CLF-C02 Practice Exam 59 — 20 Questions

Question 1

Which AWS pricing model allows customers to commit to a consistent amount of compute usage (measured in $/hour) for a 1 or 3-year term in exchange for significant discounts, without being locked to specific instance types?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Compute Savings Plans. Compute Savings Plans offer the flexibility to commit to a consistent amount of compute usage (measured in $/hour) for a 1- or 3-year term, providing significant discounts (up to 66%) without requiring you to lock into specific instance types, families, or regions. This model automatically applies the discount to any EC2 instance, Fargate, or Lambda usage within the committed compute commitment, making it the correct answer.

Answer

Standard Reserved Instances

Answer

Spot Instances

Answer

Convertible Reserved Instances

Question 2

A financial services company uses AWS CloudTrail to log all API calls in its AWS account. The company must demonstrate to auditors that the CloudTrail log files have not been tampered with after they were delivered to the Amazon S3 bucket. The company wants to use a feature that automatically creates digest files containing a hash of each log file, allowing the auditor to mathematically verify the integrity of the logs. Which AWS feature should the company enable to meet this requirement?

Accepted Answer

CloudTrail log file integrity validation. CloudTrail log file integrity validation is the correct feature because it automatically creates digest files that contain a hash of each log file. These digest files are themselves signed using a private key, and the corresponding public key is published by AWS, enabling auditors to mathematically verify that the log files have not been tampered with after delivery to S3.

Answer

S3 Object Lock

Answer

AWS Config conformance packs

Answer

Amazon Detective

Question 3

A company operates a seasonal e-commerce website. During holiday sales, traffic can increase by 500% within minutes. The company uses AWS Auto Scaling to automatically add Amazon EC2 instances when CPU utilization exceeds a threshold and remove instances during off-peak hours. The company pays only for the compute capacity it actually consumes, with no upfront commitment. This scenario best demonstrates which essential characteristics of cloud computing?

Accepted Answer

Rapid elasticity and measured service. The scenario demonstrates rapid elasticity because the Auto Scaling group can instantly add hundreds of EC2 instances to handle a 500% traffic surge, and then remove them when demand drops. It also demonstrates measured service because the company pays only for the compute capacity actually consumed, with no upfront commitment, which is metered and billed based on usage.

Answer

On-demand self-service and broad network access

Answer

Resource pooling and high availability

Answer

Fault tolerance and disaster recovery

Question 4

A company hosts a web application on an Amazon EC2 instance. The company installs its own application software and configures the operating system. The company also uses AWS Key Management Service (AWS KMS) to create a customer-managed key to encrypt data on the Amazon Elastic Block Store (Amazon EBS) volume attached to the instance. According to the AWS shared responsibility model, which of the following is the responsibility of AWS?

Accepted Answer

Ensuring the physical security of the data center where the Amazon EC2 instance runs.. Under the AWS shared responsibility model, AWS is responsible for the security of the cloud, which includes the physical security of data centers, hardware, networking, and facilities where EC2 instances run. This is a foundational layer that customers cannot manage or control.

Answer

Encrypting the data on the Amazon EBS volume using the customer-managed key.

Answer

Patching the operating system of the Amazon EC2 instance.

Answer

Configuring the security group rules to restrict traffic to the Amazon EC2 instance.

Question 5

A development team builds Docker container images as part of their CI/CD pipeline and needs a managed, private registry to store and version these images, integrated with Amazon ECS and EKS for deployment. Which AWS service provides this container image registry?

Accepted Answer

Amazon ECR. Amazon ECR (Elastic Container Registry) is the correct choice because it is a fully managed Docker container registry that stores, manages, and deploys container images. It integrates natively with Amazon ECS and Amazon EKS, allowing seamless image pulls during deployment without needing to manage underlying infrastructure.

Answer

Amazon ECS

Answer

Amazon S3

Answer

AWS CodeBuild

Question 6

A company hosts a website in the US East (N. Virginia) AWS region. Users in Europe and Asia Pacific report slow page load times because content must travel long distances from the origin server. Which AWS service should the company deploy to reduce latency for global users?

Accepted Answer

Amazon CloudFront. Amazon CloudFront is a content delivery network (CDN) that caches static and dynamic content at edge locations worldwide, including Europe and Asia Pacific. By serving content from the edge location closest to each user, CloudFront significantly reduces latency and improves page load times for global users without requiring changes to the origin infrastructure.

Answer

AWS Direct Connect

Answer

Amazon Route 53 with latency routing

Answer

Amazon VPC peering

Question 7

What is the purpose of an AWS Region when designing a global cloud architecture?

Accepted Answer

To define geographic boundaries for deploying resources, meeting compliance requirements, and minimizing end-user latency. An AWS Region is a distinct geographic area that contains multiple, isolated Availability Zones. Its purpose is to allow customers to deploy resources close to their end users to minimize latency, and to meet data residency and compliance requirements by keeping data within specific geographic boundaries. Each Region operates independently, ensuring fault isolation and regulatory adherence.

