Free AWS CLF-C02 Practice Questions & Answers 2026 Part3

Question #1

A company is running and managing its own Docker environment on Amazon EC2 instances. The company wants an alternative to help manage cluster size, scheduling, and environment maintenance.Which AWS service meets these requirements?

A. AWS Lambda

B. Amazon RDS

C. AWS Fargate

D. Amazon Athena

View answer

Correct Answer: C

Question #2

A company is running a monolithic on-premises application that does not scale and is difficult to maintain. The company has a plan to migrate the application to AWS and divide the application into microservices.Which best practice of the AWS Well-Architected Framework is the company following with this plan?

A. Integrate functional testing as part of AWS deployment

B. Use automation to deploy changes

C. Deploy the application to multiple locations

D. Implement loosely coupled dependencies

View answer

Correct Answer: D

Question #3

A company wants to make an upfront commitment for continued use of its production Amazon EC2 instances in exchange for a reduced overall cost.Which pricing options meet these requirements with the LOWEST cost? (Choose two.)

A. Spot Instances

B. On-Demand Instances

C. Reserved Instances

D. Savings Plans

E. Dedicated Hosts

View answer

Correct Answer: CD

Question #4

A global company wants to migrate its third-party applications to the AWS Cloud. The company wants help from a global team of experts to complete the migration faster and more reliably in accordance with AWS internal best practices.Which AWS service or resource will meet these requirements?

A. AWS Support

B. AWS Professional Services

C. AWS Launch Wizard

D. AWS Managed Services (AMS)

View answer

Correct Answer: B

Question #5

Which of the following is a software development framework that a company can use to define cloud resources as code and provision the resources through AWS CloudFormation?

A. AWS CLI

B. AWS Developer Center

C. AWS Cloud Development Kit (AWS CDK)

D. AWS CodeStar

View answer

Correct Answer: C

Question #6

A company is building an application that needs to deliver images and videos globally with minimal latency.Which approach can the company use to accomplish this in a cost effective manner?

A. Deliver the content through Amazon CloudFront

B. Store the content on Amazon S3 and enable S3 cross-region replication

C. Implement a VPN across multiple AWS Regions

D. Deliver the content through AWS PrivateLink

View answer

Correct Answer: A

Question #7

A company needs to block SQL injection attacks.Which AWS service or feature can meet this requirement?

A. WS WAF

B. WS Shield

C. etwork ACLs

D. ecurity groups

View answer

Correct Answer: A

Question #8

Customers using AWS services must patch operating systems on which of the following services?

A. AWS Fargate

B. Amazon DynamoDB

C. Amazon EC2

D. AWS Lambda

View answer

Correct Answer: c

Question #9

A company has deployed applications on Amazon EC2 instances. The company needs to assess application vulnerabilities and must identify infrastructure deployments that do not meet best practices.Which AWS service can the company use to meet these requirements?

A. AWS Trusted Advisor

B. Amazon Inspector

C. AWS Config

D. Amazon GuardDuty

View answer

Correct Answer: B

Question #10

A cloud practitioner needs to obtain AWS compliance reports before migrating an environment to the AWS Cloud.How can these reports be generated?

A. Contact the AWS Compliance team

B. Download the reports from AWS Artifact

C. Open a case with AWS Support

D. Generate the reports with Amazon Macie

View answer

Correct Answer: B

Question #11

A company is developing an application that uses multiple AWS services. The application needs to use temporary, limited-privilege credentials for authentication with other AWS APIs.Which AWS service or feature should the company use to meet these authentication requirements?

A. Amazon API Gateway

B. IAM users

C. AWS Security Token Service (AWS STS)

D. IAM instance profiles

View answer

Correct Answer: C

Question #12

A company is setting up AWS Identity and Access Management (IAM) on an AWS account.Which recommendation complies with IAM security best practices?

