Free AWS CLF-C02 Practice Questions & Answers 2026 Part2

Question #1

Which AWS Cloud benefit is shown by an architecture’s ability to withstand failures with minimal downtime?

A. Agility

B. Elasticity

C. Scalability

D. High availability

View answer

Correct Answer: D

Question #2

A user wants to invoke an AWS Lambda function when an Amazon EC2 instance enters the "stopping" state.Which AWS service is appropriate for this use case?

A. Amazon EventBridge

B. AWS Config

C. Amazon Simple Notification Service (Amazon SNS)

D. AWS CloudFormation

View answer

Correct Answer: A

Question #3

To reduce costs, a company is planning to migrate a NoSQL database to AWS.Which AWS service is fully managed and can automatically scale throughput capacity to meet database workload demands?

A. Amazon Redshift

B. Amazon Aurora

C. Amazon DynamoDB

D. Amazon RDS

View answer

Correct Answer: C

Question #4

A company is using a central data platform to manage multiple types of data for its customers. The company wants to use AWS services to discover, transform, and visualize the data.Which combination of AWS services should the company use to meet these requirements? (Choose two.)

A. AWS Glue

B. Amazon Elastic File System (Amazon EFS)

C. Amazon Redshift

D. Amazon QuickSight

E. Amazon Quantum Ledger Database (Amazon QLDB)

View answer

Correct Answer: AD

Question #5

A company wants to protect its AWS Cloud information, systems, and assets while performing risk assessment and mitigation tasks.Which pillar of the AWS Well-Architected Framework is supported by these goals?

A. Reliability

B. Security

C. Operational excellence

D. Performance efficiency

View answer

Correct Answer: B

Question #6

Which of the following is a fully managed MySQL-compatible database?

A. Amazon S3

B. Amazon DynamoDB

C. Amazon Redshift

D. Amazon Aurora

View answer

Correct Answer: D

Question #7

A user needs programmatic access to AWS resources through the AWS CLI or the AWS API.Which option will provide the user with the appropriate access?

A. Amazon Inspector

B. Access keys

C. SSH public keys

D. AWS Key Management Service (AWS KMS) keys

View answer

Correct Answer: B

Question #8

Which AWS service enables companies to deploy an application close to end users?

A. Amazon CloudFront

B. AWS Auto Scaling

C. AWS AppSync

D. Amazon Route 53

View answer

Correct Answer: A

Question #9

A company wants to monitor for misconfigured security groups that are allowing unrestricted access to specific ports.Which AWS service will meet this requirement?

A. AWS Trusted Advisor

B. Amazon CloudWatch

C. Amazon GuardDuty

D. AWS Health Dashboard

View answer

Correct Answer: A

Question #10

Which of the following are advantages of the AWS Cloud? (Choose two.)

A. Trade variable expenses for capital expenses

B. High economies of scale

C. Launch globally in minutes

D. Focus on managing hardware infrastructure

E. Overprovision to ensure capacity

View answer

Correct Answer: BC

Question #11

Which AWS service gives users the ability to discover and protect sensitive data that is stored in Amazon S3 buckets?

A. Amazon Macie

B. Amazon Detective

C. Amazon GuardDuty

D. AWS IAM Access Analyzer

View answer

Correct Answer: A

Question #12

A cloud practitioner needs to obtain AWS compliance reports before migrating an environment to the AWS Cloud.How can these reports be generated?

A. Contact the AWS Compliance team

B. Download the reports from AWS Artifact

C. Open a case with AWS Support

D. Generate the reports with Amazon Macie

View answer

Correct Answer: B

Question #13

Which AWS service is a hybrid cloud storage service that provides on-premises users access to virtually unlimited cloud storage?

A. AWS DataSync

B. Amazon S3 Glacier

C. AWS Storage Gateway

D. Amazon Elastic Block Store (Amazon EBS)

View answer

Correct Answer: C

Question #14

A company wants to migrate its on-premises relational databases to the AWS Cloud. The company wants to use infrastructure as close to its current geographical location as possible.Which AWS service or resource should the company use to select its Amazon RDS deployment area?

