CLF-C02 Practice Test 48 — 15 Questions

Question 1

A company runs a multiplayer gaming application on Amazon EC2 instances in the us-east-1 Region. The application uses the UDP protocol for real-time communication between players and game servers. Players in Asia and Europe report high latency and packet loss. The company wants to improve performance by directing player traffic from the nearest edge location to the application over the AWS global network, without modifying the application code. Which AWS service should the company use?

Accepted Answer

AWS Global Accelerator. AWS Global Accelerator uses the AWS global network to route UDP traffic from the nearest edge location to the application, reducing latency and packet loss without requiring code changes. It leverages Anycast IP addresses to direct player traffic to the closest edge location, then transports it over the optimized AWS backbone to the EC2 instances in us-east-1.

Answer

Amazon CloudFront

Answer

Amazon Route 53 latency routing

Answer

AWS Site-to-Site VPN

Question 2

A company runs a production web application on a fleet of Amazon EC2 instances. The operations team has observed that most instances have an average CPU utilization below 10% over the past month. They want to receive automated, ML-based recommendations for downsizing these instances to smaller instance types to reduce costs without compromising performance. The team also wants to see the estimated monthly savings for each recommendation. Which AWS service should the operations team use?

Accepted Answer

AWS Compute Optimizer. AWS Compute Optimizer is the correct service because it uses machine learning to analyze historical utilization metrics (such as CPU, memory, and network) of EC2 instances and provides actionable recommendations to downsize or rightsize instances. It specifically generates estimated monthly savings for each recommendation, directly addressing the need for automated, ML-based downsizing suggestions without compromising performance.

Answer

AWS Trusted Advisor

Answer

AWS Cost Explorer

Answer

AWS Budgets

Question 3

A company runs a production web application on Amazon EC2 and Amazon RDS instances. The company's IT team needs technical support from AWS engineers with a guaranteed response time of less than one hour for issues where production systems are impaired. Additionally, the team wants to receive cost optimization recommendations through AWS Trusted Advisor. Which AWS Support plan should the company choose?

Accepted Answer

AWS Business Support. AWS Business Support provides a response time of less than one hour for production system impaired cases (severity level 'high') and includes full access to AWS Trusted Advisor, which offers cost optimization recommendations. This plan meets both the guaranteed response time and the cost optimization requirements specified in the question.

Answer

AWS Basic Support

Answer

AWS Developer Support

Answer

AWS Enterprise Support

Question 4

A company runs a production workload on Amazon EC2 instances that must be available continuously. The workload has predictable usage patterns. The company wants to minimize compute costs while maintaining high availability. Which pricing model should they choose?

Accepted Answer

Reserved Instances. Reserved Instances (RIs) are the correct choice because the workload requires continuous availability and has predictable usage patterns. By committing to a 1- or 3-year term, the company can receive a significant discount (up to 72%) compared to On-Demand pricing, while still ensuring the EC2 instances are always running and highly available. This model directly aligns with the need to minimize compute costs for a steady-state, always-on production workload.

Answer

On-Demand Instances

Answer

Spot Instances

Answer

Dedicated Hosts

Question 5

A company runs a real-time bidding platform for online advertising. The platform requires a database that can handle millions of requests per second with single-digit millisecond latency for both reads and writes. The data model is simple key-value pairs, and the database must be fully managed so that the company does not have to provision or maintain servers. Which AWS database service should the company use to meet these requirements?

Accepted Answer

Amazon DynamoDB. Amazon DynamoDB is the correct choice because it is a fully managed NoSQL key-value and document database that delivers single-digit millisecond latency at any scale, handling millions of requests per second. Its serverless architecture eliminates the need to provision or manage servers, making it ideal for real-time bidding platforms with simple key-value data models and high-throughput, low-latency requirements.

Answer

Amazon RDS

Answer

Amazon Redshift

Answer

Amazon ElastiCache

Question 6

A company runs a variety of workloads on AWS and wants to be notified when their monthly spending behaves unusually compared to past patterns. They want a managed service that uses machine learning to detect cost anomalies and provides root cause analysis. Which AWS service or feature should they use?

