CLF-C02 Cloud Concepts Practice Test 15 — 15 Questions

Question 1

Which of the following is NOT one of the five characteristics of cloud computing as defined by NIST?

Accepted Answer

Dedicated hardware allocation per customer. The five essential characteristics of cloud computing as defined by NIST SP 800-145 are on-demand self-service, broad network access, resource pooling, rapid elasticity, and measured service. Dedicated hardware allocation per customer is not a characteristic; instead, cloud computing relies on resource pooling where physical and virtual resources are dynamically assigned and reassigned according to consumer demand, often with multi-tenant models.

Answer

On-demand self-service

Answer

Resource pooling

Answer

Measured service

Question 2

A company's architecture team is evaluating their multi-tier application against the AWS Well-Architected Framework. They discover that their database has no backup and recovery procedure. Which pillar does this finding fall under?

Accepted Answer

Reliability. The Reliability pillar of the AWS Well-Architected Framework focuses on ensuring that workloads can recover from infrastructure or service disruptions, acquire computing resources to meet demand, and mitigate transient or persistent failures. A database without a backup and recovery procedure directly violates the 'Backup and Restore' design principle, which is a core component of reliability because it ensures data durability and the ability to restore operations after a failure. Without backups, any data corruption or loss event would result in permanent data loss, making the system unreliable.

Answer

Security

Answer

Operational Excellence

Answer

Cost Optimization

Question 3

A company is migrating to AWS and wants to understand the different types of cloud service models. Which model describes a service where the provider manages everything including the application, and the customer only manages their data and user access?

Accepted Answer

Software as a Service (SaaS). In the Software as a Service (SaaS) model, the cloud provider manages the entire application stack, including infrastructure, platform, and application software. The customer is responsible only for their data and user access, typically through a web browser or API. This aligns with the description where the provider manages everything including the application.

Answer

Infrastructure as a Service (IaaS)

Answer

Platform as a Service (PaaS)

Answer

Function as a Service (FaaS)

Question 4

A company has a hybrid cloud environment with both on-premises servers and AWS. They want a consistent management experience across both environments. Which AWS service extends the same AWS Systems Manager capabilities to non-AWS servers?

Accepted Answer

AWS Systems Manager with hybrid activations. AWS Systems Manager with hybrid activations allows you to manage on-premises servers and other non-AWS compute resources using the same Systems Manager capabilities (e.g., Run Command, Patch Manager, Inventory) as you use for EC2 instances. By installing the SSM Agent on the non-AWS server and registering it via a hybrid activation, the server appears as a managed instance in Systems Manager, providing a consistent management plane across hybrid environments.

Answer

AWS Outposts

Answer

AWS Direct Connect

Answer

Amazon EC2 Systems Manager

Question 5

Which AWS concept describes the practice of tracking and managing costs using software engineering principles — such as tagging, automation, and real-time visibility — to enable engineers and teams to make cost-aware decisions?

Accepted Answer

Cloud Financial Management (FinOps). Cloud Financial Management (FinOps) is the correct answer because it specifically refers to the practice of applying software engineering principles—such as tagging resources, automating cost controls, and providing real-time cost visibility—to manage cloud spending. This enables engineers and teams to make cost-aware decisions during development and operations, aligning with the question's description.

Answer

Total Cost of Ownership (TCO)

Answer

Reserved Instance optimization

Answer

Cost Avoidance

Question 6

A company is calculating the Total Cost of Ownership (TCO) for migrating to AWS vs. staying on-premises. Which costs are typically REDUCED when migrating to AWS?

Accepted Answer

Physical hardware, data center facilities, and infrastructure management costs. Migrating to AWS shifts capital expenditures (CapEx) like physical servers, storage, and networking hardware to operational expenditures (OpEx) because AWS owns and maintains the infrastructure. This eliminates costs for data center facilities (power, cooling, real estate) and reduces the operational burden of infrastructure management (patching, racking, hardware failures). Thus, option B correctly identifies the primary cost categories that decrease.

Answer

Software licensing costs always decrease when moving to AWS

Answer

Developer salaries and application development costs

Answer

Data transfer costs are eliminated in the cloud

Question 7

What is the primary purpose of an AWS Virtual Private Cloud (VPC)?

Accepted Answer

To create a logically isolated virtual network in the AWS Cloud. The primary purpose of an AWS Virtual Private Cloud (VPC) is to create a logically isolated virtual network within the AWS Cloud, where you can launch AWS resources in a defined virtual network that closely resembles a traditional on-premises network. This isolation is achieved through IP address ranges (CIDR blocks), subnets, route tables, and network gateways, giving you full control over your virtual networking environment, including selection of your own IP address range, creation of subnets, and configuration of route tables and network gateways.

Answer

To provide a CDN for distributing content globally

Answer

To manage user authentication and access control

Answer

To monitor AWS resource usage and performance metrics

Question 8

A company is assessing their on-premises environment before migrating to AWS. Which AWS service helps discover on-premises servers, profile their utilization, and create a business case for cloud migration?

Accepted Answer

AWS Application Discovery Service. AWS Application Discovery Service is designed to gather information about on-premises data centers, including server specifications, utilization metrics, and network dependencies. It provides this data to help build a detailed business case for migration, including cost projections and migration planning. This directly matches the requirement to discover servers, profile utilization, and create a business case.

