CLF-C02 Practice Test 45 — 15 Questions

Question 1

Match each AWS support plan to its key feature.

Accepted Answer

Basic: Access to customer service and community forums. The correct matches are: Basic – customer service and forums; Developer – business hours email; Business – 24/7 phone/chat; Enterprise – TAM and event management. Common confusions include attributing higher-level features to lower-level plans.

Answer

Basic: 24/7 phone and chat support

Answer

Developer: Technical Account Manager

Question 2

A marketing company is launching a new campaign that will require a temporary increase in web server capacity. The operations team provisions an additional 10 Amazon EC2 instances through the AWS Management Console within five minutes, without needing to submit a purchase order or wait for hardware delivery. Which advantage of cloud computing does this scenario best demonstrate?

Accepted Answer

Increase speed and agility. The scenario highlights how cloud computing enables rapid provisioning of resources—10 EC2 instances in five minutes—without the delays of procurement or hardware setup. This directly demonstrates increased speed and agility, a core advantage of cloud computing that allows businesses to experiment and scale quickly.

Answer

Benefit from massive economies of scale

Answer

Trade capital expense for variable expense

Answer

Stop spending money on running and maintaining data centers

Question 3

Before moving to AWS, a company over-provisioned their data centre servers to handle projected peak traffic, resulting in expensive idle capacity most of the time. After migrating, the company uses Auto Scaling to match capacity exactly to actual demand. Which cloud benefit does this represent?

Accepted Answer

Stop guessing about capacity. The scenario directly describes the cloud benefit of 'Stop guessing about capacity.' Before AWS, the company over-provisioned servers to handle projected peak traffic, leading to idle capacity. With Auto Scaling, AWS dynamically adjusts compute resources to match actual demand, eliminating the need to predict capacity in advance.

Answer

Trade capital expense for variable expense

Answer

Benefit from economies of scale

Answer

Increase speed and agility

Question 4

A gaming company needs ultra-low latency access to AWS compute for their mobile game players at 5G network edges. Which AWS infrastructure extension enables this?

Accepted Answer

AWS Wavelength Zones. AWS Wavelength Zones embed AWS compute and storage services at the edge of 5G networks, enabling ultra-low latency for mobile game players by minimizing the distance data must travel between the device and the application. This is specifically designed for applications that require single-digit millisecond latencies over 5G, such as real-time gaming, AR/VR, and live video processing.

Answer

AWS Local Zones

Answer

AWS Outposts

Answer

Amazon CloudFront Edge Locations

Question 5

A company collects clickstream data from millions of users in real time and needs to process and analyse this data as it arrives — not after storing it — to detect patterns within seconds. Which AWS service is designed for real-time data streaming and processing?

Accepted Answer

Amazon Kinesis Data Streams. Amazon Kinesis Data Streams is purpose-built for real-time data streaming and processing, enabling you to ingest and analyze clickstream data as it arrives with sub-second latency. It supports custom processing using AWS Lambda, Kinesis Data Analytics, or Kinesis Data Firehose, making it ideal for detecting patterns in real-time without waiting for data to be stored.

Answer

Amazon SQS

Answer

Amazon S3

Answer

Amazon DynamoDB Streams

Question 6

A company has multiple departments (HR, Finance, Engineering) sharing a single AWS account. Each department tags its resources with a 'Department' tag (e.g., Department:HR). The finance team wants to set monthly spending limits for each department and receive email alerts when a department's spending reaches 80% of its limit. They also want a visual dashboard to compare actual spending against the budgeted amounts. Which combination of AWS services should the finance team use?

Accepted Answer

AWS Budgets and AWS Cost Explorer. AWS Budgets allows the finance team to set monthly spending limits per department (using the 'Department' tag) and configure alerts at 80% of the budget. AWS Cost Explorer provides a visual dashboard to compare actual spending against budgeted amounts, enabling trend analysis and cost allocation tracking. Together, they fulfill both the alerting and visualization requirements.

Answer

AWS Cost Explorer and AWS Trusted Advisor

Answer

AWS Budgets and Amazon QuickSight

Answer

AWS Pricing Calculator and AWS Cost Explorer

Question 7

A data team needs to extract data from S3 and RDS, transform it (clean, enrich, join), and load it into Amazon Redshift for analytics. They want a serverless service that discovers and catalogues data schemas automatically and runs the ETL jobs without provisioning servers. Which AWS service provides this?

Accepted Answer

AWS Glue. AWS Glue is a fully managed, serverless ETL service that automatically discovers and catalogs data schemas using its Crawler feature, which populates the AWS Glue Data Catalog. It can extract data from S3 and RDS, transform it (clean, enrich, join), and load it into Amazon Redshift without any server provisioning or management.

Answer

Amazon EMR

Answer

AWS Data Pipeline

Answer

Amazon Kinesis Data Firehose

Question 8

Which AWS service is used to register domain names and route DNS queries for domain names like 'example.com'?

Accepted Answer

Amazon Route 53. Amazon Route 53 is a scalable Domain Name System (DNS) web service that provides both domain name registration and DNS resolution. It translates human-readable domain names like 'example.com' into IP addresses and can also register new domains or transfer existing ones. This dual functionality makes it the correct choice for the question.

Answer

Amazon CloudFront

Answer

AWS Global Accelerator

Answer

AWS Certificate Manager

Question 9

A company manages 20 AWS accounts under AWS Organizations. The security team wants to ensure that no security group in any account allows unrestricted inbound RDP access (0.0.0.0/0). They need to automatically detect any security group that violates this rule and receive a notification. They also want to track the configuration history of security group changes for forensic analysis. Which AWS service should they use to achieve these requirements?

