CLF-C02 Practice Test 49 — 15 Questions

Question 1

A company uses AWS for multiple workloads across several linked accounts under AWS Organizations. The finance team needs to analyze historical cost and usage data to identify monthly spending trends by service (e.g., Amazon EC2, Amazon S3) and by linked account. They also need to filter the data by date range and view the top cost drivers. The team prefers a built-in AWS tool that provides an interactive interface with graphs and tables, without requiring them to download or process raw data. Which AWS service or tool should the finance team use?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

AWS Cost Explorer. AWS Cost Explorer is the correct choice because it provides a built-in, interactive interface with pre-built graphs and tables that allow the finance team to analyze historical cost and usage data without downloading or processing raw data. It supports filtering by service (e.g., Amazon EC2, Amazon S3), linked account, and date range, and can identify top cost drivers through customizable views and filtering options.

Answer

AWS Budgets

Answer

AWS Trusted Advisor

Answer

AWS Cost and Usage Reports

Question 2

Which AWS service enables automatic speech recognition (ASR) to convert audio from customer service calls into text for further analysis?

Accepted Answer

Amazon Transcribe. Amazon Transcribe is the correct AWS service for automatic speech recognition (ASR) because it is specifically designed to convert audio speech into text. It uses deep learning-based ASR models to process audio files or real-time streams, making it ideal for transcribing customer service call recordings for downstream analysis.

Answer

Amazon Polly

Answer

Amazon Lex

Answer

Amazon Comprehend

Question 3

A company is designing a resilient multi-tier web application on AWS. The architect wants to implement the Well-Architected Framework Reliability pillar design principle of 'automatically recover from failure.' Which combination of services implements this most completely?

Accepted Answer

EC2 Auto Scaling + ELB health checks + RDS Multi-AZ. It combines EC2 Auto Scaling to automatically replace unhealthy instances, ELB health checks to detect failures and route traffic away from them, and RDS Multi-AZ to automatically failover to a standby database in a different Availability Zone. This trio directly implements the 'automatically recover from failure' principle by enabling self-healing at both the compute and database tiers without manual intervention.

Answer

Manual restart procedures documented in a runbook

Answer

AWS CloudTrail + Amazon CloudWatch

Answer

AWS Config rules with manual remediation

Question 4

A company running large-scale scientific simulations needs EC2 instances with exclusive access to a physical host for software licensing reasons (per-socket licensing). Which EC2 option provides this?

Accepted Answer

Dedicated Hosts. Dedicated Hosts (Option B) provide EC2 instances with exclusive access to a physical host, allowing you to control instance placement on a specific server. This is required for per-socket software licensing because you can see and manage the physical sockets and cores of the host, ensuring compliance with licensing terms that are tied to physical hardware.

Answer

Dedicated Instances

Answer

Reserved Instances

Answer

EC2 Bare Metal instances

Question 5

A company uses AWS Organizations to manage multiple accounts. The finance team needs to perform a detailed cost analysis by joining AWS usage data with their internal accounting system. They require hourly-level billing data that includes resource IDs, operation types, and cost allocation tags. The data must be available in a CSV file that can be imported into their financial software. Which AWS tool or service should the finance team use to meet this requirement?

Accepted Answer

AWS Cost and Usage Report. The AWS Cost and Usage Report (CUR) is the correct choice because it provides the most granular billing data available, including hourly-level usage, resource IDs, operation types, and cost allocation tags. The report can be delivered to an Amazon S3 bucket in CSV format, making it directly importable into the finance team's financial software for detailed cost analysis.

Answer

AWS Cost Explorer

Answer

AWS Budgets

Answer

AWS Trusted Advisor

Question 6

A company wants to use AWS to run a relational database that is compatible with MySQL but with improved performance and availability. Which service should they use?

Accepted Answer

Amazon Aurora. Amazon Aurora is the correct choice because it is a MySQL-compatible relational database engine that provides significantly higher performance (up to 5x faster than standard MySQL) and improved availability through features like distributed storage, automatic failover, and six-way replication across three Availability Zones. Aurora is designed to deliver the durability and availability of commercial databases while maintaining MySQL compatibility, making it ideal for workloads requiring enhanced performance and uptime.

Answer

Amazon RDS for MySQL

Answer

Amazon DynamoDB

Answer

Amazon Redshift

Question 7

Which statement about Amazon EC2 On-Demand pricing is accurate?

Accepted Answer

On-Demand instances are billed per second with no upfront commitment or termination fees. Amazon EC2 On-Demand instances are billed per second (with a minimum of 60 seconds) for Linux instances, and per hour for other operating systems, with no upfront payment or termination fees. This model provides maximum flexibility, allowing you to launch and stop instances as needed without any long-term commitment or penalty.

Answer

On-Demand instances require a minimum commitment of one month

Answer

On-Demand instances are the cheapest pricing option for all workloads

Answer

On-Demand instances must be running continuously once launched

Question 8

A development team needs to provision a new Amazon EC2 instance for a proof-of-concept project. The team has an AWS account with appropriate IAM permissions. One developer logs into the AWS Management Console, selects an Amazon Machine Image (AMI), chooses an instance type, configures security groups, and launches the instance. The entire process takes less than 10 minutes and does not require any interaction with AWS support or IT administrators. Which essential characteristic of cloud computing does this scenario best illustrate?