A. Use the account root user access keys for administrative tasks

B. Grant broad permissions so that all company employees can access the resources they need

C. Turn on multi-factor authentication (MFA) for added security during the login process

D. Avoid rotating credentials to prevent issues in production applications

View answer

Correct Answer: C

Question #13

Which option is a perspective that includes foundational capabilities of the AWS Cloud Adoption Framework (AWS CAF)?

A. Sustainability

B. Performance efficiency

C. Governance

D. Reliability

View answer

Correct Answer: C

Question #14

Which AWS service or feature identifies whether an Amazon S3 bucket or an IAM role has been shared with an external entity?

A. AWS Service Catalog

B. AWS Systems Manager

C. AWS IAM Access Analyzer

D. AWS Organizations

View answer

Correct Answer: C

Question #15

Which AWS Cloud benefit is shown by an architecture’s ability to withstand failures with minimal downtime?

A. Agility

B. Elasticity

C. Scalability

D. High availability

View answer

Correct Answer: D

Question #16

Which option is a perspective that includes foundational capabilities of the AWS Cloud Adoption Framework (AWS CAF)?

A. Sustainability

B. Performance efficiency

C. Governance

D. Reliability

View answer

Correct Answer: C

Question #17

A developer needs to maintain a development environment infrastructure and a production environment infrastructure in a repeatable fashion.Which AWS service should the developer use to meet these requirements?

A. AWS Ground Station

B. AWS Shield

C. AWS IoT Device Defender

D. AWS CloudFormation

View answer

Correct Answer: D

Question #18

Which AWS services or tools can identify rightsizing opportunities for Amazon EC2 instances? (Choose two.)

A. AWS Cost Explorer

B. AWS Billing Conductor

C. Amazon CodeGuru

D. Amazon SageMaker

E. AWS Compute Optimizer

View answer

Correct Answer: AE

Question #19

Which AWS service or feature identifies whether an Amazon S3 bucket or an IAM role has been shared with an external entity?

A. AWS Service Catalog

B. AWS Systems Manager

C. AWS IAM Access Analyzer

D. AWS Organizations

View answer

Correct Answer: C

Question #20

Which AWS service helps deliver highly available applications with fast failover for multi-Region and Multi-AZ architectures?

A. AWS WAF

B. AWS Global Accelerator

C. AWS Shield

D. AWS Direct Connect

View answer

Correct Answer: B

Question #21

Which option is a perspective that includes foundational capabilities of the AWS Cloud Adoption Framework (AWS CAF)?

A. Sustainability

B. Performance efficiency

C. Governance

D. Reliability

View answer

Correct Answer: C

Question #22

A company is running and managing its own Docker environment on Amazon EC2 instances. The company wants an alternative to help manage cluster size, scheduling, and environment maintenance.Which AWS service meets these requirements?

A. AWS Lambda

B. Amazon RDS

C. AWS Fargate

D. Amazon Athena

View answer

Correct Answer: C

Question #23

Which of the following are advantages of moving to the AWS Cloud? (Choose two.)

A. The ability to turn over the responsibility for all security to AWS

B. The ability to use the pay-as-you-go model

C. The ability to have full control over the physical infrastructure

D. No longer having to guess what capacity will be required

E. No longer worrying about users access controls

View answer

Correct Answer: BD

Question #24

Which AWS service provides highly durable object storage?

A. Amazon S3

B. Amazon Elastic File System (Amazon EFS)

C. Amazon Elastic Block Store (Amazon EBS)

D. Amazon FSx

View answer

Correct Answer: A

Question #25

A company wants to make an upfront commitment for continued use of its production Amazon EC2 instances in exchange for a reduced overall cost.Which pricing options meet these requirements with the LOWEST cost? (Choose two.)

A. Spot Instances

B. On-Demand Instances

C. Reserved Instances

D. Savings Plans

E. Dedicated Hosts

View answer

Correct Answer: CD

Question #26

Which AWS service or feature is used to send both text and email messages from distributed applications?

