CLF-C02 Practice Exam 57 — 20 Questions

Question 1

A company needs to transfer petabytes of data from an on-premises data center to Amazon S3. The network connection is too slow for online transfer and the data must arrive within two weeks. Which AWS service is most appropriate?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

AWS Snowball Edge. AWS Snowball Edge is the most appropriate service because it provides physical storage devices that can be shipped to the on-premises data center, allowing petabyte-scale data to be loaded locally and shipped back to AWS, bypassing slow network connections entirely. This meets the two-week deadline since network transfer would be infeasible at that scale over a slow link.

Answer

AWS DataSync

Answer

AWS Direct Connect

Answer

Amazon S3 Transfer Acceleration

Question 2

A data engineering team processes petabytes of raw log data using Apache Spark and Hadoop frameworks. They need a managed AWS service that provisions the cluster, installs the big data frameworks, and terminates the cluster after the job completes to minimise cost. Which service should they use?

Accepted Answer

Amazon EMR. Amazon EMR is the correct choice because it is a managed big data platform that can provision Apache Spark and Hadoop clusters, install the required frameworks, and automatically terminate the cluster upon job completion using features like transient clusters and step-based lifecycle management. This minimizes cost by only paying for compute resources during active processing.

Answer

Amazon Redshift

Answer

AWS Glue

Answer

Amazon Athena

Question 3

A company has employees in field offices who need to manage AWS resources (e.g., launch EC2 instances, upload files to S3) using a web browser on their company-issued laptops. The laptops connect to the internet via public Wi-Fi or cellular hotspots. The employees do not have any VPN or direct corporate network connection. They can successfully access the AWS Management Console and perform all actions over standard HTTPS ports. Which essential characteristic of cloud computing does this scenario primarily demonstrate?

Accepted Answer

Broad network access. This scenario demonstrates broad network access because the employees can access and manage AWS resources from anywhere using standard web browsers over HTTPS (port 443) on public Wi-Fi or cellular hotspots, without requiring a VPN or dedicated corporate network. Broad network access means that cloud resources are available over the network through standard mechanisms (e.g., web browsers, REST APIs) from heterogeneous client platforms (laptops, phones, tablets). The ability to perform all actions via the AWS Management Console over HTTPS directly illustrates this characteristic.

Answer

Resource pooling

Answer

Measured service

Answer

Rapid elasticity

Question 4

A company needs to implement DevOps practices and wants a fully managed service to store their application source code with version control. Which AWS service provides managed Git repositories?

Accepted Answer

AWS CodeCommit. AWS CodeCommit is a fully managed source control service that hosts secure Git-based repositories. It eliminates the need to operate your own source control system by providing managed Git repositories that integrate with other AWS services, making it the correct choice for storing application source code with version control.

Answer

AWS CodeBuild

Answer

AWS CodeDeploy

Answer

AWS CodeArtifact

Question 5

A company runs a web application that allows users to upload images. After each upload, the application must perform several background processing tasks (e.g., resizing, generating thumbnails) that take up to 30 seconds each. Users should receive an immediate response and the processing should continue asynchronously. The company wants a solution that scales automatically with the number of uploads and requires no server management. Which AWS service should the company use to run these background processing tasks?

Accepted Answer

AWS Lambda. AWS Lambda is the correct choice because it is a serverless compute service that executes code in response to events, such as an image upload to Amazon S3. It scales automatically with the number of uploads, requires no server management, and can run background tasks like resizing and thumbnail generation within its 15-minute maximum execution time, easily accommodating the 30-second processing requirement. Users receive an immediate response because the upload triggers Lambda asynchronously, decoupling the frontend from the processing.

Answer

Amazon EC2 with Auto Scaling

Answer

Amazon ECS with AWS Fargate

Answer

AWS Batch

Question 6

A company manages multiple AWS accounts under AWS Organizations. The finance team needs to set a monthly spending limit for each account, receive automatic email alerts when spending reaches 80% of that limit, and also view a graphical dashboard showing historical cost trends across all accounts. Which combination of AWS services should the company use to meet these requirements?

