CLF-C02 sample questions with answers
The other 167 questions are in the practice tool, with answers revealed as you go.
Start 20 questionsCloud concepts
- A company launched its application on 20 large EC2 instances, but monitoring now shows that peak usage only needs about 5. Which cloud-economics practice should the company apply to fix this?
- Which statement BEST captures the difference between capital expenditure (CapEx) and operational expenditure (OpEx) in a cloud computing context?
- Which of the following is an example of a cloud-transformation result described by the AWS Cloud Adoption Framework (CAF)?
- During a migration assessment, under what circumstances is the retain strategy the right choice?
- From a cloud-economics standpoint, what is a benefit of automating infrastructure deployment?
- Which statement correctly distinguishes high availability from elasticity?
- Which AWS service analyzes your existing resource configurations and utilization metrics to recommend optimal instance types for cost savings and better performance?
- A company wants to move its on-premises application to AWS with minimal changes to the existing code. Which migration strategy does this represent?
- A company runs a legacy monolithic application on-premises and wants to modernize it on AWS by breaking it into microservices, adopting managed services, and using serverless where possible. Which migration strategy describes this approach?
Security and compliance
- Which of the following is AWS's responsibility under the Shared Responsibility Model?
- A brand-new IAM user is created but no policies are attached to it. What can this user do in AWS?
- A financial services firm faces a regulatory requirement to hold cryptographic keys on dedicated single-tenant hardware security modules (HSMs). Which AWS service satisfies this?
- Which AWS service gives a company one central place to connect its workforce identities and grant employees access to multiple AWS accounts and business applications?
- Which AWS service lets customers create and control the encryption keys used by supported AWS services?
- What does identity federation allow an organization to do in AWS?
- Which statement about an AWS account password policy is correct?
- A security team wants to centralize operating-system and application logs for searching and alerting. Which service should it use?
- Under the shared responsibility model, who is responsible for classifying a customer's data and deciding who may access it?
- A company wants Amazon S3 to perform server-side encryption while the company supplies the encryption key with each object request and retains the key itself. Which option should it choose?
Cloud technology and services
- Which AWS service is a managed container orchestration platform that is compatible with Kubernetes for running, scaling, and managing containerized applications?
- An e-commerce platform sees traffic surge during holiday sales. It needs EC2 instances added automatically as demand rises and removed as demand falls. Which AWS capability provides this?
- Which EC2 instance family is optimized for memory-heavy workloads such as in-memory databases, real-time big data analytics, and high-performance caching?
- A web application runs on EC2 instances behind an Elastic Load Balancer, and during a traffic peak some instances begin failing health checks. What does the load balancer do once it marks an instance as unhealthy?
- A platform must store millions of user-uploaded images and expose each one through a URL so they can be fetched from anywhere. The storage should be highly durable and publicly retrievable over the internet. Which service fits best?
- An enterprise currently runs Windows-based file shares for its applications and wants a fully managed AWS service that supports the SMB protocol and integrates with Active Directory. Which service should they choose?
- What is the key difference between Amazon S3 Standard-Infrequent Access (S3 Standard-IA) and S3 One Zone-Infrequent Access (S3 One Zone-IA)?
- A solutions architect must let EC2 instances in a private subnet download software updates from the internet without letting the internet initiate any connection to them. Which service accomplishes this?
- A team wants to declare its entire AWS infrastructure — VPCs, EC2 instances, and RDS databases — in JSON or YAML templates and deploy the same stack consistently across environments. Which service should they use?
- A marketing team needs serverless business intelligence that builds interactive dashboards and visualizations from data in S3, Redshift, and RDS. Which service should they use?
- A company wants to run containers without managing the underlying server infrastructure. Which AWS service should they use?
Billing, pricing and support
- A company must run a legacy Windows application whose license is bound to specific physical server hardware. Which EC2 purchasing option allows them to use their own server-bound licenses legally?
- A CTO is building a business case to migrate from on-premises to AWS and needs to compare the full cost of running the same infrastructure on-premises versus in the cloud. Which concept does this comparison represent?