A. Amazon Simple Notification Service (Amazon SNS)

B. Amazon Simple Email Service (Amazon SES)

C. Amazon CloudWatch alerts

D. Amazon Simple Queue Service (Amazon SQS)

View answer

Correct Answer: A

Question #27

A company is storing sensitive customer data in an Amazon S3 bucket. The company wants to protect the data from accidental deletion or overwriting.Which S3 feature should the company use to meet these requirements?

A. S3 Lifecycle rules

B. S3 Versioning

C. S3 bucket policies

D. S3 server-side encryption

View answer

Correct Answer: B

Question #28

A company has deployed applications on Amazon EC2 instances. The company needs to assess application vulnerabilities and must identify infrastructure deployments that do not meet best practices.Which AWS service can the company use to meet these requirements?

A. AWS Trusted Advisor

B. Amazon Inspector

C. AWS Config

D. Amazon GuardDuty

View answer

Correct Answer: B

Question #29

Which of the following is a fully managed MySQL-compatible database?

A. Amazon S3

B. Amazon DynamoDB

C. Amazon Redshift

D. Amazon Aurora

View answer

Correct Answer: D

Question #30

Which responsibility belongs to AWS when a company hosts its databases on Amazon EC2 instances?

A. Database backups

B. Database software patches

C. Operating system patches

D. Operating system installations

View answer

Correct Answer: D

Question #31

What is the best resource for a user to find compliance-related information and reports about AWS?

A. AWS Artifact

B. AWS Marketplace

C. Amazon Inspector

D. AWS Support

View answer

Correct Answer: A

Question #32

A company wants to manage deployed IT services and govern its infrastructure as code (IaC) templates.Which AWS service will meet this requirement?

A. AWS Resource Explorer

B. AWS Service Catalog

C. AWS Organizations

D. AWS Systems Manager

View answer

Correct Answer: B

Question #33

Which AWS service or feature identifies whether an Amazon S3 bucket or an IAM role has been shared with an external entity?

A. WS Service Catalog

B. WS Systems Manager

C. WS IAM Access Analyzer

D. WS Organizations

View answer

Correct Answer: C

Question #34

A company wants to monitor for misconfigured security groups that are allowing unrestricted access to specific ports.Which AWS service will meet this requirement?

A. AWS Trusted Advisor

B. Amazon CloudWatch

C. Amazon GuardDuty

D. AWS Health Dashboard

View answer

Correct Answer: A

Question #35

A company has deployed applications on Amazon EC2 instances. The company needs to assess application vulnerabilities and must identify infrastructure deployments that do not meet best practices.Which AWS service can the company use to meet these requirements?

A. AWS Trusted Advisor

B. Amazon Inspector

C. AWS Config

D. Amazon GuardDuty

View answer

Correct Answer: B

Question #36

Which AWS service or resource provides answers to the most frequently asked security-related questions that AWS receives from its users?

A. AWS Artifact

B. Amazon Connect

C. AWS Chatbot

D. AWS Knowledge Center

View answer

Correct Answer: D

Question #37

What is the purpose of having an internet gateway within a VPC?

A. To create a VPN connection to the VPC

B. To allow communication between the VPC and the internet

C. To impose bandwidth constraints on internet traffic

D. To load balance traffic from the internet across Amazon EC2 instances

View answer

Correct Answer: B

Question #38

A company has a centralized group of users with large file storage requirements that have exceeded the space available on premises. The company wants to extend its file storage capabilities for this group while retaining the performance benefit of sharing content locally.What is the MOST operationally efficient AWS solution for this scenario?

A. Create an Amazon S3 bucket for each user

B. Configure and deploy an AWS Storage Gateway file gateway

C. Move each user’s working environment to Amazon WorkSpaces

D. Deploy an Amazon EC2 instance and attach an Amazon Elastic Block Store (Amazon EBS) Provisioned IOPS volume

View answer

Correct Answer: B

Question #39

Which of the following services can be used to block network traffic to an instance? (Choose two.)

A. Security groups

B. Amazon Virtual Private Cloud (Amazon VPC) flow logs

C. Network ACLs

D. Amazon CloudWatch

E. AWS CloudTrail

View answer

Correct Answer: AC

Question #40

What is a customer responsibility when using AWS Lambda according to the AWS shared responsibility model?