Accepted Answer

AWS Budgets and AWS Cost Explorer. AWS Budgets allows you to set custom monthly spending limits per AWS account and configure alerts (via Amazon SNS or email) when actual or forecasted costs exceed a threshold, such as 80% of the budget. AWS Cost Explorer provides a graphical dashboard with historical cost trends and enables filtering by linked accounts, making it the correct service for visualizing trends across all accounts under AWS Organizations. Together, they satisfy the requirements for per-account limits, email alerts at 80%, and a historical cost dashboard.

Answer

AWS Budgets and Amazon QuickSight

Answer

AWS Cost Explorer and Amazon CloudWatch

Answer

AWS Cost Explorer and AWS Trusted Advisor

Question 7

A company runs multiple workloads on AWS. At the end of each month, the finance team receives a detailed invoice that shows exactly how many GB-hours of Amazon EBS storage each workload used and how many hours each Amazon EC2 instance was running. This granular usage data is used to allocate costs back to the respective business units. Which essential characteristic of cloud computing does this capability best demonstrate?

Accepted Answer

Measured service. The ability to track and report granular usage data—such as GB-hours of EBS storage and EC2 instance hours—directly corresponds to the measured service characteristic of cloud computing. Measured service means cloud resources are metered at an abstraction level appropriate to the service type (e.g., storage, compute), enabling usage-based billing and cost allocation. In this scenario, the detailed invoice provides precise consumption metrics that allow the finance team to allocate costs to specific business units, which is the core function of measured service.

Answer

On-demand self-service

Answer

Resource pooling

Answer

Rapid elasticity

Question 8

Which AWS service provides a fully managed environment to run Apache Spark, Hadoop, and other big data frameworks for data processing and analytics?

Accepted Answer

Amazon EMR. Amazon EMR (Elastic MapReduce) is the correct answer because it is a fully managed big data platform that natively supports Apache Spark, Hadoop, Hive, Presto, and other distributed processing frameworks. It automatically provisions EC2 instances, configures the cluster, and handles scaling, patching, and monitoring, allowing you to run large-scale data processing and analytics workloads without manual infrastructure management.

Answer

Amazon Redshift

Answer

Amazon Athena

Answer

AWS Glue

Question 9

A company runs a development environment composed of multiple Amazon EC2 instances. The finance team has set a monthly budget of $5,000 for this environment and wants to automatically stop all EC2 instances if the accumulated cost reaches $4,500 before the end of the month. The team needs a managed AWS-native solution that does not require custom scripts or third-party tools. Which AWS feature or service should the company use to meet this requirement?

Accepted Answer

AWS Budgets with a budget action that stops EC2 instances when the threshold is exceeded. AWS Budgets allows you to set a cost budget with an associated budget action that can automatically stop EC2 instances when the actual or forecasted cost exceeds a specified threshold (e.g., $4,500). This is a fully managed, native AWS solution that requires no custom scripts or third-party tools, directly meeting the requirement to stop instances automatically based on cost.

Answer

AWS Cost Explorer with a saved filter and manual instance termination

Answer

AWS Trusted Advisor cost optimization checks

Answer

AWS Organizations Service Control Policies (SCPs)

Question 10

A startup has a development AWS account and wants the minimum paid AWS Support plan that provides email-based technical support from AWS staff. They do not need 24/7 phone access. Which is the minimum support plan that provides access to AWS technical support engineers?

Accepted Answer

Developer Support. The Developer Support plan is the minimum AWS Support plan that provides access to AWS technical support engineers via email during business hours. Basic Support offers no technical support from AWS staff, only account and billing assistance. Business and Enterprise Support include 24/7 phone and chat support, which exceeds the stated requirement for email-only access.

Answer

Basic Support

Answer

Business Support

Answer

Enterprise Support

Question 11

A company is migrating its internal email system to a cloud-based solution. After the migration, the company's IT team no longer needs to manage the email servers, apply operating system patches, or upgrade the email software. The cloud provider handles all underlying infrastructure, the platform, and the application itself. Users access their email through a web browser or a mobile app. Which cloud service model does this scenario describe?

Accepted Answer

Software as a Service (SaaS). This scenario describes Software as a Service (SaaS) because the cloud provider delivers the entire email application, including the underlying infrastructure, platform, and software, to end users. The IT team has no responsibility for managing servers, applying OS patches, or upgrading the email software—users simply access the email via a web browser or mobile app. This matches the SaaS model, where the provider manages everything from the hardware to the application, and the customer only consumes the software.

