CLF-C02 Cloud Concepts Practice Test 12 — 15 Questions

Question 1

A solutions architect implements IAM least-privilege policies, enables encryption for all data at rest and in transit, configures VPC security groups and NACLs to limit network access, and sets up automated security incident detection. Which Well-Architected Framework pillar covers these activities?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Security. The Security pillar of the AWS Well-Architected Framework focuses on protecting data, systems, and assets through identity and access management (IAM least-privilege policies), data protection (encryption at rest and in transit), infrastructure protection (VPC security groups and NACLs), and detective controls (automated security incident detection). These activities directly map to the Security pillar's design principles and best practices.

Answer

Operational Excellence

Answer

Reliability

Answer

Cost Optimisation

Question 2

A company used to spend $2 million upfront purchasing servers and building a data centre before launching a new product. With AWS, they provision resources as needed and pay monthly based on actual usage. Which cloud benefit does this represent?

Accepted Answer

Trade capital expense for variable expense. This scenario describes shifting from a large upfront capital expenditure (CapEx) on servers and data centers to a variable operational expenditure (OpEx) based on actual usage. AWS's pay-as-you-go model directly enables this trade, allowing the company to align costs with consumption rather than paying for idle capacity. This is the core benefit of trading capital expense for variable expense.

Answer

Stop guessing about capacity

Answer

Benefit from economies of scale

Answer

Increase speed and agility

Question 3

A company's leadership team wants a structured framework for planning their AWS cloud migration that addresses organisational change management, skills development, governance, platform, security, and operations. Which AWS framework provides guidance across these perspectives?

Accepted Answer

AWS Cloud Adoption Framework (CAF). The AWS Cloud Adoption Framework (CAF) is specifically designed to guide organizations through their cloud migration journey by providing structured guidance across six core perspectives: Business, People, Governance, Platform, Security, and Operations. This framework directly addresses the leadership team's requirements for organizational change management, skills development, governance, platform, security, and operations, making it the correct choice.

Answer

AWS Well-Architected Framework

Answer

AWS Migration Hub

Answer

AWS Trusted Advisor

Question 4

A company wants to minimise the environmental impact of their AWS workloads by choosing the right instance sizes, maximising utilisation, using graviton processors for better performance per watt, and designing architectures that reduce total compute needed. Which AWS Well-Architected Framework pillar guides these decisions?

Accepted Answer

Sustainability. The Sustainability pillar of the AWS Well-Architected Framework focuses on minimizing the environmental impact of cloud workloads. Choosing right-sized instances, maximizing utilization, using Graviton processors for better performance per watt, and designing architectures to reduce total compute directly align with sustainability goals by reducing energy consumption and carbon footprint.

Answer

Cost Optimisation

Answer

Performance Efficiency

Answer

Reliability

Question 5

A company uses Amazon RDS to run their production database. Under the AWS Shared Responsibility Model, who is responsible for patching the underlying database engine software?

Accepted Answer

AWS, because RDS is a managed service that abstracts OS and engine management. Amazon RDS is a fully managed database service that automates the patching of the underlying database engine software. Under the AWS Shared Responsibility Model, AWS is responsible for the security of the cloud, which includes managing the host operating system and the database engine patches. The customer is responsible for data, access management, and application-level security, not the engine software patching.

Answer

The customer, because they chose to run a relational database

Answer

A shared responsibility where AWS and the customer each patch different components

Answer

A third-party DBA contracted by the customer

Question 6

A company deploys their web application across two Availability Zones using an Application Load Balancer. If one AZ experiences an outage, traffic is automatically routed to the other AZ and the application continues to function. Which cloud benefit does this demonstrate?

Accepted Answer

High availability and fault tolerance. This scenario demonstrates high availability and fault tolerance because the application is deployed across two Availability Zones with an Application Load Balancer (ALB) distributing traffic. If one AZ fails, the ALB automatically reroutes traffic to the healthy AZ, ensuring continuous operation. This design eliminates a single point of failure and maintains service availability, which is the core of fault tolerance in AWS.

Answer

Economies of scale

Answer

On-demand self-service

Answer

Rapid elasticity

Question 7

A company discovers they have 30 EC2 instances running 24/7 that are almost never used — CPU utilisation under 1%. Terminating these idle instances would save thousands of dollars per month. Which AWS Well-Architected Framework pillar encourages this practice?

Accepted Answer

Cost Optimisation. The Cost Optimization pillar of the AWS Well-Architected Framework focuses on avoiding unnecessary costs by matching capacity with demand. Terminating idle EC2 instances (CPU utilization under 1%) directly reduces wasted spend, aligning with the pillar's principle of 'right-sizing' resources and eliminating unused components.

Answer

Operational Excellence

Answer

Reliability

Answer

Performance Efficiency

Question 8

A company migrates their self-managed MySQL database running on a virtual machine to Amazon RDS for MySQL, taking advantage of managed backups and Multi-AZ without changing the database schema or application code. Which migration strategy does this represent?