A. Amazon Connect

B. AWS Wavelength

C. AWS Regions

D. AWS Direct Connect

View answer

Correct Answer: C

Question #15

What is a customer responsibility when using AWS Lambda according to the AWS shared responsibility model?

A. Managing the code within the Lambda function

B. Confirming that the hardware is working in the data center

C. Patching the operating system

D. Shutting down Lambda functions when they are no longer in use

View answer

Correct Answer: A

Question #16

Elasticity in the AWS Cloud refers to which of the following? (Choose two.)

A. How quickly an Amazon EC2 instance can be restarted

B. The ability to rightsize resources as demand shifts

C. The maximum amount of RAM an Amazon EC2 instance can use

D. The pay-as-you-go billing model

E. How easily resources can be procured when they are needed

View answer

Correct Answer: BE

Question #17

Which AWS service provides highly durable object storage?

A. Amazon S3

B. Amazon Elastic File System (Amazon EFS)

C. Amazon Elastic Block Store (Amazon EBS)

D. Amazon FSx

View answer

Correct Answer: A

Question #18

A company wants to centrally manage security policies and billing services within a multi - account AWS environment. Which AWS service should the company use to meet these requirements?

A. AWS Identity and Access Management (IAM)

B. AWS Organizations

C. AWS Resource Access Manager (AWS RAM)

D. AWS Config

View answer

Correct Answer: B

Question #19

A company is exploring the use of the AWS Cloud, and needs to create a cost estimate for a project before the infrastructure is provisioned.Which AWS service or feature can be used to estimate costs before deployment?

A. AWS Free Tier

B. AWS Pricing Calculator

C. AWS Billing and Cost Management

D. AWS Cost and Usage Report

View answer

Correct Answer: B

Question #20

A company wants to assess its operational readiness. It also wants to identify and mitigate any operational risks ahead of a new product launch.Which AWS Support plan offers guidance and support for this kind of event at no additional charge?

A. AWS Business Support

B. AWS Basic Support

C. AWS Developer Support

D. AWS Enterprise Support

View answer

Correct Answer: D

Question #21

A company wants to establish a schedule for rotating database user credentials.Which AWS service will support this requirement with the LEAST amount of operational overhead?

A. AWS Systems Manager

B. AWS Secrets Manager

C. AWS License Manager

D. AWS Managed Services

View answer

Correct Answer: B

Question #22

An e-learning platform needs to run an application for 2 months each year. The application will be deployed on Amazon EC2 instances. Any application downtime during those 2 months must be avoided.Which EC2 purchasing option will meet these requirements MOST cost-effectively?

A. Reserved Instances

B. Dedicated Hosts

C. Spot Instances

D. On-Demand Instances

View answer

Correct Answer: D

Question #23

A company wants to manage its AWS Cloud resources through a web interface.Which AWS service will meet this requirement?

A. AWS Management Console

B. AWS CLI

C. AWS SDK

D. AWS Cloud9

View answer

Correct Answer: A

Question #24

A company is exploring the use of the AWS Cloud, and needs to create a cost estimate for a project before the infrastructure is provisioned.Which AWS service or feature can be used to estimate costs before deployment?

A. AWS Free Tier

B. AWS Pricing Calculator

C. AWS Billing and Cost Management

D. AWS Cost and Usage Report

View answer

Correct Answer: B

Question #25

A company has 5 TB of data stored in Amazon S3. The company plans to occasionally run queries on the data for analysis.Which AWS service should the company use to run these queries in the MOST cost-effective manner?

A. Amazon Redshift

B. Amazon Athena

C. Amazon Kinesis

D. Amazon RDS

View answer

Correct Answer: B

Question #26

A company is setting up AWS Identity and Access Management (IAM) on an AWS account.Which recommendation complies with IAM security best practices?

