CLF-C02 Practice Test 6 — 10 Questions

Question 1

A company plans to migrate its on-premises workload to AWS. The finance team wants to compare the total cost of ownership between running the workload on-premises and running it on AWS. They need to estimate monthly costs for different Amazon EC2 instance types, pricing models (On-Demand, Reserved, Spot), and storage options before making any commitment. Which AWS tool should the finance team use to create this detailed cost estimate?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

AWS Pricing Calculator. AWS Pricing Calculator is the correct tool because it allows users to create detailed cost estimates for AWS services, including EC2 instance types, pricing models (On-Demand, Reserved, Spot), and storage options, before any commitment. It provides a granular breakdown of monthly costs, enabling a total cost of ownership (TCO) comparison between on-premises and AWS workloads. This aligns directly with the finance team's requirement to estimate costs without incurring actual usage.

Answer

AWS Budgets

Answer

AWS Cost Explorer

Answer

AWS Trusted Advisor

Question 2

A company is launching a critical production application on AWS. The operations team requires technical support with a response time of less than 1 hour for urgent system issues. They also need access to AWS Trusted Advisor best practice checks for cost optimization and security. Which AWS Support plan meets these requirements at the lowest cost?

Accepted Answer

AWS Business Support. AWS Business Support provides a response time of less than 1 hour for urgent system issues (production system impaired) and includes full access to AWS Trusted Advisor best practice checks for cost optimization and security. This meets all stated requirements at the lowest cost among the plans that offer these features.

Answer

AWS Developer Support

Answer

AWS Enterprise On-Ramp Support

Answer

AWS Enterprise Support

Question 3

A company runs a web application on Amazon EC2 instances. The application experiences unpredictable traffic spikes during marketing campaigns. The company configures an Amazon EC2 Auto Scaling group to automatically add instances when CPU utilization exceeds 70% and remove instances when it drops below 30%. This allows the company to handle peak loads without manual intervention and avoid paying for idle capacity during low traffic periods. Which essential characteristic of cloud computing does this configuration BEST demonstrate?

Accepted Answer

Rapid elasticity. The Auto Scaling group dynamically adjusts the number of EC2 instances in response to CPU utilization thresholds, scaling out during traffic spikes and scaling in during low traffic. This ability to rapidly provision and release compute resources to match demand is the defining characteristic of rapid elasticity, which allows the company to handle peak loads without manual intervention and avoid paying for idle capacity.

Answer

On-demand self-service

Answer

Broad network access

Answer

Measured service

Question 4

A company runs a customer-facing web application on a single Amazon EC2 instance. To improve resilience, the solutions architect decides to deploy a second EC2 instance in a different Availability Zone and configure an Application Load Balancer to distribute traffic. The goal is to ensure that the application remains accessible even if one instance or one Availability Zone becomes unavailable. Which cloud computing benefit does this architecture primarily aim to achieve?

Accepted Answer

High availability. By deploying a second EC2 instance in a different Availability Zone and using an Application Load Balancer (ALB) to distribute traffic, the architecture ensures that if one instance or one Availability Zone fails, the ALB automatically routes traffic to the healthy instance in the other AZ. This design directly achieves high availability by eliminating a single point of failure and maintaining application uptime during infrastructure failures.

Answer

Elasticity

Answer

Scalability

Answer

Cost optimization

Question 5

A company is migrating its workloads to AWS. The IT team is concerned that they will lose visibility into which specific physical server is running their application. A solutions architect explains that AWS abstracts the underlying hardware, allowing customers to focus on their applications without managing physical infrastructure. The architect also notes that AWS pools resources from a large number of data centers to serve multiple customers, and changes the physical location of resources dynamically. Which essential characteristic of cloud computing does this scenario best describe?

Accepted Answer

Resource pooling. The scenario describes AWS pooling compute resources from multiple data centers to serve multiple customers, with the physical location of resources changing dynamically. This directly aligns with the 'resource pooling' characteristic of cloud computing, where the provider's computing resources are pooled to serve multiple consumers using a multi-tenant model, with physical and virtual resources dynamically assigned and reassigned according to consumer demand. The customer has no knowledge or control over the exact physical location of the provided resources (e.g., which specific server runs their application), which matches the concern in the question.