A. anaging the code within the Lambda function

B. onfirming that the hardware is working in the data center

C. atching the operating system

D. hutting down Lambda functions when they are no longer in use

View answer

Correct Answer: A

Question #41

Which AWS service or tool does AWS Control Tower use to create resources?

A. WS Trusted Advisor

B. WS Directory Service

C. WS CloudFormation

D. WS Cost Explorer

View answer

Correct Answer: C

Question #42

An ecommerce company has migrated its IT infrastructure from an on-premises data center to the AWS Cloud.Which cost is the company’s direct responsibility?

A. Cost of application software licenses

B. Cost of the hardware infrastructure on AWS

C. Cost of power for the AWS servers

D. Cost of physical security for the AWS data center

View answer

Correct Answer: A

Question #43

A company needs to block SQL injection attacks.Which AWS service or feature can meet this requirement?

A. AWS WAF

B. AWS Shield

C. Network ACLs

D. Security groups

View answer

Correct Answer: A

Question #44

Which Amazon EC2 pricing model is the MOST cost efficient for an uninterruptible workload that runs once a year for 24 hours?

A. On-Demand Instances

B. Reserved Instances

C. Spot Instances

D. Dedicated Instances

View answer

Correct Answer: A

Question #45

A company wants to monitor for misconfigured security groups that are allowing unrestricted access to specific ports.Which AWS service will meet this requirement?

A. AWS Trusted Advisor

B. Amazon CloudWatch

C. Amazon GuardDuty

D. AWS Health Dashboard

View answer

Correct Answer: A

Question #46

Which task is the customer’s responsibility, according to the AWS shared responsibility model?

A. Maintain the security of the AWS Cloud

B. Configure firewalls and networks

C. Patch the operating system of Amazon RDS instances

D. Implement physical and environmental controls

View answer

Correct Answer: B

Question #47

Which AWS service helps deliver highly available applications with fast failover for multi-Region and Multi-AZ architectures?

A. AWS WAF

B. AWS Global Accelerator

C. AWS Shield

D. AWS Direct Connect

View answer

Correct Answer: B

Question #48

A developer wants to deploy an application quickly on AWS without manually creating the required resources.Which AWS service will meet these requirements?

A. Amazon EC2

B. AWS Elastic Beanstalk

C. AWS CodeBuild

D. Amazon Personalize

View answer

Correct Answer: B

Question #49

A company has a centralized group of users with large file storage requirements that have exceeded the space available on premises. The company wants to extend its file storage capabilities for this group while retaining the performance benefit of sharing content locally.What is the MOST operationally efficient AWS solution for this scenario?

A. Create an Amazon S3 bucket for each user

B. Configure and deploy an AWS Storage Gateway file gateway

C. Move each user’s working environment to Amazon WorkSpaces

D. Deploy an Amazon EC2 instance and attach an Amazon Elastic Block Store (Amazon EBS) Provisioned IOPS volume

View answer

Correct Answer: B

Question #50

A global company wants to migrate its third-party applications to the AWS Cloud. The company wants help from a global team of experts to complete the migration faster and more reliably in accordance with AWS internal best practices.Which AWS service or resource will meet these requirements?

A. AWS Support

B. AWS Professional Services

C. AWS Launch Wizard

D. AWS Managed Services (AMS)

View answer

Correct Answer: B

Question #51

A company is storing sensitive customer data in an Amazon S3 bucket. The company wants to protect the data from accidental deletion or overwriting.Which S3 feature should the company use to meet these requirements?

A. S3 Lifecycle rules

B. S3 Versioning

C. S3 bucket policies

D. S3 server-side encryption

View answer

Correct Answer: B

Question #52

A company has migrated its workload to the AWS Cloud. The company wants to optimize existing Amazon EC2 resources. Which AWS services or tools provide this functionality? (Choose two.)