A. Use the account root user access keys for administrative tasks

B. Grant broad permissions so that all company employees can access the resources they need

C. Turn on multi-factor authentication (MFA) for added security during the login process

D. Avoid rotating credentials to prevent issues in production applications

View answer

Correct Answer: C

Question #27

Which AWS service provides command line access to AWS tools and resources directly from a web browser?

A. AWS CloudHSM

B. AWS CloudShell

C. Amazon WorkSpaces

D. AWS Cloud Map

View answer

Correct Answer: B

Question #28

Which AWS service can be used at no additional cost?

A. Amazon SageMaker

B. AWS Config

C. AWS Organizations

D. Amazon CloudWatch

View answer

Correct Answer: C

Question #29

Which of the following are pillars of the AWS Well-Architected Framework? (Choose two.)

A. Availability

B. Reliability

C. Scalability

D. Responsive design

E. Operational excellence

View answer

Correct Answer: BE

Question #30

A user wants to review all Amazon S3 buckets with ACLs and S3 bucket policies in the S3 console.Which AWS service or resource will meet this requirement?

A. S3 Multi-Region Access Points

B. S3 Storage Lens

C. AWS IAM Identity Center (AWS Single Sign-On)

D. Access Analyzer for S3

View answer

Correct Answer: D

Question #31

Which AWS service or tool helps users visualize, understand, and manage spending and usage over time?

A. AWS Organizations

B. AWS Pricing Calculator

C. AWS Cost Explorer

D. AWS Service Catalog

View answer

Correct Answer: C

Question #32

When running applications in the AWS Cloud, which common tasks can AWS manage on behalf of their customers?(Select TWO.)

A. Taking a backup of a database

B. Patching database software

C. Application source code auditing

D. Application security testing

E. Creating a database schema

View answer

Correct Answer: ab

Question #33

What is a customer responsibility when using AWS Lambda according to the AWS shared responsibility model?

A. Managing the code within the Lambda function

B. Confirming that the hardware is working in the data center

C. Patching the operating system

D. Shutting down Lambda functions when they are no longer in use

View answer

Correct Answer: A

Question #34

A cloud practitioner needs to obtain AWS compliance reports before migrating an environment to the AWS Cloud.How can these reports be generated?

A. ontact the AWS Compliance team

B. ownload the reports from AWS Artifact

C. pen a case with AWS Support

D. enerate the reports with Amazon Macie

View answer

Correct Answer: B

Question #35

A company is building an application that needs to deliver images and videos globally with minimal latency.Which approach can the company use to accomplish this in a cost effective manner?

A. Deliver the content through Amazon CloudFront

B. Store the content on Amazon S3 and enable S3 cross-region replication

C. Implement a VPN across multiple AWS Regions

D. Deliver the content through AWS PrivateLink

View answer

Correct Answer: A

Question #36

Which of the following is a fully managed MySQL-compatible database?

A. Amazon S3

B. Amazon DynamoDB

C. Amazon Redshift

D. Amazon Aurora

View answer

Correct Answer: D

Question #37

Which AWS service or tool helps users visualize, understand, and manage spending and usage over time?

A. AWS Organizations

B. AWS Pricing Calculator

C. AWS Cost Explorer

D. AWS Service Catalog

View answer

Correct Answer: C

Question #38

Which AWS service or feature can be used to create a private connection between an on-premises workload and an AWS Cloud workload?

A. Amazon Route 53

B. Amazon Macie

C. AWS Direct Connect

D. AWS PrivateLink

View answer

Correct Answer: C

Question #39

Which AWS service is a cloud security posture management (CSPM) service that aggregates alerts from various AWS services and partner products in a standardized format?

A. AWS Security Hub

B. AWS Trusted Advisor

C. Amazon EventBridge

D. Amazon GuardDuty

View answer

Correct Answer: A

Question #40

A company wants to provide managed Windows virtual desktops and applications to its remote employees over secure network connections.Which AWS services can the company use to meet these requirements? (Choose two.)

