CLF-C02 Practice Test 5 — 10 Questions

Question 1

A retail company runs a web application on Amazon EC2 instances behind an Application Load Balancer. During a promotional event, traffic spikes to 10 times the normal level. The company configured an Amazon EC2 Auto Scaling group with a scaling policy that adds instances when CPU utilization exceeds 70% and removes instances when it drops below 30%. The application handles the spike without any manual intervention, and after the event ends, the number of instances automatically decreases to the original count, saving costs. This scenario best demonstrates which cloud computing concept?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Elasticity. The scenario describes the system automatically scaling out to 10 times the normal capacity during a traffic spike and then scaling back down when the spike ends, which is the definition of elasticity—the ability to dynamically provision and de-provision resources to match demand. The use of an EC2 Auto Scaling group with a CPU-based scaling policy (70% threshold to add, 30% to remove) directly demonstrates this cloud computing concept, as it handles variable workloads without manual intervention and optimizes cost by reducing resources when they are no longer needed.

Answer

Scalability

Answer

High availability

Answer

Fault tolerance

Question 2

A company wants to review its AWS spending for the past six months to identify which services and business units are driving costs. The finance team needs to interactively examine cost trends, filter by service and account, and visualize the data without setting up complex reports. Which AWS service or tool should the company use to meet these requirements?

Accepted Answer

AWS Cost Explorer. AWS Cost Explorer provides a pre-built, interactive dashboard that allows you to visualize and analyze your AWS cost and usage data over the past 12 months. You can filter by service, linked account (business unit), and time range, and drill down into trends without needing to set up complex reports or queries. This directly meets the requirement for interactive examination of cost trends by service and account.

Answer

AWS Budgets

Answer

AWS Trusted Advisor

Answer

AWS Cost and Usage Reports

Question 3

A company hosts an e-commerce website on Amazon EC2 instances in the us-east-1 Region. The website serves static assets (images, CSS, and JavaScript) to a global user base. Users in Europe and Asia report slow page load times. The company needs to improve the performance of delivering these static assets to all users without modifying the application code or provisioning additional origin servers. Which AWS service should the company use?

Accepted Answer

Use Amazon CloudFront to distribute the static assets from AWS edge locations.. Amazon CloudFront is a content delivery network (CDN) that caches static assets at AWS edge locations worldwide, reducing latency for global users without requiring code changes or additional origin servers. It integrates seamlessly with EC2 origins and automatically serves content from the nearest edge location, directly addressing the slow page load times reported in Europe and Asia.

Answer

Deploy the website on additional Amazon EC2 instances in the eu-west-1 and ap-southeast-1 Regions, and use a Network Load Balancer to distribute traffic across all Regions.

Answer

Use Amazon Route 53 with geolocation routing policies to route users to the nearest AWS Region for the website.

Answer

Enable S3 Transfer Acceleration on the Amazon S3 bucket that stores the static assets.

Question 4

A company has a mobile application that allows users to upload profile photos. When a new photo is uploaded to an Amazon S3 bucket, the application must automatically create a thumbnail version and store it in another S3 bucket. The company wants a solution that runs only when needed, scales automatically, and requires no management of underlying servers. Which AWS service should the company use to meet these requirements?

Accepted Answer

AWS Lambda. AWS Lambda is the correct choice because it is a serverless compute service that runs code in response to events, such as an S3 PUT object event. It automatically scales from zero to thousands of concurrent executions based on the number of incoming uploads, and requires no server management, perfectly meeting the requirement for an on-demand, auto-scaling thumbnail generation solution.

Answer

AWS Batch

Answer

Amazon EC2

Answer

Amazon ECS with EC2 launch type

Question 5

A company publishes a message each time a new product is added to its catalogue. Three services need to receive this message simultaneously: an email notification service, an inventory update service, and an analytics service. Which AWS service should the company use to deliver the message to all three services at the same time?

Accepted Answer

Amazon SNS. Amazon SNS is the correct choice because it is a fully managed pub/sub messaging service designed to deliver messages to multiple subscribers simultaneously. When a new product is added, the company can publish a single message to an SNS topic, and SNS will fan out that message to all three subscribed endpoints (email, inventory, and analytics) in parallel, ensuring they receive it at the same time.