Accepted Answer

AWS Cost Anomaly Detection. AWS Cost Anomaly Detection is a managed service that leverages machine learning to continuously monitor your cost and usage patterns, detect anomalies, and provide root cause analysis. It automatically establishes a baseline from historical spending data and alerts you when actual spending deviates from expected patterns, making it the correct choice for this use case.

Answer

AWS Budgets

Answer

AWS Cost Explorer

Answer

AWS Trusted Advisor

Question 7

A company runs a steady-state production workload on a fixed number of m5.large EC2 instances in the us-east-1 region. The workload runs 24/7 and the instance type and region are not expected to change. The company wants to obtain the highest possible discount for this workload with a 3-year commitment. Which purchasing option should the company choose?

Accepted Answer

Standard Reserved Instances (3-year, All Upfront). Standard Reserved Instances (3-year, All Upfront) offer the highest discount for a steady-state workload with a fixed instance type and region because they provide a significant discount over On-Demand pricing in exchange for a commitment to a specific instance family, size, and Availability Zone. Since the workload runs 24/7 on m5.large instances in us-east-1 and the configuration is not expected to change, Standard RIs maximize savings without the flexibility trade-offs that reduce discount rates.

Answer

Compute Savings Plan

Answer

EC2 Instance Savings Plan

Answer

Convertible Reserved Instances (3-year, All Upfront)

Question 8

A company runs a web application on Amazon CloudFront and an Application Load Balancer (ALB). The security team wants to protect the application from common web attacks such as SQL injection and cross-site scripting (XSS). Additionally, the company needs to block requests from specific countries due to compliance requirements. The security team prefers a managed service that provides pre-configured rule sets and integrates directly with CloudFront and ALB without requiring additional infrastructure. Which AWS service should the security team use?

Accepted Answer

AWS WAF. AWS WAF is a managed web application firewall that protects web applications from common exploits like SQL injection and cross-site scripting (XSS) using pre-configured rule sets (e.g., AWS Managed Rules). It integrates natively with both CloudFront and Application Load Balancers (ALBs) without requiring additional infrastructure, and it supports geo-blocking to restrict requests from specific countries, meeting all stated requirements.

Answer

AWS Network Firewall

Answer

AWS Shield Advanced

Answer

AWS Firewall Manager

Question 9

A company runs an e-commerce application on a fleet of Amazon EC2 instances. The application experiences unpredictable traffic spikes during flash sales. To handle this, the company configures an Amazon EC2 Auto Scaling group to automatically add instances when CPU utilization exceeds 70% and remove instances when utilization drops below 30%. The company only pays for the instances that are running. This ability to dynamically add and remove compute capacity based on real-time demand best demonstrates which essential characteristic of cloud computing?

Accepted Answer

Elasticity. The scenario describes an Auto Scaling group that adds EC2 instances when CPU exceeds 70% and removes them when it drops below 30%, paying only for running instances. This ability to automatically scale compute capacity up and down in response to real-time demand is the defining characteristic of elasticity in cloud computing, which allows resources to be provisioned and de-provisioned dynamically to match workload fluctuations.

Answer

On-demand self-service

Answer

Measured service

Answer

Resource pooling

Question 10

A company runs a web application on Amazon EC2 instances behind an Application Load Balancer (ALB). The company wants to serve traffic over HTTPS to encrypt data in transit between clients and the ALB. The security team requires that the SSL/TLS certificate be automatically renewed before expiration and that AWS manage the entire certificate lifecycle. The company does not want to manually upload or manage private keys. Which AWS service should the company use to meet these requirements?

Accepted Answer

AWS Certificate Manager (ACM). AWS Certificate Manager (ACM) is the correct choice because it integrates directly with Application Load Balancers to provision, deploy, and automatically renew SSL/TLS certificates. ACM manages the entire certificate lifecycle, including private key generation and storage, without requiring manual intervention. This meets the security team's requirement for automatic renewal and AWS-managed certificate lifecycle.