A. Amazon Connect

B. Amazon AppStream 2

C. Amazon WorkSpaces

D. AWS Site-to-Site VPN

E. Amazon Elastic Container Service (Amazon ECS)

View answer

Correct Answer: BC

Question #41

What does the concept of agility mean in AWS Cloud computing? (Choose two.)

A. The speed at which AWS resources are implemented

B. The speed at which AWS creates new AWS Regions

C. The ability to experiment quickly

D. The elimination of wasted capacity

E. The low cost of entry into cloud computing

View answer

Correct Answer: AC

Question #42

A company has an AWS account. The company wants to audit its password and access key rotation details for compliance purposes.Which AWS service or tool will meet this requirement?

A. IAM Access Analyzer

B. AWS Artifact

C. IAM credential report

D. AWS Audit Manager

View answer

Correct Answer: C

Question #43

A company that has multiple business units wants to centrally manage and govern its AWS Cloud environments. The company wants to automate the creation of AWS accounts, apply service control policies (SCPs), and simplify billing processes. Which AWS service or tool should the company use to meet these requirements?

A. AWS Organizations

B. Cost Explorer

C. AWS Budgets

D. AWS Trusted Advisor

View answer

Correct Answer: A

Question #44

A company wants to run a NoSQL database on Amazon EC2 instances.Which task is the responsibility of AWS in this scenario?

A. Update the guest operating system of the EC2 instances

B. Maintain high availability at the database layer

C. Patch the physical infrastructure that hosts the EC2 instances

D. Configure the security group firewall

View answer

Correct Answer: C

Question #45

A company is using Amazon DynamoDB.Which task is the company’s responsibility, according to the AWS shared responsibility model?

A. Patch the operating system

B. Provision hosts

C. Manage database access permissions

D. Secure the operating system

View answer

Correct Answer: C

Question #46

Which AWS service supports a hybrid architecture that gives users the ability to extend AWS infrastructure, AWS services, APIs, and tools to data centers, co-location environments, or on-premises facilities?

A. AWS Snowmobile

B. AWS Local Zones

C. AWS Outposts

D. AWS Fargate

View answer

Correct Answer: C

Question #47

Which tasks are customer responsibilities, according to the AWS shared responsibility model? (Choose two.)

A. Configure the AWS provided security group firewall

B. Classify company assets in the AWS Cloud

C. Determine which Availability Zones to use for Amazon S3 buckets

D. Patch or upgrade Amazon DynamoDB

E. Select Amazon EC2 instances to run AWS Lambda on

View answer

Correct Answer: AB

Question #48

Which AWS service or feature is used to send both text and email messages from distributed applications?

A. Amazon Simple Notification Service (Amazon SNS)

B. Amazon Simple Email Service (Amazon SES)

C. Amazon CloudWatch alerts

D. Amazon Simple Queue Service (Amazon SQS)

View answer

Correct Answer: A

Question #49

A company wants a list of all users in its AWS account, the status of all of the users' access keys, and if multi- factor authentication (MFA) has been configured.Which AWS service or feature will meet these requirements?

A. AM Access Analyzer

B. mazon CloudWatch

C. AM credential report

D. WS Key Management Service (AWS KMS)

View answer

Correct Answer: C

Question #50

Which statement describes a characteristic of the AWS global infrastructure?

A. Edge locations contain multiple AWS Regions

B. AWS Regions contain multiple Regional edge caches

C. Availability Zones contain multiple data centers

D. Each data center contains multiple edge locations

View answer

Correct Answer: C

Question #51

Which of the following services can be used to block network traffic to an instance? (Choose two.)

A. Security groups

B. Amazon Virtual Private Cloud (Amazon VPC) flow logs

C. Network ACLs

D. Amazon CloudWatch

E. AWS CloudTrail

View answer

Correct Answer: AC

Question #52

A company wants to establish a schedule for rotating database user credentials.Which AWS service will support this requirement with the LEAST amount of operational overhead?

A. AWS Systems Manager

B. AWS Secrets Manager

C. AWS License Manager

D. AWS Managed Services

View answer

Correct Answer: B

Question #53

Which AWS service or feature improves network performance by sending traffic through the AWS worldwide network infrastructure?

