CLF-C02 Practice Test 9 — 10 Questions

Question 1

A company is deploying a three-tier web application on AWS. The security team requires a network-level firewall that operates at the subnet level and can evaluate both inbound and outbound traffic using stateless rules. Which AWS feature should the company use to meet this requirement?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Network ACLs. Network ACLs (NACLs) are a stateless, subnet-level firewall that evaluates both inbound and outbound traffic based on numbered rules. Unlike security groups, NACLs do not maintain connection state, so rules must be explicitly defined for both directions, meeting the requirement for stateless inspection at the subnet boundary.

Answer

Security Groups

Answer

AWS WAF

Answer

AWS Shield

Question 2

A startup is deploying a web application on Amazon EC2 instances across multiple Availability Zones (AZs). The architecture must ensure that the application remains fully operational and available to users even if one entire AZ fails. Which cloud computing concept does this requirement MOST directly represent?

Accepted Answer

Fault tolerance. Fault tolerance is the correct concept because the requirement specifies that the application must remain fully operational and available even if an entire Availability Zone fails. By deploying EC2 instances across multiple AZs and using an Elastic Load Balancer to distribute traffic, the architecture can withstand the failure of one AZ without any interruption in service, which is the essence of fault tolerance.

Answer

Elasticity

Answer

Scalability

Answer

Resource pooling

Question 3

A company has a serverless architecture on AWS for its order processing system. The system uses AWS Lambda functions to validate payment, check inventory, update the database, and send email notifications. The company needs a managed service to coordinate these functions into a workflow, implement retry logic in case of failures, and manage the execution of each step sequentially. Which AWS service should the company use?

Accepted Answer

AWS Step Functions. AWS Step Functions is a fully managed service designed to coordinate multiple AWS services into a serverless workflow. It allows you to define state machines that execute Lambda functions sequentially, implement built-in retry logic with exponential backoff, and handle error conditions, making it the ideal choice for orchestrating the order processing steps (payment validation, inventory check, database update, and email notification).

Answer

Amazon Simple Workflow Service (Amazon SWF)

Answer

Amazon Simple Queue Service (Amazon SQS)

Answer

AWS AppSync

Question 4

A company is designing a cloud architecture for a critical customer-facing application. The CTO requires that the architecture automatically recover from infrastructure failures without manual intervention. The solution must be able to withstand the failure of individual components, such as an Amazon EC2 instance or an entire Availability Zone. Which design principle from the AWS Well-Architected Framework's Reliability pillar should the company implement to meet this requirement?

Accepted Answer

Scale horizontally to increase aggregate system availability.. Scaling horizontally (adding more EC2 instances behind a load balancer) increases aggregate system availability because if one instance fails, traffic is redistributed to the remaining healthy instances. This design also supports multi-AZ deployments, allowing the application to survive an entire Availability Zone failure without manual intervention, which directly meets the CTO's requirement for automatic recovery.

Answer

Implement a monolithic architecture to reduce complexity and minimize points of failure.

Answer

Use a single large EC2 instance to minimize the number of components that could fail.

Answer

Test recovery procedures by simulating infrastructure failures in a staging environment.

Question 5

A company has migrated its customer-facing web application to AWS. The application is deployed on Amazon EC2 instances behind an Application Load Balancer. The company's customers access the application from various devices—desktop computers, laptops, tablets, and smartphones—using standard web browsers without any additional configuration or proprietary software. The ability for customers to reach the application over the internet from any device with a standard browser best demonstrates which essential characteristic of cloud computing?

Accepted Answer

Broad network access. Broad network access is the correct answer because the scenario describes customers accessing the application from various devices (desktops, laptops, tablets, smartphones) using standard web browsers over the internet without any proprietary software. This directly matches the NIST definition of broad network access: resources are available over the network and accessed through standard mechanisms (e.g., HTTP/HTTPS) that promote use by heterogeneous thin or thick client platforms.

Answer

On-demand self-service

Answer

Resource pooling

Answer

Rapid elasticity

Question 6

A startup is running a pilot application on AWS and wants to control costs strictly. The finance team sets a monthly budget of $1,000. They need to receive an email notification when actual or forecasted spending reaches 80% of the budget. Additionally, if the budget is exceeded, they want to automatically stop a non-critical Amazon EC2 instance to prevent further cost overruns. Which combination of AWS services should they use to meet all these requirements with minimal operational overhead?