Answer

AWS Secrets Manager

Answer

AWS Identity and Access Management (IAM)

Answer

AWS Key Management Service (KMS)

Question 11

A company runs a web application on Amazon EC2 instances. The application experiences unpredictable traffic spikes during marketing campaigns. The company configures an Amazon EC2 Auto Scaling group to automatically add instances when CPU utilization exceeds 70% and remove instances when it drops below 30%. This allows the company to handle peak loads without manual intervention and avoid paying for idle capacity during low traffic periods. Which essential characteristic of cloud computing does this configuration BEST demonstrate?

Accepted Answer

Rapid elasticity. The Auto Scaling group dynamically adjusts the number of EC2 instances in response to CPU utilization thresholds, scaling out during traffic spikes and scaling in during low traffic. This ability to rapidly provision and release compute resources to match demand is the defining characteristic of rapid elasticity, which allows the company to handle peak loads without manual intervention and avoid paying for idle capacity.

Answer

On-demand self-service

Answer

Broad network access

Answer

Measured service

Question 12

A company runs an e-commerce platform on AWS. The platform experiences unpredictable traffic, with occasional large spikes. The company wants to automatically adjust compute capacity to match demand exactly, ensuring consistent performance while only paying for the resources consumed. Which benefit of the AWS Cloud does this scenario primarily describe?

Accepted Answer

Elasticity. Elasticity is the ability of AWS to automatically scale compute resources up or down based on demand. In this scenario, the e-commerce platform experiences unpredictable traffic spikes, and elasticity ensures that EC2 instances or Auto Scaling groups adjust capacity in real time, matching demand exactly while only charging for resources consumed. This directly aligns with the 'pay-as-you-grow' model and the operational benefit of scaling without manual intervention.

Answer

High availability

Answer

Disaster recovery

Answer

Resource pooling

Question 13

A company runs a web application on Amazon EC2 that connects to an Amazon RDS database. The database credentials are currently hardcoded in the application configuration file. The security team requires that the credentials be automatically rotated every 90 days and that the application retrieves them securely from a managed service without storing them in the application code. Which AWS service should the company use to meet these requirements?

Accepted Answer

AWS Secrets Manager. AWS Secrets Manager is the correct choice because it is purpose-built for securely storing, retrieving, and automatically rotating database credentials (including for Amazon RDS) on a schedule. It allows the application to fetch credentials at runtime via API calls, eliminating hardcoded secrets, and supports native rotation every 90 days without custom code.

Answer

AWS Key Management Service (AWS KMS)

Answer

AWS Systems Manager Parameter Store

Answer

AWS Certificate Manager (ACM)

Question 14

A company runs a web application on multiple Amazon EC2 instances that are behind an Application Load Balancer. The operations team wants to ensure that if any EC2 instance fails, a new instance is automatically launched to replace it and maintain a minimum number of running instances. Which AWS service should the company use to meet this requirement?

Accepted Answer

Amazon EC2 Auto Scaling. Amazon EC2 Auto Scaling is the correct service because it automatically launches new EC2 instances to replace failed ones and maintains a specified minimum number of running instances. It integrates with the Application Load Balancer to register new instances and deregister failed ones, ensuring the web application remains available. This directly meets the requirement for automatic instance replacement and capacity maintenance.

Answer

AWS Elastic Load Balancing

Answer

AWS Lambda

Answer

AWS Auto Scaling

Question 15

A company runs a web application on Amazon EC2 instances. The company wants to ensure that they are billed only for the exact compute capacity they consume, down to the second, for each running instance. They also want to receive a detailed breakdown of their usage, including CPU time, storage, and data transfer, so they can analyze costs per department. Which essential characteristic of cloud computing enables this granular tracking and billing?

Accepted Answer

Measured service. Measured service is the correct answer because it is the cloud characteristic that enables providers to monitor, control, and report on resource usage (CPU time, storage, data transfer) with granularity down to the second. This metering capability allows AWS to bill customers only for the exact compute capacity consumed and provide detailed usage breakdowns for cost analysis per department.

Answer

Rapid elasticity

Answer

Resource pooling

Answer

On-demand self-service