CLF-C02 Practice Exam 64 — 20 Questions

Question 1

A company wants to allow their on-premises employees to access S3 objects using Windows file system operations (drive mapping) without migrating their workflows. Which AWS service provides this capability?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

AWS Storage Gateway File Gateway (SMB). AWS Storage Gateway File Gateway with SMB (Server Message Block) support allows on-premises employees to mount S3 buckets as Windows file shares using standard drive mapping. This enables access to S3 objects via Windows file system operations without migrating existing workflows, as the gateway caches frequently accessed data locally while storing the primary data in S3.

Answer

Amazon S3 with AWS Direct Connect

Answer

Amazon FSx for Windows File Server

Answer

Amazon EFS with SMB protocol

Question 2

A company is designing a system where a failure in one component does not cause cascading failures across the entire application. Which architectural concept does this represent?

Accepted Answer

Loose coupling. Loose coupling is the architectural concept that ensures components are independent, so a failure in one component does not cascade to others. In AWS, this is achieved through services like Amazon SQS for asynchronous messaging or Amazon SNS for event-driven decoupling, where each component can fail and recover independently without affecting the rest of the system.

Answer

Tight coupling

Answer

Vertical scaling

Answer

Monolithic architecture

Question 3

A company is planning to migrate to AWS. Their CTO wants to understand how AWS's massive scale benefits smaller customers. Which AWS cloud economic concept explains this benefit?

Accepted Answer

Economies of scale. Economies of scale is the correct answer because it describes how AWS's massive infrastructure investments (data centers, hardware, networking) allow them to spread fixed costs across millions of customers, resulting in lower per-unit costs that are passed down to smaller customers. This is a core cloud economic concept where the provider's scale directly benefits all tenants, unlike elasticity which focuses on resource scaling.

Answer

Elasticity

Answer

Capital expenditure avoidance

Answer

Global reach

Question 4

A company runs a web application on Amazon EC2 instances behind an Application Load Balancer. The application experiences unpredictable traffic patterns, with sudden spikes during promotional events and low traffic at other times. The company configures an Auto Scaling group to automatically add EC2 instances when CPU utilization exceeds 70% and remove instances when utilization drops below 30%. The system handles the spike without any manual intervention and reduces capacity when demand decreases. Which fundamental characteristic of cloud computing does this scenario best illustrate?

Accepted Answer

Rapid elasticity. The scenario describes the Auto Scaling group automatically adding EC2 instances during traffic spikes and removing them when demand drops, which directly demonstrates rapid elasticity—the ability to scale computing resources up and down quickly and automatically in response to demand. This is a core characteristic of cloud computing defined by the National Institute of Standards and Technology (NIST), where resources appear unlimited and can be provisioned in any quantity at any time.

Answer

On-demand self-service

Answer

Broad network access

Answer

Resource pooling

Question 5

According to the AWS Well-Architected Framework, which pillar focuses on the ability to run workloads effectively, gain insight into operations, and continuously improve processes?

Accepted Answer

Operational Excellence. Operational Excellence is the AWS Well-Architected pillar that focuses on running and monitoring workloads to deliver business value, and on continually improving processes and procedures. It includes the ability to run workloads effectively, gain operational insight through metrics and logs (e.g., Amazon CloudWatch, AWS CloudTrail), and use runbooks and automation (e.g., AWS Systems Manager) to continuously improve. This directly matches the question's description of running workloads effectively, gaining insight into operations, and continuously improving processes.

Answer

Reliability

Answer

Performance Efficiency

Answer

Sustainability

Question 6

A company recently signed up for AWS and is using the 12-month Free Tier offer. In the first month, they launched a single Amazon EC2 t2.micro instance and used it for exactly 750 hours. In the second month, they launched a second t2.micro instance and ran both instances simultaneously for 500 hours each (a total of 1,000 instance-hours for the month). Which statement accurately describes the charges for the second month under the Free Tier?

Accepted Answer

The first 750 hours of combined usage across both instances are free, and the remaining 250 hours are charged.. The AWS Free Tier for EC2 provides 750 hours of t2.micro (or t3.micro) instance usage per month across all regions, aggregated across all instances. In the second month, the combined usage of both instances is 1,000 hours, so the first 750 hours are free, and the remaining 250 hours are charged at standard On-Demand rates. The Free Tier applies each month for the first 12 months, not just the first month, and the 750-hour limit is a pool shared by all eligible instances.