Answer

AWS Migration Hub

Answer

AWS Database Migration Service

Answer

AWS Server Migration Service

Question 9

A company's application has components that tightly depend on each other, making it difficult to scale individual components or update one without affecting others. The architects want to refactor to a more resilient architecture. What AWS design principle addresses this?

Accepted Answer

Implement loose coupling through asynchronous messaging between components. Loose coupling through asynchronous messaging (e.g., using Amazon SQS or Amazon SNS) decouples components so that they can scale independently and updates can be made to one component without affecting others. This directly addresses the tight dependency described in the question, where scaling or updating one component impacts the entire application. By introducing message queues or pub/sub patterns, components communicate indirectly, improving resilience and fault isolation.

Answer

Design for failure by adding redundant instances

Answer

Use larger instance types to handle all components on fewer servers

Answer

Enable AWS Auto Scaling to handle traffic variability

Question 10

Which statement best describes 'high availability' in the context of AWS cloud architecture?

Accepted Answer

A design that minimizes downtime by eliminating single points of failure and enabling automatic recovery. High availability in AWS is achieved by designing architectures that eliminate single points of failure and enable automatic recovery, typically using services like Elastic Load Balancing (ELB) to distribute traffic across multiple Availability Zones (AZs) and Auto Scaling to replace failed instances. This ensures that if one component fails, another takes over seamlessly, minimizing downtime. Option B correctly captures this core principle of fault tolerance and automated failover.

Answer

The ability to handle any amount of traffic by adding more resources

Answer

Using the largest available instance types for maximum performance

Answer

Storing multiple copies of data in Amazon S3

Question 11

A startup is evaluating cloud vs. on-premises for their new product. Which cloud characteristic means they can experiment with 10 servers for a week, then scale to 1,000 servers for a product launch, and back to 10 afterward — paying only for what they use?

Accepted Answer

Elasticity and pay-as-you-go pricing. Elasticity is the cloud characteristic that allows resources to automatically scale up or down based on demand, while pay-as-you-go pricing ensures you only incur costs for resources actually consumed. In this scenario, the startup can provision 10 servers for a week, scale to 1,000 servers for a launch, and then scale back to 10 — paying only for the compute hours used during each period. This combination of rapid scaling and consumption-based billing is unique to cloud computing and directly supports the described experimental and production workloads.

Answer

Durability

Answer

Multi-tenancy

Answer

Service Level Agreement (SLA)

Question 12

A company architect is reviewing their architecture for the Operational Excellence pillar of the Well-Architected Framework. Which practice is a core recommendation of this pillar?

Accepted Answer

Perform operations as code using infrastructure-as-code and automated runbooks. The Operational Excellence pillar focuses on running and monitoring systems to deliver business value and continually improve supporting processes and procedures. Performing operations as code—using infrastructure-as-code (e.g., AWS CloudFormation, AWS CDK) and automated runbooks (e.g., AWS Systems Manager Automation)—is a core recommendation because it enables consistent, repeatable, and auditable operations, reducing human error and enabling rapid recovery.

Answer

Encrypt all data at rest using AWS KMS

Answer

Use Reserved Instances to minimize cost

Answer

Deploy across multiple Availability Zones

Question 13

Which AWS concept describes the strategy of designing applications so that any individual component can fail without causing the entire system to fail?

Accepted Answer

Design for failure. B is correct because the 'design for failure' principle is a core AWS Well-Architected Framework concept that mandates building applications with no single point of failure. By distributing workloads across multiple Availability Zones and using services like Elastic Load Balancing (ELB) and Auto Scaling, a failure in one component (e.g., an EC2 instance) is isolated and automatically replaced, ensuring the system remains available. This contrasts with traditional monolithic designs where a single component failure can cascade into a full outage.

Answer

Economies of scale

Answer

Managed services adoption

Answer

Infrastructure as code

Question 14

A company is migrating a large enterprise workload to AWS. They want to understand all the migration strategies available. Which framework categorizes cloud migration strategies as the '7 Rs'?

Accepted Answer

AWS Migration Strategy 7 Rs. The '7 Rs' (Retire, Retain, Rehost, Replatform, Repurchase, Refactor, Relocate) is a specific set of migration strategies defined by AWS to categorize how workloads can be moved to the cloud. This framework is directly referenced in AWS documentation and training as the 'AWS Migration Strategy 7 Rs' and is the standard taxonomy for discussing migration approaches.

Answer

AWS Well-Architected Framework pillars

Answer

AWS Cloud Adoption Framework perspectives

Answer

AWS Service Control Policy levels

Question 15

Under the AWS Shared Responsibility Model, what is AWS responsible for when a customer uses AWS Lambda?

Accepted Answer

Managing the underlying OS, runtime, and execution environment. AWS Lambda is a serverless compute service where AWS manages the underlying infrastructure, including the operating system, runtime environment, and execution environment. Under the Shared Responsibility Model, AWS is responsible for the security of the cloud, which for Lambda includes patching the runtime, managing the hypervisor, and ensuring the execution environment is isolated between customers. The customer is only responsible for the code and configuration they provide.

Answer

Writing the Lambda function code

Answer

Configuring IAM roles and permissions for Lambda functions

Answer

Encrypting the data processed by the function