Answer

To provide a single physical location for all AWS resources worldwide

Answer

To automatically replicate all data and compute resources across the globe

Answer

To limit the availability of AWS services to specific enterprise customers

Question 8

A company runs a production web application on Amazon EC2 and Amazon RDS. The internal IT team needs a support plan that provides a guaranteed response time of less than one hour for a production system outage. Additionally, the company wants access to AWS Infrastructure Event Management, which includes guidance from AWS experts during planned events such as product launches or migrations. The company does not require a dedicated Technical Account Manager (TAM). Which AWS Support plan should the company choose?

Accepted Answer

Business Support. The Business Support plan is the correct choice because it provides a guaranteed response time of less than one hour for production system outages (production system impaired) and includes access to AWS Infrastructure Event Management for guidance during planned events. The company does not need a dedicated Technical Account Manager (TAM), which is only available with the Enterprise Support plan, making Business Support the most cost-effective option that meets all stated requirements.

Answer

Basic Support

Answer

Developer Support

Answer

Enterprise Support

Question 9

A company runs a web application on Amazon EC2 instances. The company wants to ensure that they are billed only for the exact compute capacity they consume, down to the second, for each running instance. They also want to receive a detailed breakdown of their usage, including CPU time, storage, and data transfer, so they can analyze costs per department. Which essential characteristic of cloud computing enables this granular tracking and billing?

Accepted Answer

Measured service. Measured service is the correct answer because it is the cloud characteristic that enables providers to monitor, control, and report on resource usage (CPU time, storage, data transfer) with granularity down to the second. This metering capability allows AWS to bill customers only for the exact compute capacity consumed and provide detailed usage breakdowns for cost analysis per department.

Answer

Rapid elasticity

Answer

Resource pooling

Answer

On-demand self-service

Question 10

A company wants to proactively monitor its AWS spending and receive email notifications when actual or forecasted costs exceed a defined threshold. The company has a monthly budget of $10,000 and wants to be alerted when costs reach 80% of the budget. Which AWS service should the company use to meet these requirements?

Accepted Answer

AWS Budgets. AWS Budgets allows you to set custom cost and usage budgets, and configure alerts that trigger when actual or forecasted costs exceed a defined threshold (e.g., 80% of a $10,000 monthly budget). It can send email notifications via Amazon SNS when the threshold is breached, meeting the proactive monitoring requirement.

Answer

AWS Cost Explorer

Answer

AWS Trusted Advisor

Answer

AWS Consolidated Billing

Question 11

A company runs a mix of Amazon EC2 instances across multiple AWS Regions to support its e-commerce platform. The finance team wants to reduce compute costs by right-sizing resources. They need a managed tool that analyzes historical CPU and memory utilization over 30 days, uses machine learning to identify over-provisioned and under-provisioned instances, and provides actionable recommendations to adjust instance sizes. Which AWS tool should the finance team use?

Accepted Answer

AWS Compute Optimizer. AWS Compute Optimizer is the correct choice because it is a managed service that uses machine learning to analyze historical utilization metrics (CPU, memory, etc.) over up to 93 days, identifies over-provisioned and under-provisioned EC2 instances, and generates actionable rightsizing recommendations. The question specifically requires a tool that analyzes 30 days of historical CPU and memory data with ML-driven insights, which aligns exactly with Compute Optimizer's core functionality.

Answer

AWS Trusted Advisor

Answer

AWS Cost Explorer

Answer

AWS Budgets

Question 12

A development team is building a mobile application and needs to add user registration, sign-in, and authentication (including social login via Google and Facebook) without building and managing their own authentication backend. Which AWS service provides managed user authentication for applications?

Accepted Answer

Amazon Cognito. Amazon Cognito is the correct choice because it provides a fully managed user identity and authentication service specifically designed for mobile and web applications. It supports user registration, sign-in, and social login via identity providers like Google and Facebook through its user pools and identity pools features, eliminating the need to build and manage a custom authentication backend.

Answer

AWS IAM

Answer

AWS Directory Service

Answer

AWS SSO

Question 13

A mobile gaming company is developing a real-time multiplayer game that requires ultra-low latency (under 10 milliseconds) for player interactions. The company expects most of its users to be on 5G mobile networks. To meet the latency requirement, the company needs to deploy compute and storage resources as close as possible to the mobile subscribers, directly at the edge of the telecommunications network. Which AWS service should the company use?

Accepted Answer

AWS Wavelength. AWS Wavelength is the correct choice because it embeds AWS compute and storage services directly at the edge of 5G telecommunications networks, enabling ultra-low latency (under 10 ms) for mobile subscribers. This allows the gaming company to process player interactions within the carrier's network, minimizing the round-trip time between the mobile device and the application server.

Answer

AWS Local Zones

Answer

AWS Outposts

Answer

Amazon CloudFront Edge Locations

Question 14

A company runs a multiplayer gaming application on AWS. The application uses UDP for real-time communication between players. Players in different geographic regions report high latency and connection instability. The company wants to improve performance by directing user traffic to the nearest healthy application endpoint and using a static IP address for the application. Which AWS service should the company use to meet these requirements?