Answer

The entire 1,000 hours are free because each instance is eligible for 750 free hours per month.

Answer

The first 500 hours of each instance are free, and the remaining 500 hours are charged.

Answer

The entire 1,000 hours are charged because the Free Tier only applies to the first month.

Question 7

A company has multiple AWS accounts that are consolidated under AWS Organizations. The company uses cost allocation tags to track costs by project. The finance team now wants an interactive tool that can visualize the company's AWS spending over the past 6 months, break down costs by the 'Project' tag, and allow filtering by service, region, and linked account. The team also wants to forecast future spending based on historical trends. Which AWS service or feature should the finance team use?

Accepted Answer

AWS Cost Explorer. AWS Cost Explorer is the correct choice because it provides an interactive, pre-built dashboard that visualizes cost and usage data over customizable time periods (up to 12 months), supports filtering by service, region, and linked account, and includes a forecasting feature that uses machine learning to predict future spending based on historical trends. It directly meets the finance team's requirement for an interactive tool with filtering and forecasting capabilities.

Answer

AWS Budgets

Answer

AWS Cost and Usage Report (CUR)

Answer

AWS Trusted Advisor

Question 8

A company runs a legacy on-premises file server that stores 10 TB of shared documents used by a team of 50 employees. The company wants to migrate this data to Amazon S3 to benefit from durable, scalable storage. However, the team requires low-latency access to frequently used files (less than 5 milliseconds latency) because the application reads and writes files multiple times per second. The company also wants to maintain a local cache of recently accessed files on premises to reduce latency and minimize egress costs. The entire solution should be managed through the AWS Management Console and support standard file-sharing protocols like SMB. Which AWS service should the company use to meet these requirements?

Accepted Answer

AWS Storage Gateway File Gateway. AWS Storage Gateway File Gateway is the correct choice because it provides a hybrid cloud storage service that enables low-latency, on-premises access to frequently used files by maintaining a local cache of recently accessed data. It supports the SMB protocol for standard file sharing, integrates with Amazon S3 for durable, scalable storage, and can be managed through the AWS Management Console. The local cache reduces both latency (targeting sub-5 ms for cached data) and egress costs by serving reads from the on-premises cache instead of fetching from S3.

Answer

Amazon FSx for Windows File Server

Answer

AWS DataSync

Answer

Amazon S3 with AWS Direct Connect

Question 9

A financial services company is required by regulation to keep all customer transaction data on-premises. However, they want to use AWS to run analytics workloads on this data using Amazon EMR and Amazon S3 for temporary storage of intermediate results. They need a solution that connects their on-premises network to AWS securely and allows them to extend their on-premises environment into the AWS Cloud. Which cloud computing deployment model does this scenario BEST describe?

Accepted Answer

Hybrid cloud. The scenario describes a hybrid cloud deployment model, where the company maintains on-premises infrastructure for regulatory compliance (keeping customer transaction data on-premises) while leveraging AWS public cloud services (Amazon EMR and Amazon S3) for analytics workloads. The requirement to connect the on-premises network to AWS securely and extend the on-premises environment into the AWS Cloud is a defining characteristic of hybrid cloud, often implemented using AWS Direct Connect or VPN connections to create a unified network.

Answer

Public cloud

Answer

Private cloud

Answer

Community cloud

Question 10

A company runs a web application on Amazon EC2 instances behind an Application Load Balancer (ALB). The company uses a custom domain name and requires HTTPS for all traffic. The security team provisions an SSL/TLS certificate using AWS Certificate Manager (ACM) and associates it with the ALB. Which of the following is an advantage of using ACM over manually managing certificates?

Accepted Answer

ACM automatically renews the certificate before it expires, and the renewed certificate is automatically applied to the associated load balancer.. AWS Certificate Manager (ACM) automatically renews SSL/TLS certificates before they expire, and the renewed certificate is seamlessly applied to the associated AWS resources, such as an Application Load Balancer (ALB). This eliminates the manual effort of tracking expiration dates, generating new certificates, and re-associating them, which is a key operational advantage over self-managed certificates.

Answer

ACM encrypts the traffic between the ALB and the EC2 instances, ensuring end-to-end encryption.

