CLF-C02 Practice Test 33 — 15 Questions

Question 1

Which AWS service enables event-driven architectures by acting as a central event bus that routes events from AWS services, SaaS applications, and custom applications to configured targets?

Accepted Answer

Amazon EventBridge. Amazon EventBridge is a serverless event bus that ingests events from AWS services, SaaS partners, and custom applications, then routes them to targets like Lambda, Step Functions, or SQS based on configurable rules. It decouples event producers from consumers, enabling event-driven architectures without polling or custom middleware. This matches the question's description of a central event bus for cross-domain event routing.

Answer

Amazon SNS

Answer

Amazon SQS

Answer

AWS Step Functions

Question 2

A company stores genomics data (several petabytes) on Amazon S3. They need to run complex analytics on this data using standard bioinformatics tools that require a POSIX file system interface. Which AWS solution provides this?

Accepted Answer

Amazon FSx for Lustre linked to S3. Amazon FSx for Lustre is a high-performance file system that provides a POSIX-compliant interface and can be linked directly to an S3 bucket, allowing you to run standard bioinformatics tools on genomics data stored in S3 without needing to copy it. This solution delivers the low-latency, high-throughput file access required for complex analytics on petabyte-scale datasets, while seamlessly integrating with S3 for durable storage.

Answer

Amazon EFS mounted on EC2

Answer

Amazon EBS io2 volumes on EC2

Answer

Amazon S3 with S3 Select

Question 3

A company is developing a microservices application on AWS. The application includes a front-end web tier and a backend order processing service. The front-end sends order requests to the backend, which may take several seconds to process. The company wants to ensure that the front-end does not wait for the backend to complete, and that no orders are lost if the backend service is temporarily unavailable. Which AWS service should the company use to decouple the front-end and backend?

Accepted Answer

Amazon Simple Queue Service (SQS). Amazon Simple Queue Service (SQS) is the correct choice because it provides a fully managed message queue that decouples the front-end and backend services. The front-end can send order requests to an SQS queue and immediately return a response, while the backend processes messages asynchronously. SQS also stores messages durably across multiple Availability Zones, ensuring no orders are lost even if the backend is temporarily unavailable.

Answer

Amazon ElastiCache

Answer

Amazon Route 53

Answer

Amazon CloudWatch

Question 4

A startup is migrating a web application to AWS. The application runs on Amazon EC2 instances that use a custom Amazon Machine Image (AMI) with the company's proprietary software. The security team needs to understand which security tasks the company must perform. Under the AWS Shared Responsibility Model, which of the following is the customer's responsibility?

Accepted Answer

Configuring security groups to control inbound traffic to the instances. Configuring security groups is a customer responsibility because security groups act as a virtual firewall for EC2 instances, controlling inbound and outbound traffic at the instance level. Under the AWS Shared Responsibility Model, the customer is responsible for configuring network access controls, while AWS manages the underlying infrastructure. This includes defining rules based on IP protocols, ports, and source/destination CIDR ranges.

Answer

Patching the hypervisor that hosts the EC2 instances

Answer

Physical security of the data center where the instances run

Answer

Maintaining the underlying network infrastructure

Question 5

A security team needs to analyze VPC network traffic to detect anomalies and investigate security incidents. Which AWS service captures and stores network flow data for VPCs?

Accepted Answer

VPC Flow Logs. VPC Flow Logs capture IP traffic information for network interfaces within a VPC, including metadata such as source/destination IPs, ports, protocols, and packet accept/reject decisions. This data is stored in Amazon CloudWatch Logs or Amazon S3, enabling security teams to analyze traffic patterns, detect anomalies, and investigate incidents. AWS CloudTrail, Amazon Inspector, and Amazon GuardDuty serve different purposes—auditing API calls, assessing vulnerabilities, and threat detection, respectively—but do not directly capture raw network flow data.

Answer

AWS CloudTrail

Answer

Amazon Inspector

Answer

Amazon GuardDuty

Question 6

A company archives compliance records that must be retained for 7 years but will almost never be accessed. They need the absolute lowest storage cost with retrieval times of several hours being acceptable. Which S3 storage class should they use?

Accepted Answer

S3 Glacier Deep Archive. S3 Glacier Deep Archive is designed for long-term retention of data that is accessed rarely, with retrieval times of 12 hours or more, making it the lowest-cost S3 storage class. For compliance records that must be retained for 7 years and almost never accessed, with acceptable retrieval times of several hours, this class provides the absolute minimum storage cost while meeting the retrieval time requirement.

Answer

S3 Glacier Instant Retrieval

Answer

S3 Standard-IA

Answer

S3 Glacier Flexible Retrieval

Question 7

A company wants to centralise backup management for all their AWS resources — EC2, EBS, RDS, DynamoDB, and EFS — under a single policy, automate backup schedules, and ensure cross-region backup copies for disaster recovery. Which AWS service provides this?

Accepted Answer

AWS Backup. AWS Backup is the correct choice because it provides a fully managed, centralized backup service that supports EC2, EBS, RDS, DynamoDB, and EFS. It allows you to define a single backup policy, automate backup schedules, and configure cross-region copies for disaster recovery, meeting all the stated requirements.