A. AWS Elastic Beanstalk

B. AWS Cost Explorer

C. Amazon Detective

D. AWS Compute Optimizer

E. AWS Billing Conductor

View answer

Correct Answer: BD

Question #53

Which of the following is a software development framework that a company can use to define cloud resources as code and provision the resources through AWS CloudFormation?

A. AWS CLI

B. AWS Developer Center

C. AWS Cloud Development Kit (AWS CDK)

D. AWS CodeStar

View answer

Correct Answer: C

Question #54

A company needs to block SQL injection attacks.Which AWS service or feature can meet this requirement?

A. AWS WAF

B. AWS Shield

C. Network ACLs

D. Security groups

View answer

Correct Answer: A

Question #55

Which AWS service supports a hybrid architecture that gives users the ability to extend AWS infrastructure, AWS services, APIs, and tools to data centers, co-location environments, or on-premises facilities?

A. AWS Snowmobile

B. AWS Local Zones

C. AWS Outposts

D. AWS Fargate

View answer

Correct Answer: C

Question #56

A company is exploring the use of the AWS Cloud, and needs to create a cost estimate for a project before the infrastructure is provisioned.Which AWS service or feature can be used to estimate costs before deployment?

A. AWS Free Tier

B. AWS Pricing Calculator

C. AWS Billing and Cost Management

D. AWS Cost and Usage Report

View answer

Correct Answer: B

Question #57

A company needs an automated vulnerability management service that continually scans AWS workloads for software vulnerabilities.Which AWS service will meet these requirements?

A. WS Security Hub

B. mazon Inspector

C. mazon GuardDuty

D. WS Shield

View answer

Correct Answer: B

Question #58

Which AWS service or feature identifies whether an Amazon S3 bucket or an IAM role has been shared with an external entity?

A. AWS Service Catalog

B. AWS Systems Manager

C. AWS IAM Access Analyzer

D. AWS Organizations

View answer

Correct Answer: C

Question #59

What does the concept of agility mean in AWS Cloud computing? (Choose two.)

A. The speed at which AWS resources are implemented

B. The speed at which AWS creates new AWS Regions

C. The ability to experiment quickly

D. The elimination of wasted capacity

E. The low cost of entry into cloud computing

View answer

Correct Answer: AC

Question #60

A company runs a database on Amazon Aurora in the us-east-1 Region. The company has a disaster recovery requirement that the database be available in another Region.

A. Perform an Aurora Multi-AZ deployment

B. Deploy Aurora cross-Region read replicas

C. Create Amazon Elastic Block Store (Amazon EBS) volume snapshots for Aurora and copy them to another Region

D. Deploy Aurora Replicas

View answer

Correct Answer: B

Question #61

A company is developing an application that uses multiple AWS services. The application needs to use temporary, limited-privilege credentials for authentication with other AWS APIs.Which AWS service or feature should the company use to meet these authentication requirements?

A. Amazon API Gateway

B. IAM users

C. AWS Security Token Service (AWS STS)

D. IAM instance profiles

View answer

Correct Answer: C

Question #62

What is the purpose of having an internet gateway within a VPC?

A. To create a VPN connection to the VPC

B. To allow communication between the VPC and the internet

C. To impose bandwidth constraints on internet traffic

D. To load balance traffic from the internet across Amazon EC2 instances

View answer

Correct Answer: B

Question #63

A company plans to use an Amazon Snowball Edge device to transfer files to the AWS Cloud.Which activities related to a Snowball Edge device are available to the company at no cost?

A. Use of the Snowball Edge appliance for a 10-day period

B. The transfer of data out of Amazon S3 and to the Snowball Edge appliance

C. The transfer of data from the Snowball Edge appliance into Amazon S3

D. Daily use of the Snowball Edge appliance after 10 days

View answer

Correct Answer: A

Question #64

A company has a centralized group of users with large file storage requirements that have exceeded the space available on premises. The company wants to extend its file storage capabilities for this group while retaining the performance benefit of sharing content locally.What is the MOST operationally efficient AWS solution for this scenario?