A. Route table

B. AWS Transit Gateway

C. AWS Global Accelerator

D. Amazon VPC

View answer

Correct Answer: C

Question #54

Which AWS service enables companies to deploy an application close to end users?

A. Amazon CloudFront

B. AWS Auto Scaling

C. AWS AppSync

D. Amazon Route 53

View answer

Correct Answer: A

Question #55

Which AWS service gives users the ability to discover and protect sensitive data that is stored in Amazon S3 buckets?

A. Amazon Macie

B. Amazon Detective

C. Amazon GuardDuty

D. AWS IAM Access Analyzer

View answer

Correct Answer: A

Question #56

What advantages does a database administrator obtain by using the Amazon Relational Database Service (RDS)?

A. RDS enables users to dynamically adjust CPU and RAM resources

B. RDS databases automatically scale based on load

C. RDS provides 99

D. RDS simplifies relational database administration tasks

View answer

Correct Answer: d

Question #57

What are the benefits of consolidated billing for AWS Cloud services? (Choose two.)

A. Volume discounts

B. A minimal additional fee for use

C. One bill for multiple accounts

D. Installment payment options

E. Custom cost and usage budget creation

View answer

Correct Answer: AC

Question #58

Which AWS service or resource provides answers to the most frequently asked security-related questions that AWS receives from its users?

A. AWS Artifact

B. Amazon Connect

C. AWS Chatbot

D. AWS Knowledge Center

View answer

Correct Answer: D

Question #59

Which of the following is a fully managed MySQL-compatible database?

A. Amazon S3

B. Amazon DynamoDB

C. Amazon Redshift

D. Amazon Aurora

View answer

Correct Answer: D

Question #60

A company wants to manage deployed IT services and govern its infrastructure as code (IaC) templates.Which AWS service will meet this requirement?

A. AWS Resource Explorer

B. AWS Service Catalog

C. AWS Organizations

D. AWS Systems Manager

View answer

Correct Answer: B

Question #61

To reduce costs, a company is planning to migrate a NoSQL database to AWS.Which AWS service is fully managed and can automatically scale throughput capacity to meet database workload demands?

A. Amazon Redshift

B. Amazon Aurora

C. Amazon DynamoDB

D. Amazon RDS

View answer

Correct Answer: C

Question #62

A company wants to establish a schedule for rotating database user credentials.Which AWS service will support this requirement with the LEAST amount of operational overhead?

A. AWS Systems Manager

B. AWS Secrets Manager

C. AWS License Manager

D. AWS Managed Services

View answer

Correct Answer: B

Question #63

An ecommerce company has migrated its IT infrastructure from an on-premises data center to the AWS Cloud.Which cost is the company’s direct responsibility?

A. Cost of application software licenses

B. Cost of the hardware infrastructure on AWS

C. Cost of power for the AWS servers

D. Cost of physical security for the AWS data center

View answer

Correct Answer: A

Question #64

Where should firewalling be accomplished in a web hosting design in AWS?

A. At the perimeter

B. At all design layers

C. At the core

D. For all access layer functions

View answer

Correct Answer: b

Question #65

A developer wants to deploy an application quickly on AWS without manually creating the required resources.Which AWS service will meet these requirements?

A. Amazon EC2

B. AWS Elastic Beanstalk

C. AWS CodeBuild

D. Amazon Personalize

View answer

Correct Answer: B

Question #66

An online gaming company needs to choose a purchasing option to run its Amazon EC2 instances for 1 year. The web traffic is consistent, and any increases in traffic are predictable. The EC2 instances must be online and available without any disruption.Which EC2 instance purchasing option will meet these requirements MOST cost-effectively?

A. On-Demand Instances

B. Reserved Instances

C. Spot Instances

D. Spot Fleet

View answer

Correct Answer: B

Question #67

Which AWS service gives users the ability to discover and protect sensitive data that is stored in Amazon S3 buckets?