Answer

Infrastructure as a Service (IaaS)

Answer

Platform as a Service (PaaS)

Answer

On-premises deployment

Question 12

A company runs a batch processing application in Docker containers. The application runs for several hours at a time and requires significant CPU and memory resources. The company wants to run these containers on AWS without provisioning or managing any underlying EC2 instances or cluster capacity. They need a service that automatically scales based on demand and charges only for the resources consumed by the containers. Which AWS service should the company use?

Accepted Answer

AWS Fargate. AWS Fargate is the correct choice because it is a serverless compute engine for containers that eliminates the need to provision or manage EC2 instances. It automatically scales based on demand and charges only for the CPU and memory resources consumed by the containers, which aligns perfectly with the requirement to run long-running batch processing without managing underlying infrastructure.

Answer

Amazon ECS with EC2 launch type

Answer

Amazon EKS with managed node groups

Answer

AWS Lambda

Question 13

A company uses AWS Organizations with multiple accounts for different departments (Engineering, Marketing, Sales). The finance team needs to create detailed monthly chargeback reports showing each department's usage and costs, broken down by service (e.g., Amazon EC2, Amazon S3) and by custom tags (e.g., Project). The reports must be in a machine-readable format (CSV) so they can be ingested into the company's internal billing system. The team wants the most comprehensive, granular cost data available from AWS, including line items for individual resources. Which AWS tool should the finance team configure to meet these requirements?

Accepted Answer

AWS Cost and Usage Report. The AWS Cost and Usage Report (CUR) is the correct choice because it provides the most comprehensive, granular cost data available, including line items for individual resources broken down by service, custom tags, and time period. It can be delivered to an Amazon S3 bucket in CSV format, which is machine-readable and suitable for ingestion into the company's internal billing system for detailed monthly chargeback reports.

Answer

AWS Budgets

Answer

AWS Trusted Advisor

Answer

Consolidated Billing

Question 14

A company's security team wants to identify all Amazon S3 buckets that are shared with external AWS accounts or publicly accessible. The team needs a continuous evaluation that reports findings in a centralized dashboard and sends alerts when new unintended external shares are created. Which AWS service should the security team use to meet these requirements?

Accepted Answer

IAM Access Analyzer. IAM Access Analyzer is the correct choice because it continuously monitors resource policies, including S3 bucket policies, to identify resources shared with external AWS accounts or publicly. It provides a centralized dashboard in the IAM console to view findings and integrates with Amazon EventBridge to send alerts via Amazon SNS when new unintended external shares are created, meeting all stated requirements.

Answer

AWS Config

Answer

AWS Trusted Advisor

Answer

Amazon GuardDuty

Question 15

A company hosts its corporate website entirely as static content (HTML, CSS, JavaScript, images) in an Amazon S3 bucket. The website currently has no authentication requirements and is accessible to the public. The company wants to serve this content to users around the world with low latency. Additionally, the company wants to enforce HTTPS for all traffic using a custom domain name (www.example.com). The company does not want to manage SSL/TLS certificates on any servers. Which AWS service should the company use to meet these requirements?

Accepted Answer

Amazon CloudFront. Amazon CloudFront is a content delivery network (CDN) that caches static content at edge locations worldwide, reducing latency for global users. It supports custom domain names and can enforce HTTPS by using AWS Certificate Manager (ACM) to provision and renew SSL/TLS certificates automatically, eliminating the need for server-side certificate management. CloudFront integrates directly with an S3 bucket as the origin, allowing the bucket to remain private while serving content securely via HTTPS.

Answer

AWS Global Accelerator

Answer

Amazon S3 Transfer Acceleration

Answer

AWS Lambda@Edge

Question 16

A company runs an e-commerce application on AWS that experiences unpredictable traffic spikes during flash sales. The application currently runs on a fixed number of Amazon EC2 instances, which leads to performance degradation during spikes and wasted capacity during low traffic. The company wants to automatically adjust the number of instances based on real-time demand, only paying for the resources it uses. This need best represents which cloud computing concept?

