CLF-C02 Practice Test 49 — 15 Questions

Question 1

A company wants to use AWS to run a relational database that is compatible with MySQL but with improved performance and availability. Which service should they use?

Accepted Answer

Amazon Aurora. Amazon Aurora is the correct choice because it is a MySQL-compatible relational database engine that provides significantly higher performance (up to 5x faster than standard MySQL) and improved availability through features like distributed storage, automatic failover, and six-way replication across three Availability Zones. Aurora is designed to deliver the durability and availability of commercial databases while maintaining MySQL compatibility, making it ideal for workloads requiring enhanced performance and uptime.

Answer

Amazon RDS for MySQL

Answer

Amazon DynamoDB

Answer

Amazon Redshift

Question 2

Which statement about Amazon EC2 On-Demand pricing is accurate?

Accepted Answer

On-Demand instances are billed per second with no upfront commitment or termination fees. Amazon EC2 On-Demand instances are billed per second (with a minimum of 60 seconds) for Linux instances, and per hour for other operating systems, with no upfront payment or termination fees. This model provides maximum flexibility, allowing you to launch and stop instances as needed without any long-term commitment or penalty.

Answer

On-Demand instances require a minimum commitment of one month

Answer

On-Demand instances are the cheapest pricing option for all workloads

Answer

On-Demand instances must be running continuously once launched

Question 3

A development team needs to provision a new Amazon EC2 instance for a proof-of-concept project. The team has an AWS account with appropriate IAM permissions. One developer logs into the AWS Management Console, selects an Amazon Machine Image (AMI), chooses an instance type, configures security groups, and launches the instance. The entire process takes less than 10 minutes and does not require any interaction with AWS support or IT administrators. Which essential characteristic of cloud computing does this scenario best illustrate?

Accepted Answer

On-demand self-service. This scenario best illustrates on-demand self-service because the developer was able to provision an EC2 instance entirely through the AWS Management Console without any human interaction with AWS support or IT administrators. The ability to independently configure and launch compute resources—selecting an AMI, instance type, and security groups—within minutes, without requiring manual approval or provisioning, is the defining characteristic of on-demand self-service as defined by NIST SP 800-145.

Answer

Resource pooling

Answer

Measured service

Answer

Broad network access

Question 4

A company is reviewing their AWS bill and notices charges for Amazon CloudWatch. Which specific CloudWatch usage would NOT incur additional charges beyond the CloudWatch free tier?

Accepted Answer

Basic monitoring (5-minute metrics) for EC2 instances. Basic monitoring for EC2 instances provides metrics at 5-minute intervals at no additional cost, as it is included in the CloudWatch free tier. Detailed monitoring (1-minute metrics) incurs charges because it requires more frequent data collection and storage. Therefore, basic monitoring is the only option that does not generate extra charges beyond the free tier.

Answer

Detailed monitoring (1-minute metrics) for EC2 instances

Answer

Publishing 100 custom metrics

Answer

Storing CloudWatch Logs beyond the free tier

Question 5

A company wants to protect their web application from common Layer 7 attacks and also implement rate limiting to prevent API abuse. Which AWS service provides both capabilities?

Accepted Answer

AWS WAF. AWS WAF is a web application firewall that helps protect web applications from common Layer 7 attacks such as SQL injection and cross-site scripting (XSS). It also supports rate-based rules that automatically block requests from a client IP when the request rate exceeds a defined threshold, enabling API abuse prevention. This makes AWS WAF the correct choice for both capabilities.

Answer

AWS Shield Standard

Answer

Security Groups

Answer

Amazon GuardDuty

Question 6

A company runs a real-time bidding platform for online advertising. The platform requires a database that can handle millions of requests per second with single-digit millisecond latency for both reads and writes. The data model is simple key-value pairs, and the database must be fully managed so that the company does not have to provision or maintain servers. Which AWS database service should the company use to meet these requirements?

Accepted Answer

Amazon DynamoDB. Amazon DynamoDB is the correct choice because it is a fully managed NoSQL key-value and document database that delivers single-digit millisecond latency at any scale, handling millions of requests per second. Its serverless architecture eliminates the need to provision or manage servers, making it ideal for real-time bidding platforms with simple key-value data models and high-throughput, low-latency requirements.

Answer

Amazon RDS

Answer

Amazon Redshift

Answer

Amazon ElastiCache

Question 7

A company wants to provide their data analysts with a way to run SQL queries on their S3 data lake using familiar BI tools like Tableau or Power BI. Which AWS service provides an ODBC/JDBC connection to S3 data?

Accepted Answer

Amazon Athena with JDBC/ODBC drivers. Amazon Athena is a serverless interactive query service that allows you to run standard SQL directly against data stored in Amazon S3. It provides JDBC and ODBC drivers that enable BI tools like Tableau and Power BI to connect to Athena and query the S3 data lake without needing to move or transform the data.

Answer

Amazon QuickSight

Answer

Amazon EMR with Hive

Answer

AWS Glue Data Catalog only

Question 8

A company wants to implement zero-trust network security for their AWS environment. Which AWS service enables access to EC2 instances without requiring open inbound network ports or bastion hosts?

Accepted Answer

AWS Systems Manager Session Manager. AWS Systems Manager Session Manager provides secure, auditable shell access to EC2 instances without requiring open inbound ports (e.g., SSH port 22 or RDP port 3389) or a bastion host. It uses the AWS Systems Manager agent to initiate a session via the AWS API, leveraging IAM policies for authentication and authorization, and can optionally encrypt session data using AWS KMS.