Answer

ACM provides a certificate that can be exported and installed on any on-premises server for free.

Answer

ACM requires the company to store the private key in a secure location outside of AWS.

Question 11

A company traditionally purchases physical servers every three years to host its internal applications. The company is migrating these applications to AWS and will pay a monthly fee based on the actual compute capacity consumed. The company no longer needs to make large upfront hardware purchases and can instead budget for smaller monthly payments. Which benefit of cloud computing does this scenario BEST describe?

Accepted Answer

Conversion of capital expense to operational expense. This scenario describes the conversion of capital expense (CapEx) to operational expense (OpEx). Traditionally, purchasing physical servers requires a large upfront capital investment, which is a capital expense. By migrating to AWS and paying a monthly fee based on actual compute capacity consumed, the company shifts to a pay-as-you-go model, which is an operational expense. This allows the company to budget for smaller, predictable monthly payments instead of large, infrequent hardware purchases.

Answer

Scalability

Answer

Elasticity

Answer

Economies of scale

Question 12

A company wants to accelerate their machine learning workloads using purpose-built ML chips instead of general-purpose GPUs. Which AWS compute option provides custom ML accelerator chips?

Accepted Answer

EC2 Inf and Trn instances (AWS Inferentia and Trainium). AWS Inferentia and Trainium are purpose-built ML accelerator chips designed specifically to optimize machine learning inference and training workloads, respectively. Unlike general-purpose GPUs, these custom chips provide higher performance per watt and lower cost for ML tasks, making them the ideal choice for accelerating ML workloads with dedicated hardware.

Answer

EC2 GPU instances (P and G family)

Answer

EC2 Compute-optimized instances (C family)

Answer

AWS Lambda with extended memory

Question 13

A company runs separate AWS accounts for development, testing, and production workloads. The finance team wants a single view that shows the total spending across all accounts. Additionally, the team wants to benefit from volume discount pricing by aggregating usage across all accounts. The team also needs to allocate costs to individual projects based on custom tags applied to resources. Which AWS feature should the finance team use to meet all these requirements?

Accepted Answer

AWS Organizations consolidated billing. AWS Organizations consolidated billing allows you to aggregate usage across all linked accounts, enabling volume discount pricing (e.g., lower S3 storage rates or EC2 Reserved Instance tiers) based on combined usage. It also provides a single payer account that can view total spending across all accounts, and supports cost allocation using custom tags (e.g., Project or CostCenter) via AWS Cost Explorer or AWS Cost and Usage Reports. This directly meets the finance team's requirements for unified spending visibility, volume discounts, and tag-based cost allocation.

Answer

AWS Cost Explorer

Answer

AWS Budgets

Answer

AWS Trusted Advisor

Question 14

A government agency runs all of its computing workloads on hardware located in its own secure facility. No resources are hosted with a third-party cloud provider. The agency manages all servers, networking equipment, and storage. Which cloud deployment model describes this architecture?

Accepted Answer

Private cloud. A private cloud deployment model is defined by cloud resources being used exclusively by a single organization, typically hosted on-premises in the organization's own data center. In this scenario, the government agency owns and manages all hardware, networking, and storage within its own secure facility, with no third-party cloud provider involvement, which aligns precisely with the private cloud model.

Answer

Public cloud

Answer

Hybrid cloud

Answer

Community cloud

Question 15

A company hosts an e-commerce website on Amazon EC2 instances behind an Application Load Balancer in the us-east-1 Region. The website includes both static assets (product images, CSS files) and dynamic content (user-specific cart data). The company has customers all over the world who complain about slow page load times. The company wants to reduce latency by caching static content closer to users while still allowing dynamic requests to reach the origin. Which AWS service should the company use to meet these requirements?

Accepted Answer

Amazon CloudFront with Application Load Balancer as the origin. Amazon CloudFront is a content delivery network (CDN) that caches static content (e.g., images, CSS) at edge locations worldwide, reducing latency for users. By configuring the Application Load Balancer as the origin, CloudFront forwards dynamic requests (e.g., cart data) to the ALB, which then routes them to the EC2 instances. This hybrid approach meets the requirement to cache static assets globally while allowing dynamic content to be processed by the origin servers.