A. Create an Amazon S3 bucket for each user

B. Configure and deploy an AWS Storage Gateway file gateway

C. Move each user’s working environment to Amazon WorkSpaces

D. Deploy an Amazon EC2 instance and attach an Amazon Elastic Block Store (Amazon EBS) Provisioned IOPS volume

View answer

Correct Answer: B

Question #65

A company has 5 TB of data stored in Amazon S3. The company plans to occasionally run queries on the data for analysis.Which AWS service should the company use to run these queries in the MOST cost-effective manner?

A. Amazon Redshift

B. Amazon Athena

C. Amazon Kinesis

D. Amazon RDS

View answer

Correct Answer: B

Question #66

A company is using a central data platform to manage multiple types of data for its customers. The company wants to use AWS services to discover, transform, and visualize the data.Which combination of AWS services should the company use to meet these requirements? (Choose two.)

A. AWS Glue

B. Amazon Elastic File System (Amazon EFS)

C. Amazon Redshift

D. Amazon QuickSight

E. Amazon Quantum Ledger Database (Amazon QLDB)

View answer

Correct Answer: AD

Question #67

Which AWS service can a company use to visually design and build serverless applications?

A. WS Lambda

B. WS Application Composer

C. WS App Runner

D. WS Batch

View answer

Correct Answer: B

Question #68

What are the characteristics of Availability Zones? (Select TWO.)

A. All Availability Zones in an AWS Region are interconnected with high - bandwidth, low - latency networking

B. Availability Zones are physically separated by a minimum of distance of 150 km (100 miles)

C. All traffic between Availability Zones is encrypted

D. Availability Zones within an AWS Region share redundant power, networking, and connectivity

E. Every Availability Zone contains a single data center

View answer

Correct Answer: AD

Question #69

A company plans to use an Amazon Snowball Edge device to transfer files to the AWS Cloud.Which activities related to a Snowball Edge device are available to the company at no cost?

A. Use of the Snowball Edge appliance for a 10-day period

B. The transfer of data out of Amazon S3 and to the Snowball Edge appliance

C. The transfer of data from the Snowball Edge appliance into Amazon S3

D. Daily use of the Snowball Edge appliance after 10 days

View answer

Correct Answer: A

Question #70

A company has a set of ecommerce applications. The applications need to be able to send messages to each other.Which AWS service meets this requirement?

A. AWS Auto Scaling

B. Elastic Load Balancing

C. Amazon Simple Queue Service (Amazon SQS)

D. Amazon Kinesis Data Streams

View answer

Correct Answer: C

Question #71

A company plans to use an Amazon Snowball Edge device to transfer files to the AWS Cloud.Which activities related to a Snowball Edge device are available to the company at no cost?

A. Use of the Snowball Edge appliance for a 10-day period

B. The transfer of data out of Amazon S3 and to the Snowball Edge appliance

C. The transfer of data from the Snowball Edge appliance into Amazon S3

D. Daily use of the Snowball Edge appliance after 10 days

View answer

Correct Answer: C

Question #72

A company wants to run a NoSQL database on Amazon EC2 instances.Which task is the responsibility of AWS in this scenario?

A. Update the guest operating system of the EC2 instances

B. Maintain high availability at the database layer

C. Patch the physical infrastructure that hosts the EC2 instances

D. Configure the security group firewall

View answer

Correct Answer: C

Question #73

Which of the following are advantages of the AWS Cloud? (Choose two.)

A. Trade variable expenses for capital expenses

B. High economies of scale

C. Launch globally in minutes

D. Focus on managing hardware infrastructure

E. Overprovision to ensure capacity

View answer

Correct Answer: BC

Question #74

Which of the following are advantages of moving to the AWS Cloud? (Choose two.)

A. The ability to turn over the responsibility for all security to AWS

B. The ability to use the pay-as-you-go model

C. The ability to have full control over the physical infrastructure

D. No longer having to guess what capacity will be required

E. No longer worrying about users access controls

View answer

Correct Answer: BD

Question #75

A company is running and managing its own Docker environment on Amazon EC2 instances. The company wants an alternative to help manage cluster size, scheduling, and environment maintenance.Which AWS service meets these requirements?

