CLF-C02 Practice Test 42 — 15 Questions

Question 1

Which tool allows a company to estimate the monthly cost of running a new AWS architecture before deploying any resources?

Accepted Answer

AWS Pricing Calculator. The AWS Pricing Calculator (formerly Simple Monthly Calculator) allows users to estimate the monthly cost of AWS services by configuring resources like EC2 instances, storage, and data transfer before deployment. It provides a detailed cost breakdown based on selected regions, instance types, and usage patterns, enabling informed budgeting without incurring actual charges.

Answer

AWS Cost Explorer

Answer

AWS Budgets

Answer

AWS Trusted Advisor

Question 2

A company needs a relational database that automatically scales storage, replicates data across multiple AZs, and can failover automatically without manual intervention. Which AWS service provides these capabilities?

Accepted Answer

Amazon RDS with Multi-AZ deployment. Amazon RDS with Multi-AZ deployment automatically provisions and maintains a synchronous standby replica in a different Availability Zone. This setup provides automatic failover to the standby without manual intervention, and storage scaling can be handled via Amazon EBS or Aurora storage auto-scaling, meeting all stated requirements.

Answer

Amazon DynamoDB

Answer

Amazon Redshift

Answer

Amazon ElastiCache for Redis

Question 3

A developer wants to build a serverless application that responds to HTTP requests. Which combination of AWS services would be most appropriate?

Accepted Answer

Amazon API Gateway and AWS Lambda. Amazon API Gateway acts as a fully managed HTTP endpoint that receives and routes incoming requests to AWS Lambda functions, which execute the application logic without provisioning servers. This combination directly fulfills the requirement for a serverless application that responds to HTTP requests, as Lambda handles compute in a stateless, event-driven manner and API Gateway provides the HTTP interface with built-in features like throttling, authentication, and request validation.

Answer

Amazon EC2 and Elastic Load Balancing

Answer

Amazon ECS and AWS Fargate

Answer

AWS Elastic Beanstalk and Amazon RDS

Question 4

Which Amazon EC2 instance type provides the best performance for a relational database that requires very high IOPS with consistent sub-millisecond storage latency?

Accepted Answer

Storage-optimized instances (I family). The I family (Storage-optimized instances) is designed for high-frequency, low-latency I/O operations, leveraging NVMe SSD-backed instance storage to deliver very high IOPS and consistent sub-millisecond latency, making it ideal for relational databases with demanding storage performance requirements.

Answer

General purpose instances (M family)

Answer

Compute-optimized instances (C family)

Answer

Memory-optimized instances (R family)

Question 5

A company operates a critical e-commerce platform on AWS that generates significant revenue. The management team requires a dedicated Technical Account Manager (TAM) to provide proactive guidance and operational best practices. Additionally, they need the fastest possible response time for critical system failures, targeting a response within 15 minutes. Which AWS Support plan should the company choose?

Accepted Answer

Enterprise Support. The company requires a dedicated Technical Account Manager (TAM) and the fastest possible response time for critical system failures (15-minute response). Only the Enterprise Support plan includes a designated TAM and provides a 15-minute response time for business-critical system failures. The Enterprise On-Ramp Support plan offers a TAM but has a longer 30-minute response time for critical cases, and the Business Support plan does not include a TAM at all.

Answer

Basic Support

Answer

Business Support

Answer

Enterprise On-Ramp Support

Question 6

A company recently migrated to AWS and needs to ensure their S3 buckets are not publicly accessible. Which combination of controls best prevents accidental public S3 exposure?

Accepted Answer

Enable S3 Block Public Access at the account level and use AWS Config to detect violations. S3 Block Public Access at the account level provides a centralized, enforceable guardrail that prevents any bucket or object from being made publicly accessible, overriding any bucket-level policies or ACLs. AWS Config can then continuously monitor for configuration violations, such as a bucket policy that grants public access, and trigger remediation or alerts. Together, these controls create a defense-in-depth approach that both prevents accidental exposure and detects non-compliance.

Answer

Enable S3 server-side encryption on all buckets

Answer

Enable S3 versioning on all buckets

Answer

Enable S3 Transfer Acceleration for all buckets

Question 7

A finance team works with architects to eliminate unused EC2 instances, right-size over-provisioned resources, replace On-Demand instances with Reserved Instances for stable workloads, and adopt managed services to reduce operational overhead. Which AWS Well-Architected Framework pillar guides these activities?

Accepted Answer

Cost Optimisation. The Cost Optimization pillar of the AWS Well-Architected Framework focuses on eliminating unused resources, right-sizing over-provisioned instances, using Reserved Instances for predictable workloads, and adopting managed services to reduce operational overhead. These activities directly target cost efficiency by aligning resource usage with demand and avoiding waste.