Answer

Amazon S3 versioning

Answer

AWS Snapshot Manager

Answer

AWS CloudFormation

Question 8

A company wants to deploy their application globally and needs AWS to automatically route users to the nearest healthy application endpoint with improved network performance. Which AWS service uses the AWS global network backbone for routing optimization?

Accepted Answer

AWS Global Accelerator. AWS Global Accelerator uses the AWS global network backbone to optimize the path from users to applications. It routes traffic over the AWS internal network rather than the public internet, improving performance and reliability. It also automatically directs users to the nearest healthy endpoint, meeting the requirement for global deployment with automatic failover.

Answer

Amazon CloudFront

Answer

Amazon Route 53 with latency routing

Answer

Amazon VPC peering

Question 9

A company operates five separate AWS accounts for different business units. The finance team wants to aggregate the usage across all accounts to benefit from volume pricing discounts and to receive a single monthly bill. The company does not need to centrally manage permissions or apply service control policies at this time. Which AWS feature should the company use to meet these requirements?

Accepted Answer

Consolidated Billing through AWS Organizations. AWS Organizations provides Consolidated Billing, which allows a company to aggregate usage across multiple AWS accounts into a single monthly bill. This enables the finance team to benefit from volume pricing discounts because AWS combines usage across all accounts, potentially lowering the overall cost tier. The requirement does not include centralized permission management or service control policies, so the basic Consolidated Billing feature of AWS Organizations is sufficient.

Answer

AWS Cost Explorer

Answer

AWS Budgets

Answer

AWS Trusted Advisor

Question 10

Amazon CloudFront serves cached content to users from the closest possible network point, with over 400 such points globally. What are these network points called?

Accepted Answer

Edge Locations. Amazon CloudFront uses a global network of edge locations to cache and serve content to users with low latency. These edge locations are distinct from AWS Regions and Availability Zones, as they are specifically designed for content delivery rather than compute or storage. Option C correctly identifies these network points as Edge Locations.

Answer

Availability Zones

Answer

AWS Regions

Answer

Local Zones

Question 11

Which Amazon S3 storage class is most cost-effective for data that is accessed frequently?

Accepted Answer

S3 Standard. S3 Standard is the most cost-effective storage class for frequently accessed data because it offers low latency and high throughput with no retrieval costs or minimum storage duration charges. For data accessed often, the per-GB storage cost of S3 Standard is lower than the combined storage plus retrieval costs of infrequent access classes like S3 Standard-IA or One Zone-IA.

Answer

S3 Standard-IA

Answer

S3 Glacier Instant Retrieval

Answer

S3 One Zone-IA

Question 12

A company is deploying a mission-critical application on AWS. The application requires the highest level of support available, including a designated Technical Account Manager (TAM) and a response time of 15 minutes or less for production system down cases. Which AWS Support plan should the company choose?

Accepted Answer

Enterprise. The Enterprise support plan is the only AWS Support plan that includes a designated Technical Account Manager (TAM) and a 15-minute response time for production system down cases. The company's requirement for the highest level of support with these specific features directly maps to the Enterprise plan, which is designed for mission-critical workloads.

Answer

Developer

Answer

Business

Answer

Enterprise On-Ramp

Question 13

Which AWS pricing concept means you pay a lower per-unit price when you use more of a service, such as S3 charging less per GB as storage volume increases?

Accepted Answer

Tiered pricing (volume discounts). B is correct because tiered pricing (volume discounts) is the AWS pricing model where the per-unit cost decreases as usage increases. For example, Amazon S3 charges a lower per-GB rate for larger storage volumes, such as $0.023 per GB for the first 50 TB and $0.022 per GB for the next 450 TB, directly reflecting volume-based discounts.

Answer

Pay-as-you-go pricing

Answer

Reserved pricing

Answer

Spot pricing

Question 14

Which AWS service enables no-code integration between SaaS applications (like Salesforce, ServiceNow, Zendesk) and AWS services for automated data flows?

Accepted Answer

Amazon AppFlow. Amazon AppFlow is the correct service because it is specifically designed for no-code integration between SaaS applications (such as Salesforce, ServiceNow, and Zendesk) and AWS services, enabling automated data flows without writing any code. It supports bi-directional data transfer, transformation, and filtering, making it ideal for syncing customer records or support tickets directly into Amazon S3 or Redshift.

Answer

AWS DataSync

Answer

AWS Glue

Answer

Amazon EventBridge

Question 15

A company wants to migrate 50 virtual machines from their on-premises data centre to AWS as quickly as possible to reduce data centre costs. They plan to move the VMs without making any changes to the applications. Which cloud migration strategy does this represent?

Accepted Answer

Rehost. (Rehost) is correct because the company is migrating 50 virtual machines to AWS without making any changes to the applications, which is the defining characteristic of a 'lift and shift' migration. This strategy involves moving the VMs as-is, typically using AWS Server Migration Service (SMS) or AWS Application Migration Service (AWS MGN), to quickly reduce on-premises data center costs without application refactoring.

Answer

Refactor

Answer

Replatform

Answer

Retire