Accepted Answer

AWS Budgets with a budget action configured to stop the EC2 instance when the budget limit is exceeded. AWS Budgets natively supports budget actions that can automatically stop an EC2 instance when the actual or forecasted spending exceeds a defined threshold. This eliminates the need for custom scripting or additional services, meeting the requirements with minimal operational overhead. The budget alert at 80% can be configured via AWS Budgets' notification feature to send an email through Amazon SNS.

Answer

AWS Cost Explorer with Amazon SNS notifications to send alerts at 80% spending, and an AWS Lambda function to stop the EC2 instance

Answer

AWS Budgets with a budget alert set at 80% of the $1,000 limit, and an AWS Trusted Advisor check to stop the instance when costs exceed the budget

Answer

Amazon CloudWatch cost metric alarms combined with AWS Auto Scaling to reduce instance capacity when spending exceeds the budget

Question 7

A gaming company is preparing to launch a new online multiplayer game. The company expects the player traffic to be extremely high on the first few days after launch, but then stabilize at a much lower level. The IT team wants to provision sufficient server capacity to handle the launch spike without over-provisioning and wasting money during the quieter periods. Which benefit of cloud computing most directly addresses this requirement?

Accepted Answer

Stop guessing capacity. The requirement is to provision enough capacity for a launch spike without over-provisioning for lower steady-state traffic. AWS Auto Scaling with Elastic Load Balancing directly addresses this by automatically adjusting the number of EC2 instances based on real-time demand, eliminating the need to guess peak capacity. This is the core benefit of 'Stop guessing capacity' — cloud elasticity allows you to match resources to actual usage, not predictions.

Answer

Trade capital expense for variable expense

Answer

Increase speed and agility

Answer

Benefit from massive economies of scale

Question 8

A company runs a critical web application on Amazon EC2 instances in the us-east-1 Region, with a secondary standby deployment in us-west-2 for disaster recovery. The application requires that user traffic be directed to the nearest healthy endpoint, automatically failover to the secondary region if the primary region becomes unavailable, and the company needs two static IP addresses that remain fixed regardless of infrastructure changes. The application uses TCP and UDP protocols. Which AWS service should the company use to meet these requirements?

Accepted Answer

AWS Global Accelerator. AWS Global Accelerator is the correct choice because it provides two static anycast IP addresses that remain fixed regardless of infrastructure changes, directs traffic to the nearest healthy endpoint using the AWS global network, and supports automatic failover between regions for both TCP and UDP traffic. It also integrates with Network Load Balancers, Application Load Balancers, or EC2 instances to route traffic to the closest healthy endpoint, meeting all stated requirements.

Answer

Amazon Route 53

Answer

Amazon CloudFront

Answer

Elastic Load Balancing

Question 9

A company runs a monolithic web application on Amazon EC2 that processes user-uploaded files synchronously. During peak hours, the application experiences slow response times because the file processing blocks the web server. The company wants to decouple the upload process from the file processing to improve responsiveness and allow each component to scale independently. The file processing backend must poll for new work and handle failures gracefully by retrying failed messages. Which AWS service should the company use to implement this decoupling?

Accepted Answer

Amazon Simple Queue Service (SQS). Amazon Simple Queue Service (SQS) is the correct choice because it provides a fully managed message queue that decouples the upload process from the file processing backend. The web server can immediately return a response after placing a message in the SQS queue, while the backend workers poll the queue for new work. SQS also supports dead-letter queues and configurable redrive policies to handle failures gracefully by retrying failed messages.

Answer

Amazon Simple Notification Service (SNS)

Answer

Amazon Kinesis Data Streams

Answer

Amazon MQ

Question 10

A company operates multiple AWS accounts under AWS Organizations. The security team needs to record all management events (for example, creating Amazon EC2 instances, modifying security groups, and deleting Amazon S3 buckets) across all accounts. The logs must be delivered to a single Amazon S3 bucket that is encrypted with an AWS KMS key and protected from modification. Which AWS feature should the team enable to achieve this centralized logging requirement?

Accepted Answer

AWS CloudTrail. AWS CloudTrail is the correct service because it records all management events (API calls) across AWS accounts, and when configured as an organization trail in AWS Organizations, it automatically logs events from all member accounts to a single S3 bucket. This meets the requirement for centralized logging with encryption using AWS KMS and protection from modification via S3 bucket policies and versioning.

Answer

AWS Config

Answer

Amazon CloudWatch Logs

Answer

AWS Audit Manager