Answer

Amazon SQS

Answer

Amazon Kinesis Data Streams

Answer

AWS EventBridge

Question 6

A company is planning to migrate its on-premises infrastructure to AWS. The operations team wants to compare the total cost of ownership (TCO) between running workloads on-premises and running them on AWS. They need a tool that can accept details about their current on-premises servers (number of servers, CPU, memory, storage) and produce a detailed report comparing costs over a specified period, including savings from avoided hardware purchases, IT labor, and data center costs. Which AWS tool should the operations team use?

Accepted Answer

AWS Total Cost of Ownership (TCO) Calculator. The AWS Total Cost of Ownership (TCO) Calculator is specifically designed to compare the costs of running on-premises infrastructure versus AWS. It accepts detailed inputs about existing on-premises servers (such as CPU, memory, and storage) and generates a comprehensive report that includes savings from avoided hardware purchases, IT labor, and data center costs over a user-specified period. This directly matches the operations team's requirement for a detailed TCO comparison.

Answer

AWS Cost Explorer

Answer

AWS Pricing Calculator

Answer

AWS Cost and Usage Report

Question 7

A company is migrating its on-premises data analytics workload to AWS. Previously, the company had to purchase and maintain dedicated servers with fixed capacity to handle peak workloads, resulting in low utilization during off-peak hours. On AWS, the company can launch compute resources, run the analytics job, and terminate the resources when done. The company only pays for the compute time and storage used during the job. Which essential characteristic of cloud computing does this scenario BEST demonstrate?

Accepted Answer

Measured service. Measured service is the cloud characteristic that enables pay-as-you-go pricing by metering resource usage (compute time, storage) and billing only for what is consumed. In this scenario, the company launches resources for the analytics job, runs it, and terminates them, paying solely for the compute time and storage used — a direct demonstration of metered usage and cost transparency.

Answer

Rapid elasticity

Answer

Resource pooling

Answer

On-demand self-service

Question 8

A company uses multiple AWS accounts and wants to enforce cost governance. The company needs to set a monthly cost budget of $10,000 for each account. When an account's actual or forecasted costs exceed this budget, the company wants to automatically apply a restrictive IAM policy that prevents the creation of new resources in that account. Additionally, the company wants to receive an email notification when the budget is exceeded. Which AWS feature should the company use to meet these requirements?

Accepted Answer

AWS Budgets. AWS Budgets allows you to set custom cost and usage budgets, and when actual or forecasted costs exceed the budget threshold, it can trigger actions such as applying an IAM policy to restrict resource creation and sending SNS-based email notifications. This directly meets the requirement for automated enforcement and alerting per account.

Answer

AWS Cost Explorer

Answer

AWS Cost Anomaly Detection

Answer

AWS Trusted Advisor

Question 9

A company's security policy requires that all IAM user access keys be rotated every 90 days. The security team wants to automatically identify any IAM user in the company's AWS account whose access keys are older than 90 days and trigger a notification to the security team. They need a managed AWS service that continuously evaluates the access key age against this requirement and generates findings. Which AWS service should the security team use?

Accepted Answer

AWS Config. AWS Config is a managed service that continuously evaluates your AWS resource configurations against desired policies (e.g., access keys older than 90 days) using the managed rule 'access-keys-rotated'. It generates compliance findings and can trigger notifications via Amazon EventBridge or SNS, meeting the requirement for continuous evaluation and alerting.

Answer

AWS Trusted Advisor

Answer

Amazon Inspector

Answer

AWS IAM Access Analyzer

Question 10

A company has internal security policies that require all Amazon S3 buckets to be private (not publicly accessible) and all Amazon EC2 security groups to restrict inbound SSH traffic to a specific IP range. The security team needs to continuously monitor all AWS resources across their account to detect any resource that violates these policies. They also need a historical record of configuration changes and a compliance dashboard that shows overall pass/fail status. Which AWS service should the security team use to meet these requirements?

Accepted Answer

AWS Config. AWS Config is the correct service because it provides continuous monitoring, compliance auditing, and historical recording of configuration changes for AWS resources. It allows you to define rules (e.g., 's3-bucket-public-read-prohibited' and 'restricted-ssh') that automatically evaluate your S3 bucket policies and EC2 security group rules against your security policies, and it offers a compliance dashboard showing pass/fail status for each resource. AWS Config also maintains a configuration history that can be used for auditing and troubleshooting.

Answer

AWS CloudTrail

Answer

Amazon GuardDuty

Answer

Amazon Inspector