Answer

Amazon Route 53 with latency-based routing

Answer

AWS Global Accelerator with static IP addresses

Answer

Amazon S3 Transfer Acceleration

Question 16

A startup is building a Node.js web application. The development team has limited DevOps experience and wants to focus on writing code. They need a managed platform that automatically deploys their application code, provisions the necessary AWS resources (such as EC2 instances, a load balancer, and Auto Scaling), and handles health monitoring and scaling. However, they want the ability to later customize the underlying EC2 instances and configure environment variables without switching to a different compute service. Which AWS service should the startup use?

Accepted Answer

AWS Elastic Beanstalk. AWS Elastic Beanstalk is a Platform as a Service (PaaS) that automatically handles deployment, capacity provisioning, load balancing, Auto Scaling, and health monitoring for web applications. It allows developers to upload their Node.js code and have Elastic Beanstalk provision the underlying EC2 instances, load balancer, and Auto Scaling group while still providing the option to later customize the EC2 instances (e.g., via .ebextensions or SSH) and configure environment variables through the Elastic Beanstalk console or CLI. This matches the startup's need for a managed platform with future customization flexibility.

Answer

AWS Lambda

Answer

Amazon ECS

Answer

AWS CloudFormation

Question 17

A company wants to use AWS for disaster recovery but wants to minimize costs. They only need backups of their data, with recovery taking several hours if disaster strikes. Which DR strategy requires the least investment?

Accepted Answer

Backup and Restore. The Backup and Restore strategy (Option C) requires the least investment because it involves periodically copying data to low-cost storage like Amazon S3 (including S3 Glacier for archival) and only restoring infrastructure when needed. This approach has the highest Recovery Time Objective (RTO) and Recovery Point Objective (RPO), often measured in hours, which aligns with the requirement of minimizing costs while tolerating several hours for recovery.

Answer

Pilot Light

Answer

Warm Standby

Answer

Multi-Site Active/Active

Question 18

A company operates multiple Amazon VPCs across several AWS accounts for different business units. The company also has an on-premises data center connected to AWS via AWS Direct Connect. The network team wants to simplify the connectivity between all VPCs and the on-premises network. Currently, they manage individual VPC peering connections, which is becoming complex as more VPCs are added. They need a single network hub that can scale to connect hundreds of VPCs and the on-premises network, with centralized routing management. Which AWS service should the network team use?

Accepted Answer

AWS Transit Gateway. AWS Transit Gateway acts as a single, scalable network hub that connects multiple VPCs and on-premises networks via Direct Connect, using a centralized routing table. This eliminates the need for complex, meshed VPC peering connections and provides transitive routing across all attached networks, which directly addresses the requirement for a hub that scales to hundreds of VPCs.

Answer

Amazon VPC peering

Answer

AWS PrivateLink

Answer

AWS Site-to-Site VPN

Question 19

A company deploys their web application across two Availability Zones using an Application Load Balancer. If one AZ experiences an outage, traffic is automatically routed to the other AZ and the application continues to function. Which cloud benefit does this demonstrate?

Accepted Answer

High availability and fault tolerance. This scenario demonstrates high availability and fault tolerance because the application is deployed across two Availability Zones with an Application Load Balancer (ALB) distributing traffic. If one AZ fails, the ALB automatically reroutes traffic to the healthy AZ, ensuring continuous operation. This design eliminates a single point of failure and maintains service availability, which is the core of fault tolerance in AWS.

Answer

Economies of scale

Answer

On-demand self-service

Answer

Rapid elasticity

Question 20

A financial services company must comply with PCI DSS requirements that mandate the use of a dedicated hardware security module (HSM) to store encryption keys used to protect cardholder data. The company plans to use server-side encryption in Amazon S3 and needs to ensure that the encryption keys are stored in a dedicated HSM under the company's sole control. Which AWS service should the company use to meet this requirement?

Accepted Answer

AWS CloudHSM. AWS CloudHSM provides dedicated hardware security modules (HSMs) that are under the customer's sole control, meeting PCI DSS requirements for storing encryption keys in a dedicated HSM. It allows you to generate and manage your own encryption keys within a single-tenant, FIPS 140-2 Level 3 validated device, ensuring compliance with the mandate for dedicated hardware.

Answer

AWS KMS with automatic key rotation

Answer

AWS Certificate Manager (ACM)

Answer

AWS Secrets Manager