Accepted Answer

Replatform. This is a Replatform (also called 'lift and reshape' or 'platform modernization') migration because the company moves the MySQL database from a self-managed VM to Amazon RDS without changing the database schema or application code. They gain managed backups and Multi-AZ, which are RDS-specific features, but the core database engine and application interface remain unchanged, so no refactoring of the application is required.

Answer

Rehost

Answer

Refactor

Answer

Repurchase

Question 9

Which cloud computing characteristic allows a company to pay only for the compute resources they actually use, without upfront commitments?

Accepted Answer

Pay-as-you-go pricing. Pay-as-you-go pricing is the cloud computing characteristic that enables a company to pay only for the compute resources they actually consume, with no upfront commitments or long-term contracts. This model aligns costs directly with usage, allowing organizations to avoid capital expenditure and scale spending based on demand. AWS implements this through services like EC2 On-Demand instances, where billing is per second (or per hour) with no minimum purchase required.

Answer

High availability

Answer

Elasticity

Answer

Economies of scale

Question 10

The AWS Well-Architected Framework's Reliability pillar recommends automatically recovering from failure. Which AWS feature directly enables automated recovery when an EC2 instance status check fails?

Accepted Answer

Amazon EC2 Auto Recovery. Amazon EC2 Auto Recovery is a feature that automatically recovers an impaired EC2 instance by restarting it on a new healthy host when a system status check fails. This directly aligns with the Reliability pillar's recommendation to automatically recover from failure without manual intervention.

Answer

EC2 Auto Scaling

Answer

Elastic Load Balancing health checks

Answer

AWS Systems Manager Patch Manager

Question 11

Which statement best describes the AWS global infrastructure concept of an Availability Zone (AZ)?

Accepted Answer

One or more discrete data centers with redundant power, networking, and connectivity within a Region. An Availability Zone (AZ) consists of one or more discrete data centers with independent power, cooling, and physical networking, connected to each other through low-latency links within a single AWS Region. This design ensures that if one AZ fails, applications can continue operating in other AZs, providing high availability and fault tolerance. Option B correctly captures this definition, as it emphasizes the discrete, redundant infrastructure that makes an AZ distinct from a Region or a data center.

Answer

A geographic location where AWS hosts data centers, such as North America or Europe

Answer

A CDN edge location used to cache content close to end users

Answer

A logically isolated section of the AWS Cloud where customers launch resources

Question 12

A startup wants to ensure its web application automatically handles traffic spikes during product launches without over-provisioning resources during quiet periods. Which AWS capability best addresses this requirement?

Accepted Answer

Elasticity through AWS Auto Scaling. AWS Auto Scaling enables the startup to automatically adjust the number of Amazon EC2 instances in response to real-time demand, scaling up during traffic spikes and scaling down during quiet periods. This elasticity eliminates the need to over-provision resources, optimizing both cost and performance for variable workloads.

Answer

High availability through multiple AZs

Answer

Durability through S3 data replication

Answer

Agility through rapid resource provisioning

Question 13

A company is planning to migrate to AWS. Their CTO wants to understand how AWS's massive scale benefits smaller customers. Which AWS cloud economic concept explains this benefit?

Accepted Answer

Economies of scale. Economies of scale is the correct answer because it describes how AWS's massive infrastructure investments (data centers, hardware, networking) allow them to spread fixed costs across millions of customers, resulting in lower per-unit costs that are passed down to smaller customers. This is a core cloud economic concept where the provider's scale directly benefits all tenants, unlike elasticity which focuses on resource scaling.

Answer

Elasticity

Answer

Capital expenditure avoidance

Answer

Global reach

Question 14

Which AWS Well-Architected Framework pillar focuses on protecting information, systems, and assets while delivering business value through risk assessments and mitigation strategies?

Accepted Answer

Security. The Security pillar of the AWS Well-Architected Framework is specifically designed to protect information, systems, and assets through the implementation of risk assessments and mitigation strategies. It encompasses practices such as identity and access management (IAM), detective controls (e.g., AWS CloudTrail, Amazon GuardDuty), infrastructure protection (e.g., AWS WAF, security groups), data protection (e.g., encryption at rest and in transit), and incident response. This pillar directly aligns with the question's focus on delivering business value while managing security risks.

Answer

Reliability

Answer

Operational Excellence

Answer

Performance Efficiency

Question 15

According to the AWS Shared Responsibility Model, which of the following is AWS responsible for?

Accepted Answer

Physical security of data center facilities. AWS is responsible for the physical security of data center facilities, including access controls, surveillance, and environmental systems. This is a foundational component of the Shared Responsibility Model, where AWS secures the infrastructure that runs all AWS services, while the customer secures their data and configurations within those services.

Answer

Encrypting customer data stored in Amazon S3

Answer

Configuring security groups for EC2 instances

Answer

Managing IAM user access policies