Accepted Answer

On-demand self-service. This scenario best illustrates on-demand self-service because the developer was able to provision an EC2 instance entirely through the AWS Management Console without any human interaction with AWS support or IT administrators. The ability to independently configure and launch compute resources—selecting an AMI, instance type, and security groups—within minutes, without requiring manual approval or provisioning, is the defining characteristic of on-demand self-service as defined by NIST SP 800-145.

Answer

Resource pooling

Answer

Measured service

Answer

Broad network access

Question 9

A company runs a web application that allows users to upload images. After each upload, the application must perform several background processing tasks (e.g., resizing, generating thumbnails) that take up to 30 seconds each. Users should receive an immediate response and the processing should continue asynchronously. The company wants a solution that scales automatically with the number of uploads and requires no server management. Which AWS service should the company use to run these background processing tasks?

Accepted Answer

AWS Lambda. AWS Lambda is the correct choice because it is a serverless compute service that executes code in response to events, such as an image upload to Amazon S3. It scales automatically with the number of uploads, requires no server management, and can run background tasks like resizing and thumbnail generation within its 15-minute maximum execution time, easily accommodating the 30-second processing requirement. Users receive an immediate response because the upload triggers Lambda asynchronously, decoupling the frontend from the processing.

Answer

Amazon EC2 with Auto Scaling

Answer

Amazon ECS with AWS Fargate

Answer

AWS Batch

Question 10

A company is reviewing their AWS bill and notices charges for Amazon CloudWatch. Which specific CloudWatch usage would NOT incur additional charges beyond the CloudWatch free tier?

Accepted Answer

Basic monitoring (5-minute metrics) for EC2 instances. Basic monitoring for EC2 instances provides metrics at 5-minute intervals at no additional cost, as it is included in the CloudWatch free tier. Detailed monitoring (1-minute metrics) incurs charges because it requires more frequent data collection and storage. Therefore, basic monitoring is the only option that does not generate extra charges beyond the free tier.

Answer

Detailed monitoring (1-minute metrics) for EC2 instances

Answer

Publishing 100 custom metrics

Answer

Storing CloudWatch Logs beyond the free tier

Question 11

A company wants to protect their web application from common Layer 7 attacks and also implement rate limiting to prevent API abuse. Which AWS service provides both capabilities?

Accepted Answer

AWS WAF. AWS WAF is a web application firewall that helps protect web applications from common Layer 7 attacks such as SQL injection and cross-site scripting (XSS). It also supports rate-based rules that automatically block requests from a client IP when the request rate exceeds a defined threshold, enabling API abuse prevention. This makes AWS WAF the correct choice for both capabilities.

Answer

AWS Shield Standard

Answer

Security Groups

Answer

Amazon GuardDuty

Question 12

A company runs a real-time bidding platform for online advertising. The platform requires a database that can handle millions of requests per second with single-digit millisecond latency for both reads and writes. The data model is simple key-value pairs, and the database must be fully managed so that the company does not have to provision or maintain servers. Which AWS database service should the company use to meet these requirements?

Accepted Answer

Amazon DynamoDB. Amazon DynamoDB is the correct choice because it is a fully managed NoSQL key-value and document database that delivers single-digit millisecond latency at any scale, handling millions of requests per second. Its serverless architecture eliminates the need to provision or manage servers, making it ideal for real-time bidding platforms with simple key-value data models and high-throughput, low-latency requirements.

Answer

Amazon RDS

Answer

Amazon Redshift

Answer

Amazon ElastiCache

Question 13

A company wants to provide their data analysts with a way to run SQL queries on their S3 data lake using familiar BI tools like Tableau or Power BI. Which AWS service provides an ODBC/JDBC connection to S3 data?

Accepted Answer

Amazon Athena with JDBC/ODBC drivers. Amazon Athena is a serverless interactive query service that allows you to run standard SQL directly against data stored in Amazon S3. It provides JDBC and ODBC drivers that enable BI tools like Tableau and Power BI to connect to Athena and query the S3 data lake without needing to move or transform the data.

Answer

Amazon QuickSight

Answer

Amazon EMR with Hive

Answer

AWS Glue Data Catalog only

Question 14

A company wants to implement zero-trust network security for their AWS environment. Which AWS service enables access to EC2 instances without requiring open inbound network ports or bastion hosts?

Accepted Answer

AWS Systems Manager Session Manager. AWS Systems Manager Session Manager provides secure, auditable shell access to EC2 instances without requiring open inbound ports (e.g., SSH port 22 or RDP port 3389) or a bastion host. It uses the AWS Systems Manager agent to initiate a session via the AWS API, leveraging IAM policies for authentication and authorization, and can optionally encrypt session data using AWS KMS.

Answer

AWS Bastion Host on EC2

Answer

AWS Direct Connect

Answer

Amazon VPC Endpoints

Question 15

A developer needs to read objects from a specific Amazon S3 bucket. Following AWS security best practices, which approach should be used when creating the IAM policy for this developer?

Accepted Answer

Grant only s3:GetObject permission on the specific bucket. The principle of least privilege dictates granting only the specific permissions required for the task. By attaching an IAM policy with only the s3:GetObject action on the specific bucket ARN, the developer can read objects without having unnecessary permissions that could lead to accidental or malicious changes. This approach aligns with AWS security best practices for IAM policies.

Answer

Grant AdministratorAccess to ensure all required permissions are included

Answer

Grant AmazonS3FullAccess to cover all S3 operations

Answer

Use the root account credentials since they guarantee access