Answer

Rapid elasticity

Answer

Measured service

Answer

On-demand self-service

Question 6

A company has a serverless application built with AWS Lambda. The application requires a series of functions to run in a specific order: after a user uploads a file, a validation function must run, then a processing function, and finally a metadata storage function. The company needs a service to coordinate these steps, manage state, handle errors, and automatically retry failed functions based on defined conditions. Which AWS service should the company use to meet these requirements?

Accepted Answer

AWS Step Functions. AWS Step Functions is a serverless orchestration service that lets you coordinate multiple AWS services into a flexible, visual workflow. It directly meets the requirement to run Lambda functions in a specific order, manage state between steps, handle errors with built-in retry logic, and define conditions for automatic retries using Amazon States Language (ASL). This makes it the ideal choice for orchestrating a multi-step serverless application with error handling and state management.

Answer

Amazon Simple Queue Service (SQS)

Answer

AWS Batch

Answer

Amazon EventBridge

Question 7

A company has been running multiple workloads on AWS for the past six months. The finance team needs to analyze historical spending to identify month-over-month trends by AWS service and by individual linked accounts. The team requires a graphical, interactive tool that allows them to apply custom date ranges and filters, and view the results as customizable charts and graphs. Which AWS service should the finance team use to meet this requirement?

Accepted Answer

AWS Cost Explorer. AWS Cost Explorer provides a graphical interface with pre-built charts and graphs that allow users to visualize historical spending trends. It supports filtering by AWS service and linked accounts, and enables custom date ranges for month-over-month analysis, making it the correct choice for the finance team's requirements.

Answer

AWS Budgets

Answer

AWS Trusted Advisor

Answer

AWS Consolidated Billing

Question 8

A company has a security policy that requires all Amazon EBS volumes attached to production Amazon EC2 instances to be encrypted at rest using customer-managed encryption keys. The policy also mandates that the encryption keys must be automatically rotated every 365 days. The company wants to minimize operational overhead by using a managed AWS service for key management and automatic rotation. Which AWS service should the company use to meet these requirements?

Accepted Answer

AWS Key Management Service (AWS KMS). AWS KMS is the correct choice because it provides managed customer master keys (CMKs) that can be used to encrypt EBS volumes at rest, and it supports automatic annual key rotation (every 365 days) with no additional operational overhead. KMS integrates directly with EBS to enforce encryption using customer-managed keys, meeting both the encryption and rotation requirements.

Answer

AWS CloudHSM

Answer

AWS Certificate Manager (ACM)

Answer

AWS Secrets Manager

Question 9

A company is using AWS Organizations to manage multiple AWS accounts. The security team wants to ensure that users in the development accounts cannot disable AWS CloudTrail logging or delete CloudTrail trails, even if those users have full administrator permissions within their own accounts. The team needs a central mechanism that is enforced across all development accounts regardless of individual IAM policies. Which AWS feature should the security team use to meet this requirement?

Accepted Answer

Service control policies (SCPs). Service control policies (SCPs) are a feature of AWS Organizations that allow you to centrally control the maximum available permissions for all accounts in an organization. SCPs act as a guardrail, restricting what actions users and roles in member accounts can perform, even if they have full administrator permissions via IAM policies. By applying an SCP that denies the `cloudtrail:DeleteTrail` and `cloudtrail:StopLogging` actions, the security team can enforce that CloudTrail cannot be disabled or deleted across all development accounts, regardless of individual IAM configurations.

Answer

IAM policies

Answer

AWS Config rules

Answer

Amazon CloudWatch Events

Question 10

A company runs a latency-sensitive application on AWS that must communicate with an on-premises data center. The company requires a dedicated, private network connection that provides consistent, low-latency performance and bypasses the public internet. Which AWS service should the company use to meet these requirements?

Accepted Answer

AWS Direct Connect. AWS Direct Connect is the correct choice because it provides a dedicated, private network connection from an on-premises data center to AWS, bypassing the public internet entirely. This ensures consistent, low-latency performance for latency-sensitive applications by using a physical cross-connect or hosted virtual interface, which avoids the variability and potential congestion of internet-based connections.

Answer

AWS Site-to-Site VPN

Answer

AWS Client VPN

Answer

AWS Transit Gateway