to meet these requirements?

Accepted Answer

Compute Savings Plans (3-year, all upfront). Compute Savings Plans (3-year, all upfront) provide the highest discount (up to 66%) for consistent, predictable workloads running 24/7 for three years, and they offer flexibility to change instance families, operating systems, or regions within the compute scope. This matches the requirement to minimize cost while maintaining the ability to switch instance families.

Answer

On-Demand instances

Answer

EC2 Instance Savings Plans (1-year, no upfront)

Answer

Spot Instances

Question 3

A company wants to use AWS free tier for testing new services. Which statement about the AWS Free Tier is accurate?

Accepted Answer

The Free Tier includes a mix of 12-month free, always free, and short-term trial offers. The AWS Free Tier is structured into three categories: 12-month free offers (e.g., 750 hours of EC2 t2.micro per month), always free offers (e.g., 1 million Lambda requests per month), and short-term trials (e.g., 30-day free trial of Amazon Inspector). This mix allows customers to test services without incurring costs for the specified limits and durations.

Answer

The Free Tier is available indefinitely for all AWS services

Answer

The Free Tier applies equally to all AWS accounts including Enterprise support customers

Answer

AWS does not charge if you stay within Free Tier limits for any service

Question 4

A company runs a mix of Amazon EC2 instances and AWS Fargate containers. The CFO wants to reduce costs by committing to a consistent amount of compute usage (measured in $ per hour) for a 1-year term. The company expects to change instance families and regions occasionally and needs the flexibility to apply the savings to both EC2 and ECS Fargate usage. Which AWS pricing option should the company choose?

Accepted Answer

Compute Savings Plans. Compute Savings Plans offer the flexibility to cover EC2 instance and Fargate usage across any region, instance family, or compute type, while providing a discounted hourly rate in exchange for a 1-year commitment. This matches the CFO's requirement to reduce costs with a consistent $/hour commitment and the need to change instance families and regions occasionally, as Compute Savings Plans automatically apply to any eligible compute usage without requiring specific reservations.

Answer

EC2 Instance Savings Plans

Answer

Reserved Instances (Convertible)

Answer

On-Demand Instances

Question 5

A company has bring-your-own-license (BYOL) server software that is licensed per physical CPU socket. They need to run this software on AWS and require visibility into and control over the physical host their instances run on. Which EC2 option meets this requirement?

Accepted Answer

Dedicated Hosts. Dedicated Hosts provide you with a physical server fully dedicated to your use, allowing you to see and control the physical host's CPU sockets and cores. This is essential for bring-your-own-license (BYOL) software that is licensed per physical CPU socket, as you must ensure compliance with the license terms by managing the exact hardware configuration.

Answer

On-Demand Instances

Answer

Reserved Instances

Answer

Dedicated Instances

Question 6

A company hosts a static website on Amazon S3. The website serves product images and documents to customers around the world. Users in distant regions report slow load times. The company wants to reduce latency for all users without changing the existing S3 bucket configuration. Which AWS service should the company use?

Accepted Answer

Amazon CloudFront. Amazon CloudFront is a content delivery network (CDN) that caches static content (e.g., images, documents) at edge locations worldwide. By distributing content from the nearest edge location to the user, CloudFront significantly reduces latency without requiring any changes to the existing S3 bucket configuration. The origin remains the S3 bucket, and CloudFront handles the global distribution automatically.

Answer

AWS Direct Connect

Answer

Amazon Route 53

Answer

AWS Global Accelerator

Question 7

A financial services company is preparing for an annual audit. The auditors have requested a copy of the AWS SOC 2 Type II report to verify the security controls of the AWS infrastructure that the company uses. The company's compliance officer needs to directly download this report from a trusted AWS source. Which AWS service should the compliance officer use to obtain the report?

Accepted Answer

AWS Artifact. AWS Artifact is the correct service because it provides on-demand access to AWS compliance reports, including SOC 2 Type II reports, ISO certifications, and PCI DSS reports. The compliance officer can directly download the SOC 2 report from the AWS Artifact console or via the AWS Artifact API, ensuring the report comes from a trusted AWS source.

Answer

AWS Config

Answer

AWS Trusted Advisor

Answer

Amazon Inspector

Question 8

A developer needs to launch a test EC2 instance for a new prototype. The developer logs into the AWS Management Console, selects an instance type, and launches the instance without contacting AWS support or waiting for approval. Which cloud computing characteristic does this demonstrate?

Accepted Answer

On-demand self-service. The scenario describes a developer independently provisioning an EC2 instance through the AWS Management Console without requiring human interaction with AWS support. This directly aligns with the NIST definition of on-demand self-service, a core characteristic of cloud computing where users can unilaterally provision computing capabilities as needed automatically.

Answer

Broad network access

Answer

Resource pooling

Answer

Measured service

Question 9

A company runs a web application on Amazon EC2 instances. Under the AWS Shared Responsibility Model, who is responsible for patching the operating system on the EC2 instances?