A. Amazon Macie

B. Amazon Detective

C. Amazon GuardDuty

D. AWS IAM Access Analyzer

View answer

Correct Answer: A

Question #68

Which AWS service can be used at no additional cost?

A. Amazon SageMaker

B. AWS Config

C. AWS Organizations

D. Amazon CloudWatch

View answer

Correct Answer: C

Question #69

Which AWS service provides the ability to manage infrastructure as code?

A. AWS CodePipeline

B. AWS CodeDeploy

C. AWS Direct Connect

D. AWS CloudFormation

View answer

Correct Answer: D

Question #70

A company is setting up AWS Identity and Access Management (IAM) on an AWS account.Which recommendation complies with IAM security best practices?

A. Use the account root user access keys for administrative tasks

B. Grant broad permissions so that all company employees can access the resources they need

C. Turn on multi-factor authentication (MFA) for added security during the login process

D. Avoid rotating credentials to prevent issues in production applications

View answer

Correct Answer: C

Question #71

Elasticity in the AWS Cloud refers to which of the following? (Choose two.)

A. ow quickly an Amazon EC2 instance can be restarted

B. he ability to rightsize resources as demand shifts

C. he maximum amount of RAM an Amazon EC2 instance can use

D. he pay-as-you-go billing model

E. ow easily resources can be procured when they are needed

View answer

Correct Answer: BE

Question #72

A company wants to protect its AWS Cloud information, systems, and assets while performing risk assessment and mitigation tasks.Which pillar of the AWS Well-Architected Framework is supported by these goals?

A. Reliability

B. Security

C. Operational excellence

D. Performance efficiency

View answer

Correct Answer: B

Question #73

A company runs thousands of simultaneous simulations using AWS Batch. Each simulation is stateless, is fault tolerant, and runs for up to 3 hours.Which pricing model enables the company to optimize costs and meet these requirements?

A. Reserved Instances

B. Spot Instances

C. On-Demand Instances

D. Dedicated Instances

View answer

Correct Answer: B

Question #74

Which of the following services can be used to block network traffic to an instance? (Choose two.)

A. Security groups

B. Amazon Virtual Private Cloud (Amazon VPC) flow logs

C. Network ACLs

D. Amazon CloudWatch

E. AWS CloudTrail

View answer

Correct Answer: AC

Question #75

A company has deployed applications on Amazon EC2 instances. The company needs to assess application vulnerabilities and must identify infrastructure deployments that do not meet best practices.Which AWS service can the company use to meet these requirements?

A. AWS Trusted Advisor

B. Amazon Inspector

C. AWS Config

D. Amazon GuardDuty

View answer

Correct Answer: B

Question #76

Which of the following are benefits of using AWS Trusted Advisor? (Choose two.)

A. Providing high-performance container orchestration

B. Creating and rotating encryption keys

C. Detecting underutilized resources to save costs

D. Improving security by proactively monitoring the AWS environment

E. Implementing enforced tagging across AWS resources

View answer

Correct Answer: CD

Question #77

A company is building an application that needs to deliver images and videos globally with minimal latency.Which approach can the company use to accomplish this in a cost effective manner?

A. eliver the content through Amazon CloudFront

B. tore the content on Amazon S3 and enable S3 cross-region replication

C. eliver the content through AWS PrivateLink

D. mplement a VPN across multiple AWS Regions

View answer

Correct Answer: A

Question #78

A company has 5 TB of data stored in Amazon S3. The company plans to occasionally run queries on the data for analysis.Which AWS service should the company use to run these queries in the MOST cost-effective manner?

A. mazon Redshift

B. mazon Athena

C. mazon Kinesis

D. mazon RDS

View answer

Correct Answer: B

Question #79

A user needs programmatic access to AWS resources through the AWS CLI or the AWS API.Which option will provide the user with the appropriate access?

A. Amazon Inspector

B. Access keys

C. SSH public keys

D. AWS Key Management Service (AWS KMS) keys

View answer

Correct Answer: B

Question #80

A company wants to run a graph query that provides credit card users' names, addresses, and transactions. The company wants the graph to show if the names, addresses, and transactions indicates possible fraud.Which AWS database service will meet these requirements?

