CLF-C02 Practice Test 44 — 15 Questions

Question 1

A company hires 10 new developers and needs to assign them identical AWS permissions — read access to S3 and the ability to launch EC2 instances. What is the AWS best practice for assigning these permissions efficiently?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Create an IAM group, attach the required policies to the group, and add all 10 users to the group. IAM groups allow administrators to assign permissions to multiple users at once. By creating a 'Developers' group with the required policies and adding all 10 users to it, permissions are managed centrally. Adding a policy to the group affects all members simultaneously.

Answer

Attach an inline policy to each of the 10 IAM users individually

Answer

Create one IAM user account and share the credentials with all 10 developers

Answer

Grant the developers root account access with MFA enabled

Question 2

Drag and drop the steps to configure an Application Load Balancer (ALB) in the correct order.

Accepted Answer

Step 1: Create target group, Step 2: Register targets, Step 3: Create Application Load Balancer, Step 4: Configure listeners and forward to target group. ALB setup: target group first, then register instances, create ALB, configure listeners, and link target group.

Answer

Step 1: Create Application Load Balancer, Step 2: Create target group, Step 3: Register targets, Step 4: Configure listeners

Answer

Step 1: Register targets, Step 2: Create target group, Step 3: Create Application Load Balancer, Step 4: Configure listeners

Answer

Step 1: Configure listeners, Step 2: Create target group, Step 3: Register targets, Step 4: Create Application Load Balancer

Question 3

Which AWS service helps you manage and deploy infrastructure as code using templates?

Accepted Answer

AWS CloudFormation. AWS CloudFormation is the correct service because it allows you to model and provision AWS resources using declarative templates (JSON or YAML). This enables Infrastructure as Code (IaC) by treating infrastructure as version-controlled, repeatable code, which can be used to create, update, and delete entire stacks of resources in a predictable manner.

Answer

AWS Elastic Beanstalk

Answer

AWS OpsWorks

Answer

AWS CodeDeploy

Question 4

A company is calculating the Total Cost of Ownership (TCO) for migrating to AWS vs. staying on-premises. Which costs are typically REDUCED when migrating to AWS?

Accepted Answer

Physical hardware, data center facilities, and infrastructure management costs. AWS TCO analysis typically shows reduction in: hardware acquisition and depreciation (no physical servers), data center facility costs (power, cooling, space), hardware maintenance and support contracts, and staff time for infrastructure management. AWS shifts these from fixed capital costs to variable operational costs, and eliminates many administrative tasks that managed services handle automatically.

Answer

Software licensing costs always decrease when moving to AWS

Answer

Developer salaries and application development costs

Answer

Data transfer costs are eliminated in the cloud

Question 5

Drag and drop the steps to migrate an on-premises database to Amazon RDS using AWS DMS in the correct order.

Accepted Answer

Create a replication instance, then create source and target endpoints, then test endpoint connectivity, then create a database migration task, then start the migration task.. DMS requires a replication instance, endpoints, connection testing, task creation, and then migration execution.

Answer

Create source and target endpoints, then create a replication instance, then test endpoint connectivity, then create a database migration task, then start the migration task.

Answer

Create a replication instance, then create source and target endpoints, then create a database migration task, then test endpoint connectivity, then start the migration task.

Answer

Create a replication instance, then test endpoint connectivity, then create source and target endpoints, then create a database migration task, then start the migration task.

Question 6

Drag and drop the steps to launch an EC2 instance in the correct order.

Accepted Answer

Choose AMI -> Choose Instance Type -> Configure Instance Details -> Add Storage -> Configure Security Group -> Review and Launch. Launching an EC2 instance involves selecting the OS (AMI), hardware (instance type), networking, storage, and security before launch.

Answer

Choose AMI -> Configure Security Group -> Choose Instance Type -> Add Storage -> Configure Instance Details -> Review and Launch

Answer

Choose Instance Type -> Choose AMI -> Configure Instance Details -> Add Storage -> Configure Security Group -> Review and Launch

Answer

Choose AMI -> Choose Instance Type -> Configure Security Group -> Add Storage -> Configure Instance Details -> Review and Launch

Question 7

Match each AWS database service to its description.

