CLF-C02 Practice Test 37 — 15 Questions

Question 1

A company processes millions of customer records and needs to query data in Amazon S3 without loading it into a database. The data is stored in Parquet format. Which AWS service enables this with no infrastructure to manage?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Amazon Athena. Amazon Athena is a serverless interactive query service that allows you to analyze data directly in Amazon S3 using standard SQL, with no infrastructure to manage. It natively supports Parquet format, which is columnar and optimized for efficient querying, making it ideal for querying millions of customer records without loading them into a database.

Answer

Amazon Redshift Spectrum

Answer

Amazon EMR

Answer

AWS Glue ETL

Question 2

A company wants to automatically detect and label objects in photos uploaded by users — such as identifying if a photo contains a person, a car, or an outdoor scene — without building their own machine learning model. Which AWS service provides this pre-built computer vision capability?

Accepted Answer

Amazon Rekognition. Amazon Rekognition is the correct choice because it is a fully managed, pre-trained computer vision service that can automatically detect and label objects, scenes, and faces in images without requiring any custom machine learning model development. It provides APIs for image analysis, including object and scene detection, which directly matches the requirement to identify if a photo contains a person, car, or outdoor scene.

Answer

Amazon SageMaker

Answer

Amazon Comprehend

Answer

Amazon Polly

Question 3

Which AWS compute service allows developers to run code in response to HTTP requests without managing servers, using a simple programming model based on functions?

Accepted Answer

AWS Lambda. AWS Lambda is the correct answer because it is a serverless compute service that executes code in response to events such as HTTP requests via Amazon API Gateway. Developers upload functions and Lambda automatically scales and manages the underlying infrastructure, aligning with the question's requirement of running code without managing servers using a function-based model.

Answer

Amazon EC2

Answer

Amazon ECS

Answer

AWS Fargate

Question 4

Which AWS concept describes the strategy of designing applications so that any individual component can fail without causing the entire system to fail?

Accepted Answer

Design for failure. B is correct because the 'design for failure' principle is a core AWS Well-Architected Framework concept that mandates building applications with no single point of failure. By distributing workloads across multiple Availability Zones and using services like Elastic Load Balancing (ELB) and Auto Scaling, a failure in one component (e.g., an EC2 instance) is isolated and automatically replaced, ensuring the system remains available. This contrasts with traditional monolithic designs where a single component failure can cascade into a full outage.

Answer

Economies of scale

Answer

Managed services adoption

Answer

Infrastructure as code

Question 5

Which AWS service provides a managed workflow for human review tasks, allowing machine learning models to request human oversight for low-confidence predictions?

Accepted Answer

Amazon Augmented AI (A2I). Amazon Augmented AI (A2I) is the correct service because it provides a managed workflow for human review of machine learning predictions, specifically when models have low confidence. It integrates with services like Amazon Rekognition and Amazon Textract to automatically route low-confidence predictions to human reviewers, enabling a human-in-the-loop (HITL) process without custom infrastructure.

Answer

Amazon SageMaker Ground Truth

Answer

Amazon Mechanical Turk

Answer

Amazon Rekognition Custom Labels

Question 6

Which IAM feature allows you to grant temporary, limited access to AWS resources for users who don't have AWS accounts, such as third-party contractors?

Accepted Answer

IAM Roles with cross-account access. IAM Roles with cross-account access allow you to grant temporary, limited permissions to users from another AWS account or external identity providers (e.g., third-party contractors) without creating IAM users for them. The role is assumed via AWS Security Token Service (STS), which issues temporary credentials that expire after a defined duration, ensuring least-privilege access.

Answer

IAM Groups

Answer

IAM password policies

Answer

Service Control Policies (SCPs)

Question 7

A company wants to purchase and deploy a third-party security software solution (a firewall appliance) directly to their AWS environment, with licensing costs added to their AWS monthly bill. Where can they find and subscribe to this software?

Accepted Answer

AWS Marketplace. AWS Marketplace is the correct place to find, subscribe to, and purchase third-party software solutions like a firewall appliance. It allows you to launch the software directly into your AWS environment and have the licensing costs added to your monthly AWS bill through consolidated billing.

Answer

AWS Service Catalog

Answer

AWS Partner Network

Answer

AWS Trusted Advisor

Question 8

Which AWS service provides a marketplace where customers can find, buy, and deploy software from third-party vendors that runs on AWS infrastructure?