A. Amazon DocumenlDB (with MongoDB compatibility)

B. Amazon Timestream

C. Amazon DynamoDB

D. Amazon Neptune

View answer

Correct Answer: D

Question #81

Which of the following is an advantage that users experience when they move on-premises workloads to the AWS Cloud?

A. Elimination of expenses for running and maintaining data centers

B. Price discounts that are identical to discounts from hardware providers

C. Distribution of all operational controls to AWS

D. Elimination of operational expenses

View answer

Correct Answer: A

Question #82

A user wants to review all Amazon S3 buckets with ACLs and S3 bucket policies in the S3 console.Which AWS service or resource will meet this requirement?

A. S3 Multi-Region Access Points

B. S3 Storage Lens

C. AWS IAM Identity Center (AWS Single Sign-On)

D. Access Analyzer for S3

View answer

Correct Answer: D

Question #83

A company wants to control the protection of its AWS resources. The company wants to block SQL injection attacks and cross-site scripting. Which AWS service or feature meets these requirements?

A. Amazon GuardDuty

B. AWSWAF

C. Security groups

D. AWS Shield

View answer

Correct Answer: B

Question #84

Which of the following is a software development framework that a company can use to define cloud resources as code and provision the resources through AWS CloudFormation?

A. AWS CLI

B. AWS Developer Center

C. AWS Cloud Development Kit (AWS CDK)

D. AWS CodeStar

View answer

Correct Answer: C

Question #85

What is a customer responsibility when using AWS Lambda according to the AWS shared responsibility model?

A. Managing the code within the Lambda function

B. Confirming that the hardware is working in the data center

C. Patching the operating system

D. Shutting down Lambda functions when they are no longer in use

View answer

Correct Answer: A

Question #86

A company plans to use an Amazon Snowball Edge device to transfer files to the AWS Cloud.Which activities related to a Snowball Edge device are available to the company at no cost?

A. Use of the Snowball Edge appliance for a 10-day period

B. The transfer of data out of Amazon S3 and to the Snowball Edge appliance

C. The transfer of data from the Snowball Edge appliance into Amazon S3

D. Daily use of the Snowball Edge appliance after 10 days

View answer

Correct Answer: A

Question #87

Which AWS service or feature improves network performance by sending traffic through the AWS worldwide network infrastructure?

A. Route table

B. AWS Transit Gateway

C. AWS Global Accelerator

D. Amazon VPC

View answer

Correct Answer: C

Question #88

Which AWS service or feature can be used to create a private connection between an on-premises workload and an AWS Cloud workload?

A. Amazon Route 53

B. Amazon Macie

C. AWS Direct Connect

D. AWS PrivateLink

View answer

Correct Answer: C

Question #89

Which of the following is an advantage that users experience when they move on-premises workloads to the AWS Cloud?

A. Elimination of expenses for running and maintaining data centers

B. Price discounts that are identical to discounts from hardware providers

C. Distribution of all operational controls to AWS

D. Elimination of operational expenses

View answer

Correct Answer: A

Question #90

A company is running a reporting web server application on Amazon EC2 instances. The application runs once every week and once again at the end of the month. The EC2 instances can be shut down when they are not in use. What is the MOST cost-effective billing model for this use case? For a reporting application that runs only periodically, On-Demand Instances are the most cost-effective choice because they allow the company to pay only for the compute capacity used, without long-term commitments. Reserved Instances are less flexible due to the need for upfront payment or long-term contracts, which would not be cost-effective given the application's intermittent usage. On-Demand Capacity Reservations would also be more costly, as they hold capacity regardless of usage.

A. Standard Reserved Instances

B. Convertible Reserved Instances

C. On-Demand Capacity Reservations

D. On-Demand Instances

View answer

Correct Answer: D

Question #91

According to security best practices, how should an Amazon EC2 instance be given access to an Amazon S3 bucket?

