CLF-C02 Practice Test 50 — 15 Questions

Question 1

A startup is building a prototype web application on AWS and is eligible for the AWS Free Tier. They plan to use a single t2.micro Amazon EC2 instance running continuously (24 hours per day, 7 days per week), 10 GB of Amazon S3 Standard storage, and 1 GB of Amazon RDS for MySQL storage. Which of the following statements accurately describes how these services will be billed during the first 12 months under the Free Tier, assuming they stay within the Free Tier limits for each service?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

The EC2 instance usage will be free for up to 750 hours per month; the S3 storage will be free for the first 5 GB, with standard charges for the additional 5 GB; the RDS storage will be free for the first 20 GB.. The AWS Free Tier for EC2 provides 750 hours of t2.micro instance usage per month, not total over 12 months. S3 Standard storage is free for the first 5 GB, so the additional 5 GB incurs standard charges. RDS for MySQL storage is free for the first 20 GB, so the 1 GB used is fully covered.

Answer

All three services are completely free for the entire 12-month period because the startup is using the Free Tier.

Answer

The EC2 instance usage will be free for up to 750 hours per month; the S3 storage will be free for up to 10 GB; the RDS storage will be free for up to 20 GB.

Answer

The EC2 instance usage will be free for the first 750 hours total over the 12-month period; the S3 storage will be free for the first 5 GB; the RDS storage will be free for the first 20 GB.

Question 2

A company is considering AWS for their new application. Which tool allows them to compare the cost of running their workloads on AWS versus on-premises, and estimate the potential savings?

Accepted Answer

AWS Pricing Calculator. AWS Pricing Calculator (formerly TCO Calculator) is specifically designed to compare the cost of running workloads on AWS versus on-premises environments. It allows users to input their current on-premises infrastructure details (such as server specifications, storage, and network usage) and generates a detailed cost comparison, including estimated savings from migrating to AWS. This directly matches the question's requirement for comparing costs and estimating potential savings.

Answer

AWS Cost Explorer

Answer

AWS Budgets

Answer

AWS Trusted Advisor

Question 3

A company needs to process and analyze streaming log data from thousands of servers in near real-time, loading the results into Amazon Redshift for dashboards. Which AWS service is designed for this streaming ETL delivery use case?

Accepted Answer

Amazon Kinesis Data Firehose. Amazon Kinesis Data Firehose is the correct choice because it is a fully managed service designed specifically for streaming ETL (extract, transform, load) delivery. It can capture, transform (e.g., convert to Parquet/ORC, perform Lambda-based data transformation), and automatically load streaming data into Amazon Redshift, Amazon S3, or Amazon OpenSearch Service in near real-time, with no ongoing administration required.

Answer

Amazon Kinesis Data Streams

Answer

AWS Glue

Answer

Amazon MSK

Question 4

A company runs a critical production application on AWS. The internal team is unable to resolve intermittent errors that are impacting the application. The company currently has the AWS Basic Support plan and requires access to AWS technical support with a faster response time for production issues. Due to budget constraints, the company wants the most cost-effective support plan that provides a response time of 1 hour for production system impaired cases. Which AWS Support plan should the company choose?

Accepted Answer

Business Support. The AWS Business Support plan is the most cost-effective option that provides a 1-hour response time for production system impaired cases. The Basic Support plan offers no technical support, while the Developer Support plan only provides a 12-hour response time for impaired systems, which does not meet the requirement. Business Support is the lowest-tier plan that includes 1-hour response for production issues, making it the correct choice.

Answer

Developer Support

Answer

Enterprise Support

Answer

Enterprise On-Ramp

Question 5

Which AWS service provides a fully managed workflow orchestration service that coordinates multiple AWS services into serverless workflows using visual state machines?

Accepted Answer

AWS Step Functions. AWS Step Functions is a fully managed orchestration service that allows you to coordinate multiple AWS services into serverless workflows using visual state machines. It enables you to define complex, multi-step processes as a series of states (tasks, choices, parallel branches) that execute in order, with built-in error handling and retry logic, making it the correct choice for workflow orchestration.

Answer

Amazon EventBridge

Answer

Amazon SQS

Answer

AWS Batch

Question 6

A company needs to ensure their containerized applications pass security scans for known vulnerabilities before being deployed to production. Which AWS service scans container images for CVEs?

Accepted Answer

Amazon Inspector. Amazon Inspector is the correct service because it is designed to automatically scan container images stored in Amazon Elastic Container Registry (ECR) for software vulnerabilities, including Common Vulnerabilities and Exposures (CVEs). It continuously monitors the images at rest and during deployment, providing a detailed findings report that helps you remediate security issues before the container reaches production.

Answer

Amazon GuardDuty

Answer

AWS Security Hub

Answer

Amazon Macie

Question 7

A company launches EC2 instances in a public subnet of their VPC. For these instances to communicate directly with the internet — both to receive inbound requests and to make outbound requests — which VPC component must be attached to the VPC and referenced in the subnet's route table?

Accepted Answer

Internet Gateway. An Internet Gateway (IGW) is a horizontally scaled, redundant VPC component that enables communication between a VPC and the internet. For EC2 instances in a public subnet to both receive inbound requests and make outbound requests, the IGW must be attached to the VPC and a route in the subnet's route table must point 0.0.0.0/0 (or a specific public IP range) to the IGW. Without the IGW, the instances have no path to the internet, even if they have public IP addresses.