Accepted Answer

AWS Marketplace. AWS Marketplace is the correct service because it is a curated digital catalog that enables customers to find, buy, and deploy third-party software solutions that run on AWS infrastructure. It offers pre-configured software, including AMIs, SaaS subscriptions, and container images, with integrated billing through AWS. This directly matches the question's requirement for a marketplace for third-party software deployment.

Answer

AWS Service Catalog

Answer

AWS Partner Network

Answer

Amazon AppFlow

Question 9

Which benefit of cloud computing allows a company to experiment with new ideas and quickly spin down failed experiments without financial penalty?

Accepted Answer

Agility. Agility (Option C) is correct because cloud computing enables rapid experimentation by allowing companies to provision and de-provision resources on demand. This means a company can quickly spin up infrastructure to test a new idea and, if it fails, tear it down immediately without incurring ongoing costs. The pay-as-you-go model ensures there is no long-term financial penalty for failed experiments, directly supporting innovation and iterative development.

Answer

Economies of scale

Answer

Elasticity

Answer

Durability

Question 10

Which AWS storage type provides the lowest latency storage for a single EC2 instance, with data stored on NVMe SSDs physically attached to the host computer?

Accepted Answer

EC2 Instance Store. EC2 Instance Store provides temporary block-level storage for an EC2 instance, with data stored on NVMe SSDs that are physically attached to the host computer. This direct attachment eliminates network latency, offering the lowest possible latency for a single EC2 instance compared to any network-attached storage option.

Answer

Amazon EBS (Elastic Block Store)

Answer

Amazon EFS (Elastic File System)

Answer

Amazon S3

Question 11

Which AWS service enables you to create a private, isolated network within the AWS Cloud where you can define your own IP address range, subnets, and routing?

Accepted Answer

Amazon VPC. Amazon VPC (Virtual Private Cloud) enables you to provision a logically isolated section of the AWS Cloud where you can define your own IP address range using CIDR notation (e.g., 10.0.0.0/16), create subnets across Availability Zones, and configure custom route tables to control traffic flow. This service gives you full control over your virtual networking environment, including the selection of private and public IP addresses, network gateways, and security settings.

Answer

AWS Direct Connect

Answer

Amazon Route 53

Answer

AWS Transit Gateway

Question 12

A company wants to take advantage of AWS's global infrastructure to replicate their database to a second geographic region for disaster recovery. Which benefit of cloud computing does this leverage?

Accepted Answer

Go global in minutes. AWS's global infrastructure allows you to deploy resources, such as database replicas, across multiple geographic regions in minutes. By using services like Amazon RDS Cross-Region Read Replicas or Aurora Global Database, you can replicate data to a second region for disaster recovery, leveraging the cloud's ability to rapidly expand globally without provisioning physical data centers.

Answer

Economies of scale

Answer

Trade capital expense for variable expense

Answer

Increase speed and agility for experiments

Question 13

Which AWS service provides a managed blockchain network using open-source frameworks like Hyperledger Fabric and Ethereum?

Accepted Answer

Amazon Managed Blockchain. Amazon Managed Blockchain is the correct AWS service because it is specifically designed to create and manage blockchain networks using popular open-source frameworks like Hyperledger Fabric and Ethereum. It handles the heavy lifting of setting up the blockchain infrastructure, including peer nodes, ordering service, and certificate authorities, allowing developers to focus on building decentralized applications.

Answer

Amazon DynamoDB

Answer

AWS Quantum Ledger Database (QLDB)

Answer

Amazon Neptune

Question 14

According to the AWS Shared Responsibility Model, which of the following is AWS responsible for?

Accepted Answer

Physical security of data center facilities. AWS is responsible for the physical security of data center facilities, including access controls, surveillance, and environmental systems. This is a foundational component of the Shared Responsibility Model, where AWS secures the infrastructure that runs all AWS services, while the customer secures their data and configurations within those services.

Answer

Encrypting customer data stored in Amazon S3

Answer

Configuring security groups for EC2 instances

Answer

Managing IAM user access policies

Question 15

Which statement about AWS data transfer pricing is correct?

Accepted Answer

Data transfer into AWS from the internet is free; outbound data transfer to the internet is charged. AWS does not charge for data transfer into AWS from the internet, but it does charge for outbound data transfer from AWS to the internet. This pricing model is fundamental to AWS's cost structure, encouraging data ingestion while charging for egress. For example, data uploaded to Amazon S3 is free, but downloading that data to the internet incurs per-GB charges.

Answer

All data transfer into and out of AWS is free

Answer

Data transfer between EC2 instances in different Availability Zones is free

Answer

Data transfer between AWS Regions is free because it stays within AWS infrastructure