CLF-C02 Practice Test 38 — 15 Questions

Question 1

Which statement best describes the concept of 'infrastructure as code' (IaC) in the context of AWS?

Accepted Answer

Defining and provisioning cloud resources using version-controlled configuration files. Infrastructure as Code (IaC) is the practice of defining and managing cloud resources through machine-readable definition files (e.g., AWS CloudFormation templates or Terraform HCL) that are stored in version control. This allows for automated, repeatable, and consistent provisioning of AWS infrastructure, enabling change management, peer review, and rollback capabilities.

Answer

Using the AWS Management Console to provision resources manually

Answer

Writing scripts to install software on EC2 instances

Answer

Backing up AWS resource configurations to Amazon S3

Question 2

A solutions architect is designing a new architecture on AWS that includes EC2, RDS, S3, and data transfer. Before deploying anything, they want to estimate the monthly cost of running this architecture. Which AWS tool should they use?

Accepted Answer

AWS Pricing Calculator. AWS Pricing Calculator is the correct tool because it allows you to estimate the monthly cost of AWS services before deployment by specifying resource configurations (e.g., EC2 instance type, RDS storage, S3 data transfer). Unlike Cost Explorer, which analyzes historical costs, the Pricing Calculator provides upfront cost projections for new architectures.

Answer

AWS Cost Explorer

Answer

AWS Budgets

Answer

AWS Trusted Advisor

Question 3

A company wants to understand the AWS Well-Architected Framework's sixth pillar added in 2021. Which pillar focuses on minimizing the environmental impact of cloud workloads?

Accepted Answer

Sustainability. The AWS Well-Architected Framework added a sixth pillar, Sustainability, in 2021. This pillar provides design principles and best practices to minimize the environmental impact of cloud workloads, such as optimizing utilization, reducing energy consumption, and selecting efficient hardware and regions.

Answer

Cost Optimization

Answer

Governance

Answer

Resilience

Question 4

According to the AWS Shared Responsibility Model, which of the following is the customer's responsibility when using AWS Lambda?

Accepted Answer

Writing secure function code and managing IAM permissions for the function. Under the AWS Shared Responsibility Model, AWS manages the security of the cloud, including the Lambda execution environment, runtime, and underlying servers. The customer is responsible for security in the cloud, which includes writing secure function code and managing IAM permissions to control access to the function and its resources. Option C correctly identifies this customer responsibility.

Answer

Patching the Lambda execution environment and runtime

Answer

Managing the underlying servers that run Lambda functions

Answer

Ensuring Lambda scales automatically during traffic spikes

Question 5

A company has a compliance policy requiring that all data at rest in Amazon S3 be encrypted with a key that is automatically rotated every year. The company wants to manage the encryption keys themselves, maintain control over access policies, and have AWS handle the key rotation automatically. Which AWS service should the company use?

Accepted Answer

AWS Key Management Service (AWS KMS). AWS KMS allows you to create customer managed keys (CMKs) with automatic annual rotation enabled. You retain control over key policies and access permissions, while AWS handles the rotation of the key material. This satisfies the compliance requirement for encrypted data at rest in S3 with automatic yearly key rotation.

Answer

AWS CloudHSM

Answer

AWS Secrets Manager

Answer

AWS Certificate Manager

Question 6

Which AWS service enables you to run relational database workloads with up to 5x the throughput of standard MySQL and 3x the throughput of standard PostgreSQL at a lower price point than commercial databases?

Accepted Answer

Amazon Aurora. Amazon Aurora is a MySQL and PostgreSQL-compatible relational database built for the cloud, offering up to 5x the throughput of standard MySQL and 3x the throughput of standard PostgreSQL. It achieves this performance through a distributed, auto-healing storage subsystem that separates compute from storage, and it is priced lower than commercial databases like Oracle or SQL Server while providing high availability and durability.

Answer

Amazon RDS for MySQL

Answer

Amazon Redshift

Answer

Amazon DynamoDB

Question 7

A company's CTO asks about the AWS Cloud Adoption Framework (AWS CAF). Which statement about AWS CAF is accurate?

Accepted Answer

AWS CAF organizes guidance into six perspectives covering Business, People, Governance, Platform, Security, and Operations. The AWS Cloud Adoption Framework (AWS CAF) organizes its guidance into six distinct perspectives: Business, People, Governance, Platform, Security, and Operations. These perspectives help organizations identify and address gaps in their cloud readiness across both business and technical domains, providing actionable best practices for cloud adoption.

Answer

AWS CAF is a compliance framework similar to SOC 2 or PCI DSS

Answer

AWS CAF is only relevant for large enterprises migrating more than 1,000 servers

Answer

AWS CAF replaces the AWS Well-Architected Framework for architecture guidance

Question 8

Which statement correctly describes how Amazon S3 pricing works?

Accepted Answer

S3 charges per GB stored, per request, and for outbound data transfer. Amazon S3 pricing is based on a pay-as-you-go model where you are charged for the amount of storage you use (per GB per month), the number and type of requests (e.g., PUT, GET, LIST), and data transfer out to the internet. This granular billing reflects actual usage, making option B correct.