Answer

AWS Bastion Host on EC2

Answer

AWS Direct Connect

Answer

Amazon VPC Endpoints

Question 9

A developer needs to read objects from a specific Amazon S3 bucket. Following AWS security best practices, which approach should be used when creating the IAM policy for this developer?

Accepted Answer

Grant only s3:GetObject permission on the specific bucket. The principle of least privilege dictates granting only the specific permissions required for the task. By attaching an IAM policy with only the s3:GetObject action on the specific bucket ARN, the developer can read objects without having unnecessary permissions that could lead to accidental or malicious changes. This approach aligns with AWS security best practices for IAM policies.

Answer

Grant AdministratorAccess to ensure all required permissions are included

Answer

Grant AmazonS3FullAccess to cover all S3 operations

Answer

Use the root account credentials since they guarantee access

Question 10

A startup is building a prototype web application on AWS and is eligible for the AWS Free Tier. They plan to use a single t2.micro Amazon EC2 instance running continuously (24 hours per day, 7 days per week), 10 GB of Amazon S3 Standard storage, and 1 GB of Amazon RDS for MySQL storage. Which of the following statements accurately describes how these services will be billed during the first 12 months under the Free Tier, assuming they stay within the Free Tier limits for each service?

Accepted Answer

The EC2 instance usage will be free for up to 750 hours per month; the S3 storage will be free for the first 5 GB, with standard charges for the additional 5 GB; the RDS storage will be free for the first 20 GB.. The AWS Free Tier for EC2 provides 750 hours of t2.micro instance usage per month, not total over 12 months. S3 Standard storage is free for the first 5 GB, so the additional 5 GB incurs standard charges. RDS for MySQL storage is free for the first 20 GB, so the 1 GB used is fully covered.

Answer

All three services are completely free for the entire 12-month period because the startup is using the Free Tier.

Answer

The EC2 instance usage will be free for up to 750 hours per month; the S3 storage will be free for up to 10 GB; the RDS storage will be free for up to 20 GB.

Answer

The EC2 instance usage will be free for the first 750 hours total over the 12-month period; the S3 storage will be free for the first 5 GB; the RDS storage will be free for the first 20 GB.

Question 11

A company runs a critical production application on AWS. The internal team is unable to resolve intermittent errors that are impacting the application. The company currently has the AWS Basic Support plan and requires access to AWS technical support with a faster response time for production issues. Due to budget constraints, the company wants the most cost-effective support plan that provides a response time of 1 hour for production system impaired cases. Which AWS Support plan should the company choose?

Accepted Answer

Business Support. The AWS Business Support plan is the most cost-effective option that provides a 1-hour response time for production system impaired cases. The Basic Support plan offers no technical support, while the Developer Support plan only provides a 12-hour response time for impaired systems, which does not meet the requirement. Business Support is the lowest-tier plan that includes 1-hour response for production issues, making it the correct choice.

Answer

Developer Support

Answer

Enterprise Support

Answer

Enterprise On-Ramp

Question 12

Which AWS service provides a fully managed workflow orchestration service that coordinates multiple AWS services into serverless workflows using visual state machines?

Accepted Answer

AWS Step Functions. AWS Step Functions is a fully managed orchestration service that allows you to coordinate multiple AWS services into serverless workflows using visual state machines. It enables you to define complex, multi-step processes as a series of states (tasks, choices, parallel branches) that execute in order, with built-in error handling and retry logic, making it the correct choice for workflow orchestration.

Answer

Amazon EventBridge

Answer

Amazon SQS

Answer

AWS Batch

Question 13

A company needs to ensure their containerized applications pass security scans for known vulnerabilities before being deployed to production. Which AWS service scans container images for CVEs?

Accepted Answer

Amazon Inspector. Amazon Inspector is the correct service because it is designed to automatically scan container images stored in Amazon Elastic Container Registry (ECR) for software vulnerabilities, including Common Vulnerabilities and Exposures (CVEs). It continuously monitors the images at rest and during deployment, providing a detailed findings report that helps you remediate security issues before the container reaches production.

Answer

Amazon GuardDuty

Answer

AWS Security Hub

Answer

Amazon Macie

Question 14

A company launches EC2 instances in a public subnet of their VPC. For these instances to communicate directly with the internet — both to receive inbound requests and to make outbound requests — which VPC component must be attached to the VPC and referenced in the subnet's route table?

Accepted Answer

Internet Gateway. An Internet Gateway (IGW) is a horizontally scaled, redundant VPC component that enables communication between a VPC and the internet. For EC2 instances in a public subnet to both receive inbound requests and make outbound requests, the IGW must be attached to the VPC and a route in the subnet's route table must point 0.0.0.0/0 (or a specific public IP range) to the IGW. Without the IGW, the instances have no path to the internet, even if they have public IP addresses.

Answer

NAT Gateway

Answer

VPC Peering connection

Answer

Virtual Private Gateway

Question 15

A gaming company needs a database that can handle millions of requests per second with consistent single-digit millisecond latency and automatically scales without any capacity planning. Which AWS database service meets these requirements?

Accepted Answer

Amazon DynamoDB. Amazon DynamoDB is a fully managed NoSQL key-value and document database that delivers consistent single-digit millisecond latency at any scale. It automatically scales throughput capacity via on-demand mode, eliminating the need for capacity planning, and can handle millions of requests per second, making it ideal for high-traffic gaming workloads.

Answer

Amazon RDS for MySQL

Answer

Amazon Aurora

Answer

Amazon Redshift