Answer

Operational Excellence

Answer

Reliability

Answer

Security

Question 8

A company needs to monitor their application's performance and identify bottlenecks by tracing requests as they travel through multiple AWS services and microservices. Which AWS service provides distributed tracing?

Accepted Answer

AWS X-Ray. AWS X-Ray is the correct service because it is specifically designed for distributed tracing, allowing you to trace requests end-to-end as they travel through AWS services and microservices. It provides a service map, traces, and annotations to identify performance bottlenecks and debug errors across distributed applications.

Answer

Amazon CloudWatch

Answer

AWS CloudTrail

Answer

AWS Config

Question 9

Which AWS service provides centralized governance and compliance across multiple AWS accounts in an organization?

Accepted Answer

AWS Organizations. AWS Organizations is the correct service because it provides centralized governance and compliance across multiple AWS accounts by enabling you to create a hierarchy of accounts with Service Control Policies (SCPs) that centrally control permissions. SCPs allow you to enforce compliance rules, such as restricting the use of specific AWS services or regions, across all accounts in the organization without requiring individual account-level configuration.

Answer

AWS IAM

Answer

AWS Config

Answer

Amazon Macie

Question 10

Which AWS service provides quantum computing hardware as a cloud service, enabling researchers to run algorithms on actual quantum processors?

Accepted Answer

Amazon Braket. Amazon Braket is the correct answer because it is a fully managed AWS service that provides access to quantum computing hardware from multiple providers, including IonQ, Rigetti, and D-Wave, in a single environment. It allows researchers to design, test, and run quantum algorithms on actual quantum processors without managing the underlying infrastructure, making it the only option that directly offers quantum computing as a cloud service.

Answer

AWS Inferentia

Answer

AWS Wavelength

Answer

Amazon EC2 High Performance Computing

Question 11

A company wants to provide a virtual contact center for their customer service operations without managing any telephony infrastructure. Which AWS service enables this?

Accepted Answer

Amazon Connect. Amazon Connect is a cloud-based contact center service that enables organizations to set up a virtual contact center without managing any underlying telephony infrastructure. It provides built-in telephony, IVR, and agent management, allowing customer service operations to scale on demand without the need for physical PBX or SIP trunking.

Answer

Amazon Chime SDK

Answer

Amazon Pinpoint

Answer

Amazon SES

Question 12

Which AWS service provides a domain name system (DNS) that routes end-user requests to AWS infrastructure and external resources?

Accepted Answer

Amazon Route 53. Amazon Route 53 is a highly available and scalable cloud Domain Name System (DNS) web service. It is designed to route end-user requests to AWS infrastructure (such as EC2 instances, ELBs, and S3 buckets) and to external resources by translating human-readable domain names into IP addresses. This directly matches the question's requirement for a DNS-based routing service.

Answer

AWS Global Accelerator

Answer

Amazon CloudFront

Answer

Elastic Load Balancing

Question 13

Which AWS service provides a petabyte-scale data transfer solution for moving large amounts of data into AWS when network transfer is not feasible?

Accepted Answer

AWS Snowball. AWS Snowball is a petabyte-scale data transport solution that uses physical storage devices to transfer large amounts of data into and out of AWS when network transfer is not feasible due to high latency, low bandwidth, or high costs. It is specifically designed for moving massive datasets (up to 80 TB per device) where network uploads would take weeks or months, making it the correct choice for this scenario.

Answer

AWS DataSync

Answer

AWS Transfer Family

Answer

Amazon S3 Multipart Upload

Question 14

A company wants to identify sensitive data (such as PII and credit card numbers) stored in Amazon S3 buckets across their organization. Which AWS service automates this discovery?

Accepted Answer

Amazon Macie. Amazon Macie is a fully managed data security and data privacy service that uses machine learning and pattern matching to discover, classify, and protect sensitive data stored in Amazon S3. It automatically identifies personally identifiable information (PII), credit card numbers, and other sensitive data types, making it the correct choice for this use case.

Answer

Amazon Inspector

Answer

AWS Config

Answer

Amazon GuardDuty

Question 15

Which AWS pricing benefit means that the more AWS services you use across your organization, the greater the volume discounts you receive on some services?

Accepted Answer

Tiered volume pricing discounts. Tiered volume pricing discounts reward customers with lower per-unit costs as their usage volume increases across multiple services. This is a built-in AWS pricing model where the more you use, the more you save, without requiring any upfront commitment or reservation.

Answer

Reserved Instance discounts

Answer

Spot Instance savings

Answer

Savings Plans commitment discounts