Answer

S3 charges a flat monthly fee regardless of storage used

Answer

S3 storage is free; only data transfer is charged

Answer

S3 charges by the number of files stored, not the size

Question 9

Which AWS Well-Architected Framework pillar focuses on protecting information, systems, and assets while delivering business value through risk assessments and mitigation strategies?

Accepted Answer

Security. The Security pillar of the AWS Well-Architected Framework is specifically designed to protect information, systems, and assets through the implementation of risk assessments and mitigation strategies. It encompasses practices such as identity and access management (IAM), detective controls (e.g., AWS CloudTrail, Amazon GuardDuty), infrastructure protection (e.g., AWS WAF, security groups), data protection (e.g., encryption at rest and in transit), and incident response. This pillar directly aligns with the question's focus on delivering business value while managing security risks.

Answer

Reliability

Answer

Operational Excellence

Answer

Performance Efficiency

Question 10

Which AWS service provides a managed Kubernetes service that removes the overhead of installing, operating, and maintaining a Kubernetes control plane?

Accepted Answer

Amazon EKS. Amazon EKS (Elastic Kubernetes Service) is the correct answer because it is a managed Kubernetes service that handles the provisioning, scaling, and maintenance of the Kubernetes control plane (including the API server, etcd, and controller manager). This removes the operational overhead of installing and operating the control plane yourself, allowing you to focus on deploying and managing containerized applications.

Answer

Amazon ECS

Answer

AWS Fargate

Answer

AWS App Mesh

Question 11

A company stores customer health records in an application database and needs a HIPAA-eligible AWS service for the database tier. Which relational database option on AWS is eligible for HIPAA workloads?

Accepted Answer

Amazon RDS with a signed Business Associate Agreement (BAA) with AWS. Amazon RDS can be used for HIPAA workloads when the customer has signed a Business Associate Agreement (BAA) with AWS and configures the RDS instance with encryption at rest (using AWS KMS) and encryption in transit (using TLS). The BAA is a contractual requirement under HIPAA that makes AWS a business associate, allowing covered entities to store protected health information (PHI) in RDS. Without a signed BAA, no AWS service is automatically HIPAA-eligible, even if technical security controls are in place.

Answer

Amazon RDS requires no special configuration for HIPAA compliance

Answer

Amazon Redshift only, because RDS does not support HIPAA workloads

Answer

Only self-managed databases on EC2 can be used for HIPAA workloads on AWS

Question 12

Which AWS service provides automated security assessments of EC2 instances against a library of security best practices and common vulnerabilities?

Accepted Answer

Amazon Inspector. Amazon Inspector is the correct AWS service because it is specifically designed to perform automated security assessments of EC2 instances. It uses a library of rules mapped to common security best practices (e.g., CIS benchmarks) and common vulnerabilities (e.g., CVEs) to scan the instance's OS and network configuration, generating a detailed findings report.

Answer

AWS Trusted Advisor

Answer

AWS Security Hub

Answer

AWS Config

Question 13

Which AWS service provides a fully managed virtual desktop infrastructure (VDI) that allows users to access Windows or Linux desktops from any device?

Accepted Answer

Amazon WorkSpaces. Amazon WorkSpaces is a fully managed, secure virtual desktop infrastructure (VDI) service that provisions either Windows or Linux desktops. Users can access their persistent desktops from any supported device (e.g., PC, Mac, iPad, Chromebook) using the WorkSpaces client application or a web browser, without needing to manage the underlying EC2 instances or operating system.

Answer

Amazon AppStream 2.0

Answer

AWS Client VPN

Answer

Amazon EC2 with Remote Desktop Protocol

Question 14

A company wants to minimise the environmental impact of their AWS workloads by choosing the right instance sizes, maximising utilisation, using graviton processors for better performance per watt, and designing architectures that reduce total compute needed. Which AWS Well-Architected Framework pillar guides these decisions?

Accepted Answer

Sustainability. The Sustainability pillar of the AWS Well-Architected Framework focuses on minimizing the environmental impact of cloud workloads. Choosing right-sized instances, maximizing utilization, using Graviton processors for better performance per watt, and designing architectures to reduce total compute directly align with sustainability goals by reducing energy consumption and carbon footprint.

Answer

Cost Optimisation

Answer

Performance Efficiency

Answer

Reliability

Question 15

An enterprise is planning their cloud adoption strategy. They want to understand how cloud adoption typically progresses. Which framework provides a structured approach to cloud adoption organized around business, people, governance, platform, security, and operations perspectives?

Accepted Answer

AWS Cloud Adoption Framework (CAF). The AWS Cloud Adoption Framework (CAF) is specifically designed to guide organizations through their cloud adoption journey by providing structured guidance across six core perspectives: Business, People, Governance, Platform, Security, and Operations. Unlike the Well-Architected Framework, which focuses on architectural best practices for building workloads, the CAF addresses the broader organizational and process changes needed for successful cloud adoption.

Answer

AWS Well-Architected Framework

Answer

AWS Migration Hub

Answer

AWS Trusted Advisor