Accepted Answer

AWS Global Accelerator. AWS Global Accelerator uses the AWS global network to route UDP traffic over optimized paths to the nearest healthy application endpoint, reducing latency and jitter. It provides two static anycast IP addresses that act as a fixed entry point, masking changes to underlying infrastructure. This directly addresses the need for low-latency UDP communication and a static IP for the gaming application.

Answer

Amazon CloudFront

Answer

Amazon Route 53

Answer

AWS Direct Connect

Question 15

A company wants to implement governance controls that prevent their developers from provisioning expensive instance types. Which approach is most effective?

Accepted Answer

Apply an SCP or IAM policy that denies launching specific expensive instance types. Service Control Policies (SCPs) or IAM policies can explicitly deny the launch of specific expensive instance types (e.g., `p3.2xlarge` or `x1e.32xlarge`) at the API level, preventing the action before any resources are created. This proactive governance approach enforces compliance in real time, unlike reactive or advisory methods. By attaching a deny effect for `ec2:RunInstances` with a condition on `ec2:InstanceType`, the policy blocks unauthorized instance provisioning regardless of the user's role or account.

Answer

Set an AWS Budget alert for when expensive instances are launched

Answer

Enable AWS Cost Explorer recommendations

Answer

Enable Trusted Advisor and review weekly

Question 16

A company is concerned about unexpected AWS charges from development instances that developers forget to stop. Which AWS service provides a simple dashboard showing AWS service health events and can also be used to stay informed about account-level events?

Accepted Answer

AWS Health Dashboard (Personal Health Dashboard). The AWS Health Dashboard (Personal Health Dashboard) provides a personalized view of the health of AWS services and resources that affect your account, including scheduled maintenance, security notifications, and other account-level events. While it does not directly show billing alerts, it helps you stay informed about service-related events that could impact your resources. For billing alerts, you would use Amazon CloudWatch or AWS Budgets.

Answer

AWS Trusted Advisor

Answer

Amazon CloudWatch

Answer

AWS Config

Question 17

Which AWS offering provides free, self-paced online training courses, videos, and labs to help customers learn AWS services and pass certification exams?

Accepted Answer

AWS Skill Builder. AWS Skill Builder is the official AWS training portal that offers free, self-paced online training courses, videos, and hands-on labs. It is specifically designed to help individuals learn AWS services and prepare for AWS Certification exams, including the CLF-C02. Unlike other options, Skill Builder directly provides the described learning resources at no cost.

Answer

AWS Partner Network (APN)

Answer

AWS Certification

Answer

AWS Marketplace

Question 18

A company's application needs to process streaming data from IoT sensors in real time and store processed results in S3. Which AWS service is designed for ingesting and processing real-time streaming data?

Accepted Answer

Amazon Kinesis Data Streams. Amazon Kinesis Data Streams is purpose-built for ingesting and processing real-time streaming data at scale. It can continuously capture gigabytes of data per second from hundreds of thousands of sources, such as IoT sensors, and integrate with downstream consumers like AWS Lambda or Kinesis Data Analytics for real-time processing before storing results in Amazon S3.

Answer

Amazon SQS

Answer

AWS Batch

Answer

Amazon EMR

Question 19

A company runs a production web application on Amazon EC2 and Amazon RDS instances. The company's IT team needs technical support from AWS engineers with a guaranteed response time of less than one hour for issues where production systems are impaired. Additionally, the team wants to receive cost optimization recommendations through AWS Trusted Advisor. Which AWS Support plan should the company choose?

Accepted Answer

AWS Business Support. AWS Business Support provides a response time of less than one hour for production system impaired cases (severity level 'high') and includes full access to AWS Trusted Advisor, which offers cost optimization recommendations. This plan meets both the guaranteed response time and the cost optimization requirements specified in the question.

Answer

AWS Basic Support

Answer

AWS Developer Support

Answer

AWS Enterprise Support

Question 20

A company operates 10 AWS accounts under AWS Organizations. Each account runs multiple projects, and the company tags all resources with a 'Project' tag (e.g., 'Project-A', 'Project-B'). The finance team wants to view the consolidated monthly bill broken down by the value of the 'Project' tag across all accounts. Which AWS feature should the team use to achieve this?

Accepted Answer

Activate the 'Project' tag as a cost allocation tag in the AWS Organizations payer account's Billing and Cost Management console.. Cost allocation tags in the AWS Organizations payer account's Billing and Cost Management console allow you to activate user-defined tags (like 'Project') so that AWS can break down the consolidated monthly bill by those tag values across all linked accounts. Once activated, the cost data is available in Cost Explorer and the Cost & Usage Report, enabling the finance team to view spending per project without manual aggregation.

Answer

Create an AWS Budget for each 'Project' tag value and set cost alerts to track spending per project.

Answer

Use AWS Trusted Advisor to generate a cost optimization report that shows which projects are over-spending based on the 'Project' tag.

Answer

Configure AWS Compute Optimizer to analyze costs per project and recommend resource downsizing based on the 'Project' tag.