A. ard code an IAM user’s secret key and access key directly in the application, and upload the file

B. tore the IAM user’s secret key and access key in a text file on the EC2 instance, read the keys, then upload the file

C. ave the EC2 instance assume a role to obtain the privileges to upload the file

D. odify the S3 bucket policy so that any service can upload to it at any time

View answer

Correct Answer: C

Question #92

Which service enables customers to audit API calls in their AWS accounts?

A. AWS CloudTrail

B. AWS Trusted Advisor

C. Amazon Inspector

D. AWS X-Ray

View answer

Correct Answer: A

Question #93

When an ELB detects an unhealthy EC2 instance, which action does it perform regarding distributing incoming traffic?

A. It only sends traffic to the remaining healthy instances

B. It restarts the unhealthy EC2 instance

C. It terminates the failed instance so that it is not part of the ELB target group

D. It continues to send traffic to the failed instance

View answer

Correct Answer: a

Question #94

Which of the following are pillars of the AWS Well-Architected Framework? (Choose two.)

A. Availability

B. Reliability

C. Scalability

D. Responsive design

E. Operational excellence

View answer

Correct Answer: BE

Question #95

An e-learning platform needs to run an application for 2 months each year. The application will be deployed on Amazon EC2 instances. Any application downtime during those 2 months must be avoided.Which EC2 purchasing option will meet these requirements MOST cost-effectively?

A. Reserved Instances

B. Dedicated Hosts

C. Spot Instances

D. On-Demand Instances

View answer

Correct Answer: D

Question #96

A company is running and managing its own Docker environment on Amazon EC2 instances. The company wants an alternative to help manage cluster size, scheduling, and environment maintenance.Which AWS service meets these requirements?

A. WS Lambda

B. mazon RDS

C. WS Fargate

D. mazon Athena

View answer

Correct Answer: C

Question #97

A company wants to know more about the benefits offered by cloud computing. The company wants to understand the operational advantage of agility.How does AWS provide agility for users?

A. he ability to provision and deprovision resources quickly with minimal effort

B. he ability the ensure high availability by deploying workloads to multiple regions

C. pay-as-you-go model for many services and resources

D. he ability to transfer infrastructure management to the AWS Cloud

View answer

Correct Answer: A

Question #98

A company wants to run a NoSQL database on Amazon EC2 instances.Which task is the responsibility of AWS in this scenario?

A. Update the guest operating system of the EC2 instances

B. Maintain high availability at the database layer

C. Patch the physical infrastructure that hosts the EC2 instances

D. Configure the security group firewall

View answer

Correct Answer: C

Question #99

A company wants to provide managed Windows virtual desktops and applications to its remote employees over secure network connections.Which AWS services can the company use to meet these requirements? (Choose two.)

A. Amazon Connect

B. Amazon AppStream 2

C. Amazon WorkSpaces

D. AWS Site-to-Site VPN

E. Amazon Elastic Container Service (Amazon ECS)

View answer

Correct Answer: BC

Question #100

Which AWS service is a cloud security posture management (CSPM) service that aggregates alerts from various AWS services and partner products in a standardized format?

A. AWS Security Hub

B. AWS Trusted Advisor

C. Amazon EventBridge

D. Amazon GuardDuty

View answer

Correct Answer: A

DON'T WANT TO MISS A THING?

Latest Cisco, PMP, AWS, CompTIA, Microsoft Materials on SALE
Get Now

Free AWS CLF-C02 Practice Questions & Answers 2026 Part2

View The Updated CLF-C02 Exam Questions

View The Updated AWS Exam Questions

View Answers after Submission

DON'T WANT TO MISS A THING?

Latest Cisco, PMP, AWS, CompTIA, Microsoft Materials on SALE Get Now

Free AWS CLF-C02 Practice Questions & Answers 2026 Part2

View The Updated CLF-C02 Exam Questions

View The Updated AWS Exam Questions

View Answers after Submission

Latest Cisco, PMP, AWS, CompTIA, Microsoft Materials on SALE
Get Now