Accepted Answer

AWS Config. AWS Config is the correct service because it provides managed rules like 'restricted-common-ports' or a custom Lambda rule to detect security groups with inbound RDP access from 0.0.0.0/0. It continuously evaluates resource configurations, sends Amazon SNS notifications on noncompliant resources, and automatically records a configuration history of all security group changes, enabling forensic analysis. This directly meets the requirements for detection, notification, and historical tracking.

Answer

Amazon GuardDuty

Answer

AWS Security Hub

Answer

AWS CloudTrail

Question 10

A company uses AWS for multiple projects. Each project's resources have been tagged with 'Project' and 'Team' tags. The finance team wants to view a cost breakdown in AWS Cost Explorer using these tags. The tags are already applied to existing resources. However, when the finance team opens Cost Explorer, the tags are not available for filtering. What must the finance team do to see costs by these tags?

Accepted Answer

Activate the cost allocation tags in the Billing and Cost Management console.. Cost allocation tags must be explicitly activated in the Billing and Cost Management console before they appear in AWS Cost Explorer. Even though tags are already applied to resources, AWS does not automatically make them available for cost filtering until they are activated as cost allocation tags. This activation process enables the tags to be recognized by billing and cost management services.

Answer

Enable detailed billing reports in the Billing console.

Answer

Create a budget in AWS Budgets and set tag-based filters.

Answer

Use AWS Organizations to create separate accounts per project.

Question 11

A company processes credit card transactions and must comply with PCI DSS requirements. Customer payment data is stored in Amazon RDS for MySQL. The security team needs to ensure that all automated database snapshots are encrypted at rest using customer-managed encryption keys that are automatically rotated every 365 days. The team wants a fully managed AWS service to create and control these encryption keys. Which AWS service should the company use to meet these requirements?

Accepted Answer

AWS Key Management Service (AWS KMS). AWS KMS is the correct service because it provides a fully managed, centralized way to create and control customer-managed keys (CMKs) that can be used to encrypt Amazon RDS automated snapshots. KMS supports automatic annual key rotation (365 days) as a built-in feature, and it integrates directly with RDS to enforce encryption at rest for snapshots without requiring any manual key management. This meets the PCI DSS requirement for customer-controlled encryption keys with automated rotation.

Answer

AWS CloudHSM

Answer

AWS Secrets Manager

Answer

AWS Certificate Manager (ACM)

Question 12

Match each AWS management tool to its purpose.

Accepted Answer

AWS CloudFormation: Infrastructure as code to provision and manage AWS resources.. These management tools serve distinct purposes: CloudFormation for infrastructure provisioning, Config for configuration monitoring, and Trusted Advisor for optimization recommendations.

Answer

AWS CloudFormation: Continuously monitor and record AWS resource configurations.

Answer

AWS Config: Optimize resource usage and improve security by following best practices.

Question 13

A company uses an Amazon RDS for PostgreSQL database for its production application. The security policy requires that database passwords be rotated automatically every 90 days. The database credentials are currently stored in a configuration file on an Amazon EC2 instance. The company wants a fully managed AWS service that can securely store the credentials, automatically rotate them on a schedule, and update the RDS instance without requiring code changes to the application. Which AWS service should the company use to meet these requirements?

Accepted Answer

AWS Secrets Manager. AWS Secrets Manager is the correct choice because it is a fully managed service designed specifically to securely store database credentials, automatically rotate them on a defined schedule (e.g., every 90 days), and natively integrate with Amazon RDS to update the password without requiring any application code changes. The application can retrieve the current credentials at runtime using the Secrets Manager API, eliminating the need for hardcoded or file-based credentials.

Answer

AWS Systems Manager Parameter Store

Answer

AWS Key Management Service (KMS)

Answer

AWS Certificate Manager (ACM)

Question 14

A development team wants to deploy a containerized microservices application on AWS. The team wants to minimize operational overhead by not managing any servers or container orchestration control plane. They also want to pay only for the compute and memory resources their containers consume, without needing to provision or scale underlying infrastructure. Which AWS compute service should the team use?

Accepted Answer

Amazon ECS with the AWS Fargate launch type. Amazon ECS with the AWS Fargate launch type is the correct choice because Fargate is a serverless compute engine that removes the need to manage servers or the container orchestration control plane. With Fargate, you define your containerized microservices and pay only for the vCPU and memory resources consumed at the task level, without provisioning or scaling underlying EC2 instances. This directly meets the team's requirement for zero operational overhead and pay-per-consumption billing.

Answer

Amazon EC2 with Amazon ECS using the EC2 launch type

Answer

AWS Elastic Beanstalk with a Docker platform

Answer

AWS Lambda

Question 15

A company is designing a highly available application on AWS. The architect plans to deploy application instances across multiple Availability Zones and implement health checks to automatically route traffic away from failed instances. These design decisions primarily contribute to which pillar of the AWS Well-Architected Framework?

Accepted Answer

Reliability. Deploying application instances across multiple Availability Zones and using health checks to route traffic away from failed instances directly increases the system's ability to recover from failures and remain operational. This aligns with the Reliability pillar of the AWS Well-Architected Framework, which focuses on ensuring a workload performs its intended function correctly and consistently when expected, including the ability to recover from infrastructure or service disruptions.

Answer

Operational Excellence

Answer

Security

Answer

Performance Efficiency