Accepted Answer

Elasticity. (Elasticity) is correct because the scenario describes automatically scaling EC2 instances up and down based on real-time demand, which is the definition of elasticity in cloud computing. AWS Auto Scaling and Amazon EC2 Auto Scaling groups enable this by adding or removing instances in response to CloudWatch metrics, ensuring the application only pays for resources consumed during traffic spikes and low traffic periods.

Answer

High availability

Answer

Fault tolerance

Answer

Durability

Question 17

A company uses three separate AWS accounts for development, testing, and production workloads. The security team needs to enforce a policy that prevents users in any account from disabling AWS CloudTrail or deleting CloudTrail log files. The team also wants to consolidate billing and have a single payment method for all accounts. Which AWS service should the security team use to meet these requirements?

Accepted Answer

AWS Organizations. AWS Organizations is the correct service because it allows the security team to create a multi-account structure with a single consolidated billing method and a single payment method across all accounts. Additionally, Organizations supports service control policies (SCPs), which can be applied to the root or individual accounts to explicitly deny actions such as disabling CloudTrail or deleting CloudTrail log files, ensuring enforcement across the development, testing, and production accounts.

Answer

AWS Identity and Access Management (IAM)

Answer

AWS Config

Answer

AWS CloudTrail

Question 18

A company hosts a website in the US East (N. Virginia) AWS region. Users in Europe and Asia Pacific report slow page load times because content must travel long distances from the origin server. Which AWS service should the company deploy to reduce latency for global users?

Accepted Answer

Amazon CloudFront. Amazon CloudFront is a content delivery network (CDN) that caches static and dynamic content at edge locations worldwide, including Europe and Asia Pacific. By serving content from the edge location closest to each user, CloudFront significantly reduces latency and improves page load times for global users without requiring changes to the origin infrastructure.

Answer

AWS Direct Connect

Answer

Amazon Route 53 with latency routing

Answer

Amazon VPC peering

Question 19

A media company runs a video-on-demand platform on AWS. Video files (.mp4) and thumbnail images (.jpg) are stored in the same Amazon S3 bucket. The company uses Amazon CloudFront to deliver content to users globally. The video files are large and do not change frequently, so the company wants them to be cached at CloudFront edge locations for 30 days. Thumbnails change more often when new uploads are processed, so the company wants them to be cached for only 1 day. The company wants a single CloudFront distribution to serve both types of content from the same S3 bucket. Which configuration should the company use to meet these requirements with minimal operational overhead?

Accepted Answer

Create two CloudFront behaviors: one for the path pattern /videos/* and one for /thumbnails/*. Associate a cache policy with a TTL of 30 days to the video behavior and a cache policy with a TTL of 1 day to the thumbnail behavior. Both behaviors point to the same S3 origin.. CloudFront allows multiple behaviors within a single distribution, each with its own path pattern and cache policy. By configuring path patterns /videos/* and /thumbnails/*, the company can apply a 30-day TTL cache policy to video requests and a 1-day TTL cache policy to thumbnail requests, both pointing to the same S3 origin. This meets the caching requirements with minimal operational overhead, as it avoids custom code or multiple distributions.

Answer

Create one CloudFront behavior for all content. Set a cache policy with a TTL of 30 days. Create a Lambda@Edge function to override the TTL to 1 day for requests with .jpg extension.

Answer

Create two separate CloudFront distributions: one for videos with a cache policy of 30 days, and one for thumbnails with a cache policy of 1 day. Point both to the same S3 bucket.

Answer

In the S3 bucket, create two folders: /videos and /thumbnails. Use S3 Cross-Region Replication to replicate thumbnails to a separate bucket in a different Region. Create a single CloudFront behavior with a cache policy of 1 day for the thumbnail bucket and a separate behavior for the original bucket.

Question 20

Which AWS service provides managed, automated workflows for coordinating migration tasks such as tracking migration status, grouping servers into migration waves, and coordinating cutover?

Accepted Answer

AWS Migration Hub. AWS Migration Hub is the correct service because it provides a single location to track the progress of application migrations across multiple AWS and partner solutions. It offers managed, automated workflows for grouping servers into migration waves, tracking migration status, and coordinating cutover activities, which directly matches the question's requirements.

Answer

AWS Application Discovery Service

Answer

AWS Control Tower

Answer

AWS Organizations