Accepted Answer

The customer, because OS patching is in the customer's area of responsibility for IaaS services. Under the AWS Shared Responsibility Model, for Infrastructure as a Service (IaaS) like EC2, the customer is responsible for managing the guest operating system, including patching and security updates. AWS is responsible for the physical infrastructure and the hypervisor layer, but not for the OS running inside the EC2 instance. Therefore, option B is correct.

Answer

AWS, because they own and operate all EC2 infrastructure

Answer

Both AWS and the customer equally share this responsibility

Answer

A third-party managed service provider designated by AWS

Question 10

A company has 50 IAM users in a single AWS account. The security policy requires that every IAM user must have a virtual MFA device enabled for AWS Management Console access. The company wants to automatically detect any user who disables or has an inactive MFA device and immediately revoke that user's ability to access AWS resources by disabling their access keys. The solution must be fully managed, require no custom scripts, and use native AWS services. Which AWS service should the company use to define the compliance rule and automatically trigger the remediation action?

Accepted Answer

AWS Config. AWS Config is the correct service because it provides managed rules (such as the `iam-user-mfa-enabled` managed rule) that continuously evaluate IAM user configurations against compliance policies. When a user disables or has an inactive virtual MFA device, AWS Config can detect the non-compliant resource and automatically trigger a remediation action via AWS Systems Manager Automation, which can disable the user's access keys without any custom scripts.

Answer

AWS Shield

Answer

AWS CloudTrail

Answer

AWS WAF

Question 11

A company operates 8 separate AWS accounts for different departments. They want to receive one consolidated monthly bill and benefit from combined usage discounts across all accounts for services like S3 and data transfer. Which AWS feature provides this?

Accepted Answer

AWS Organizations with consolidated billing. AWS Organizations with consolidated billing allows you to combine usage across all accounts in the organization to receive a single monthly bill and aggregate usage for volume discounts on services like S3 and data transfer. This feature enables you to centrally manage billing and take advantage of tiered pricing based on combined usage, which is exactly what the company needs.

Answer

AWS Cost Explorer across all accounts

Answer

AWS Budgets across all accounts

Answer

AWS Support Plan upgrade to Enterprise tier

Question 12

A large enterprise runs business-critical workloads on AWS and needs 24/7 phone and chat access to Cloud Support Engineers, a designated Technical Account Manager (TAM), and access to proactive guidance and architectural reviews. Which AWS Support plan includes all of these features?

Accepted Answer

Enterprise Support. The Enterprise Support plan is the only AWS Support plan that includes 24/7 phone and chat access to Cloud Support Engineers, a designated Technical Account Manager (TAM), and proactive guidance and architectural reviews. These features are specifically designed for large enterprises running business-critical workloads that require personalized support and strategic advice.

Answer

Basic Support

Answer

Developer Support

Answer

Business Support

Question 13

A financial analytics company runs a mission-critical application in its on-premises data center. The application must replicate large volumes of market data to Amazon S3 in real time. The company requires a dedicated, private network connection with consistent low latency and high throughput. The connection must not traverse the public internet. Which AWS service should the company use to meet these requirements?

Accepted Answer

AWS Direct Connect. AWS Direct Connect provides a dedicated, private network connection from an on-premises data center to AWS, bypassing the public internet. This ensures consistent low latency and high throughput, which is essential for replicating large volumes of market data in real time. The connection uses industry-standard 802.1Q VLANs and can be provisioned at speeds up to 100 Gbps, meeting the requirement for a private, high-performance link.

Answer

AWS Site-to-Site VPN

Answer

Amazon VPC peering

Answer

AWS Transit Gateway

Question 14

A company runs multiple EC2 instances across several applications and wants to centralise all application log files in one place for searching, analysis, and long-term retention. Which AWS service provides centralised log storage and querying?

Accepted Answer

Amazon CloudWatch Logs. Amazon CloudWatch Logs is the correct service because it is designed to centralize log storage from multiple sources, including EC2 instances, via the CloudWatch agent. It provides built-in querying with Logs Insights, supports real-time monitoring, and offers configurable retention policies for long-term storage, meeting all requirements for searching, analysis, and retention.

Answer

Amazon S3

Answer

AWS CloudTrail

Answer

Amazon Kinesis Data Firehose

Question 15

A company is migrating a steady-state web server to AWS. The server is expected to run continuously (24 hours a day, 7 days a week) for the next three years. The workload has predictable CPU and memory usage and does not experience significant spikes. The company wants to minimize the total cost of running this server over the three-year period. Which AWS EC2 pricing model should the company choose?

Accepted Answer

Standard Reserved Instances with a 3-year term and all upfront payment. Standard Reserved Instances with a 3-year term and all upfront payment provide the highest discount (up to 72% compared to On-Demand) for workloads that run continuously and predictably. Since this server will run 24/7 for three years with no significant spikes, a 3-year all upfront Reserved Instance minimizes total cost by locking in the lowest effective hourly rate.

Answer

On-Demand Instances

Answer

Spot Instances

Answer

Dedicated Hosts