A. AWS Lambda

B. Amazon RDS

C. AWS Fargate

D. Amazon Athena

View answer

Correct Answer: C

Question #76

Which AWS service provides highly durable object storage?

A. Amazon S3

B. Amazon Elastic File System (Amazon EFS)

C. Amazon Elastic Block Store (Amazon EBS)

D. Amazon FSx

View answer

Correct Answer: A

Question #77

A company needs to block SQL injection attacks.Which AWS service or feature can meet this requirement?

A. AWS WAF

B. AWS Shield

C. Network ACLs

D. Security groups

View answer

Correct Answer: A

Question #78

Which AWS services or features provide disaster recovery solutions for Amazon EC2 instances? (Choose two.)

A. EC2 Reserved Instances

B. EC2 Amazon Machine Images (AMIs)

C. Amazon Elastic Block Store (Amazon EBS) snapshots

D. AWS Shield

E. Amazon GuardDuty

View answer

Correct Answer: BC

Question #79

Which AWS Well - Architected Framework concept represents a system's ability to remain functional when the system encounters operational problems?

A. Consistency

B. Elasticity

C. Durability

D. Latency

View answer

Correct Answer: B

Question #80

Which AWS service is always provided at no charge?

A. Amazon S3

B. AWS Identity and Access Management (IAM)

C. Elastic Load Balancers

D. AWS WAF

View answer

Correct Answer: B

Question #81

Which AWS service or tool helps users visualize, understand, and manage spending and usage over time?

A. AWS Organizations

B. AWS Pricing Calculator

C. AWS Cost Explorer

D. AWS Service Catalog

View answer

Correct Answer: C

Question #82

A company is using Amazon DynamoDB.Which task is the company’s responsibility, according to the AWS shared responsibility model?

A. Patch the operating system

B. Provision hosts

C. Manage database access permissions

D. Secure the operating system

View answer

Correct Answer: C

Question #83

Which of the following is an advantage that the AWS Cloud provides to users?

A. Users eliminate the need to guess about infrastructure capacity requirements

B. Users decrease their variable costs by maintaining sole ownership of IT hardware

C. Users maintain control of underlying IT infrastructure hardware

D. Users maintain control of operating systems for managed services

View answer

Correct Answer: A

Question #84

A company wants to protect its AWS Cloud information, systems, and assets while performing risk assessment and mitigation tasks.Which pillar of the AWS Well-Architected Framework is supported by these goals?

A. Reliability

B. Security

C. Operational excellence

D. Performance efficiency

View answer

Correct Answer: B

Question #85

A company wants to manage its AWS Cloud resources through a web interface.Which AWS service will meet this requirement?

A. AWS Management Console

B. AWS CLI

C. AWS SDK

D. AWS Cloud9

View answer

Correct Answer: A

Question #86

Which AWS service is always provided at no charge?

A. Amazon S3

B. AWS Identity and Access Management (IAM)

C. Elastic Load Balancers

D. AWS WAF

View answer

Correct Answer: B

Question #87

A company uses Amazon EC2 instances to run its application. The application needs to be available and running continuously for three or more years. What type of EC2 instance should the company purchase for a discount on the EC2 pricing?

A. Reserved Instances

B. Spot Instances

C. On-Demand Instances

D. EC2 Fleet

View answer

Correct Answer: A

Question #88

Which AWS service is a cloud security posture management (CSPM) service that aggregates alerts from various AWS services and partner products in a standardized format?

A. AWS Security Hub

B. AWS Trusted Advisor

C. Amazon EventBridge

D. Amazon GuardDuty

View answer

Correct Answer: A

Question #89

A company is running a monolithic on-premises application that does not scale and is difficult to maintain. The company has a plan to migrate the application to AWS and divide the application into microservices.Which best practice of the AWS Well-Architected Framework is the company following with this plan?