Accepted Answer

Amazon RDS: Managed relational database service supporting multiple engines. Amazon RDS provides managed relational databases, DynamoDB offers NoSQL capabilities, Redshift is for data warehousing, and ElastiCache is for caching. Common confusions involve mixing up Redshift and ElastiCache due to their related but distinct use cases.

Answer

Amazon Redshift: Fully managed in-memory caching service

Answer

Amazon ElastiCache: Fully managed data warehousing service for analytics

Question 8

A company uses several AWS services and wants to create a unified monitoring dashboard to track metrics and set alarms. Which AWS service provides this capability?

Accepted Answer

Amazon CloudWatch. Amazon CloudWatch is AWS's observability service for monitoring metrics, logs, events, and traces from AWS services and custom applications. CloudWatch dashboards display metrics from multiple services in a single view. CloudWatch Alarms trigger notifications or automated actions when metrics exceed thresholds.

Answer

AWS CloudTrail

Answer

AWS Config

Answer

AWS X-Ray

Question 9

Match each AWS networking service to its description.

Accepted Answer

Amazon VPC: Isolated virtual network in the AWS cloud. Correct matches: Amazon VPC provides an isolated virtual network; AWS Global Accelerator optimizes traffic routing. Common confusions involve mixing up AWS Direct Connect (dedicated connection) with Route 53 (DNS).

Answer

AWS Direct Connect: DNS service that routes users to AWS endpoints

Answer

Amazon Route 53: Dedicated network connection from on-premises to AWS

Question 10

Match each AWS service to its primary category.

Accepted Answer

Amazon EC2: Compute. AWS services are categorized by their primary function. Amazon EC2 is compute, S3 is storage, RDS is database, and VPC is networking. Common confusions include mixing storage and compute categories.

Answer

Amazon S3: Compute

Answer

Amazon VPC: Database

Question 11

Match each AWS Well-Architected Framework pillar to its description.

Accepted Answer

Security: Protect information, systems, and assets.. The AWS Well-Architected Framework pillars are Operational Excellence, Security, Reliability, Performance Efficiency, and Cost Optimization. Correct matches align each pillar with its core focus area.

Answer

Security: Ability to run and monitor systems.

Answer

Reliability: Ability to optimize costs.

Question 12

Match each AWS security service to its function.

Accepted Answer

AWS WAF: Protects web applications from common web exploits. The correct matches are: AWS WAF protects web applications from common exploits; AWS Shield provides DDoS protection; AWS IAM manages access to AWS resources; AWS KMS creates and manages encryption keys. Common confusions include mixing up AWS WAF with CloudTrail (monitoring) or misattributing encryption key management to AWS Shield.

Answer

AWS WAF: Monitors API calls and user activity

Answer

AWS Shield: Creates and manages encryption keys

Question 13

A company wants to ensure its cloud architecture can handle sudden spikes in traffic without manual intervention. Which cloud concept best describes this capability?

Accepted Answer

Elasticity. Elasticity is the ability to automatically scale compute resources up or down in response to demand. This allows workloads to handle traffic spikes without pre-provisioning and to scale down when demand subsides, optimizing cost.

Answer

High availability

Answer

Fault tolerance

Answer

Durability

Question 14

Match each AWS compute service to its typical use case.

Accepted Answer

EC2: Full control over virtual servers in the cloud. EC2 offers customizable virtual servers; Lambda is for serverless functions; ECS coordinates Docker containers. Confusion often arises between EC2 and Lambda because one is server-based and the other is serverless.

Answer

EC2: Serverless compute for event-driven applications

Answer

Lambda: Full control over virtual servers in the cloud

Question 15

Match each AWS storage service to its description.

Accepted Answer

S3: Object storage for storing and retrieving any amount of data from anywhere.. Each AWS storage service is designed for specific use cases: S3 for object storage, EBS for block storage attached to EC2, EFS for file storage shared across instances, and Glacier for archival.

Answer

S3: Block storage volumes for use with EC2 instances.

Answer

EBS: Object storage for storing and retrieving any amount of data from anywhere.