Answer

NAT Gateway

Answer

VPC Peering connection

Answer

Virtual Private Gateway

Question 8

A gaming company needs a database that can handle millions of requests per second with consistent single-digit millisecond latency and automatically scales without any capacity planning. Which AWS database service meets these requirements?

Accepted Answer

Amazon DynamoDB. Amazon DynamoDB is a fully managed NoSQL key-value and document database that delivers consistent single-digit millisecond latency at any scale. It automatically scales throughput capacity via on-demand mode, eliminating the need for capacity planning, and can handle millions of requests per second, making it ideal for high-traffic gaming workloads.

Answer

Amazon RDS for MySQL

Answer

Amazon Aurora

Answer

Amazon Redshift

Question 9

A company wants to define their entire AWS infrastructure — VPCs, EC2 instances, RDS databases, and load balancers — as code in a text template so they can version-control the infrastructure, deploy it consistently across multiple environments, and recreate it reliably after deletion. Which AWS service enables this?

Accepted Answer

AWS CloudFormation. AWS CloudFormation is the correct service because it enables you to model your entire AWS infrastructure as a text template (JSON or YAML), which can be version-controlled, deployed consistently across environments, and used to recreate resources reliably. It is an Infrastructure as Code (IaC) service that provisions and manages AWS resources in an orderly and predictable fashion, directly matching the company's requirements.

Answer

AWS Systems Manager

Answer

AWS CodePipeline

Answer

Amazon CloudWatch

Question 10

A finance team wants to view and analyse their AWS spending patterns over the past 12 months, filter costs by service and linked account, and identify which teams are spending the most. Which AWS tool provides this historical cost analysis?

Accepted Answer

AWS Cost Explorer. AWS Cost Explorer is the correct tool because it provides a pre-built, customizable dashboard for visualizing, analyzing, and filtering historical AWS cost and usage data over the past 12 months. It allows you to group costs by service, linked account, or tag, making it ideal for identifying which teams are spending the most.

Answer

AWS Pricing Calculator

Answer

AWS Budgets

Answer

AWS Trusted Advisor

Question 11

A company's finance team wants to forecast their AWS spending for the next 12 months to set accurate budget targets. Which AWS service provides cost forecasting based on historical usage patterns?

Accepted Answer

AWS Cost Explorer. AWS Cost Explorer provides cost forecasting based on historical usage patterns, allowing you to project your AWS spending for the next 12 months. It uses machine learning to analyze past consumption and generate future cost estimates, which directly supports the finance team's need for accurate budget targets.

Answer

AWS Pricing Calculator

Answer

AWS Budgets

Answer

Amazon QuickSight

Question 12

A company suspects that an IAM role used by an EC2 instance has been granted excessive permissions. Which AWS service can generate a policy that includes only the permissions actually used over the last 90 days?

Accepted Answer

AWS IAM Access Analyzer. AWS IAM Access Analyzer can generate a policy based on the access activity recorded in AWS CloudTrail logs over the trailing 90 days. This generated policy includes only the permissions that were actually used by the IAM role, allowing you to replace an overly permissive policy with a least-privilege version.

Answer

AWS Trusted Advisor

Answer

Amazon GuardDuty

Answer

AWS Config

Question 13

A company wants to improve their application's reliability by ensuring it can handle the failure of a single Availability Zone. According to AWS Well-Architected Framework, what architectural pattern achieves this?

Accepted Answer

Distribute resources across multiple Availability Zones with automatic failover. Distributing resources across multiple Availability Zones (AZs) with automatic failover is the core pattern for high availability and fault tolerance as defined by the AWS Well-Architected Framework. By deploying application instances and data in at least two AZs and using services like an Application Load Balancer (ALB) with cross-zone load balancing or Amazon RDS Multi-AZ, the application can automatically redirect traffic to healthy resources if a single AZ fails, ensuring continued operation without manual intervention.

Answer

Deploy all resources to the largest EC2 instance type available

Answer

Use Amazon S3 for all data storage

Answer

Enable AWS CloudTrail in all regions

Question 14

Which AWS networking feature prevents resources in a private subnet from directly receiving inbound connections from the internet, while still allowing them to initiate outbound connections?

Accepted Answer

NAT Gateway. A NAT Gateway enables instances in a private subnet to initiate outbound connections to the internet (e.g., for software updates) while preventing any unsolicited inbound connections from the internet. It achieves this by translating the private IP of the instance to the NAT Gateway's Elastic IP for outbound traffic, and only forwarding return traffic that matches an established outbound session.

Answer

Internet Gateway

Answer

Security Groups

Answer

Network ACLs

Question 15

A company architect uses the Well-Architected Framework to review their workload. Which pillar specifically covers the concepts of selecting the right instance types and sizes, using serverless architectures, and choosing the appropriate storage solution?

Accepted Answer

Performance Efficiency. Performance Efficiency is the correct pillar because it focuses on using computing resources efficiently to meet system requirements, which includes selecting appropriate instance types and sizes, leveraging serverless architectures to eliminate idle capacity, and choosing the right storage solution based on access patterns and performance needs. The Well-Architected Framework defines this pillar as the ability to adapt to workload changes while maintaining efficiency through resource optimization.

Answer

Cost Optimization

Answer

Operational Excellence

Answer

Sustainability