A. Integrate functional testing as part of AWS deployment

B. Use automation to deploy changes

C. Deploy the application to multiple locations

D. Implement loosely coupled dependencies

View answer

Correct Answer: D

Question #90

A company has 5 TB of data stored in Amazon S3. The company plans to occasionally run queries on the data for analysis.Which AWS service should the company use to run these queries in the MOST cost-effective manner?

A. Amazon Redshift

B. Amazon Athena

C. Amazon Kinesis

D. Amazon RDS

View answer

Correct Answer: B

Question #91

A user needs programmatic access to AWS resources through the AWS CLI or the AWS API.Which option will provide the user with the appropriate access?

A. mazon Inspector

B. ccess keys

C. SH public keys

D. WS Key Management Service (AWS KMS) keys

View answer

Correct Answer: B

Question #92

To reduce costs, a company is planning to migrate a NoSQL database to AWS.Which AWS service is fully managed and can automatically scale throughput capacity to meet database workload demands?

A. Amazon Redshift

B. Amazon Aurora

C. Amazon DynamoDB

D. Amazon RDS

View answer

Correct Answer: C

Question #93

Regarding the AWS Shared Responsibility Model, who is responsible for patching Amazon RDS database instances?

A. AWS

B. Customer

C. Database engine vendor

D. Both the customer and AWS

View answer

Correct Answer: a

Question #94

A company wants to manage its AWS Cloud resources through a web interface.Which AWS service will meet this requirement?

A. AWS Management Console

B. AWS CLI

C. AWS SDK

D. AWS Cloud9

View answer

Correct Answer: A

Question #95

Which of the following are advantages of the AWS Cloud? (Choose two.)

A. Trade variable expenses for capital expenses

B. High economies of scale

C. Launch globally in minutes

D. Focus on managing hardware infrastructure

E. Overprovision to ensure capacity

View answer

Correct Answer: BC

Question #96

A company runs thousands of simultaneous simulations using AWS Batch. Each simulation is stateless, is fault tolerant, and runs for up to 3 hours.Which pricing model enables the company to optimize costs and meet these requirements?

A. eserved Instances

B. pot Instances

C. n-Demand Instances

D. edicated Instances

View answer

Correct Answer: B

Question #97

Which AWS service is used to provide encryption for Amazon EBS?

A. AWS Certificate Manager

B. AWS Systems Manager

C. AWS KMS

D. AWS Config

View answer

Correct Answer: C

Question #98

A company wants to automatically add and remove Amazon EC2 instances. The company wants the EC2 instances to adjust to varying workloads dynamically.Which service or feature will meet these requirements?

A. Amazon DynamoDB

B. Amazon EC2 Spot Instances

C. AWS Snow Family

D. Amazon EC2 Auto Scaling

View answer

Correct Answer: D

Question #99

Which AWS Cloud Adoption Framework (AWS CAF) capability belongs to the people perspective?

A. ata architecture

B. vent management

C. loud fluency

D. trategic partnership

View answer

Correct Answer: C

Question #100

A company has an AWS account. The company wants to audit its password and access key rotation details for compliance purposes.Which AWS service or tool will meet this requirement?

A. IAM Access Analyzer

B. AWS Artifact

C. IAM credential report

D. AWS Audit Manager

View answer

Correct Answer: C

DON'T WANT TO MISS A THING?

Latest Cisco, PMP, AWS, CompTIA, Microsoft Materials on SALE
Get Now

Free AWS CLF-C02 Practice Questions & Answers 2026 Part3

View The Updated CLF-C02 Exam Questions

View The Updated AWS Exam Questions

View Answers after Submission

DON'T WANT TO MISS A THING?

Latest Cisco, PMP, AWS, CompTIA, Microsoft Materials on SALE Get Now

Free AWS CLF-C02 Practice Questions & Answers 2026 Part3

View The Updated CLF-C02 Exam Questions

View The Updated AWS Exam Questions

View Answers after Submission

Latest Cisco, PMP, AWS, CompTIA, Microsoft Materials on SALE
Get Now