Pass the AWS Exam Easily with Updated CLF-C02 Practice Questions

Question #1

Which of the following are pillars of the AWS Well-Architected Framework? (Choose two.)

A. Amazon Inspector

B. Access keys

C. SSH public keys

D. AWS Key Management Service (AWS KMS) keys

View answer

Correct Answer: BE

Question #2

A global company wants to migrate its third-party applications to the AWS Cloud. The company wants help from a global team of experts to complete the migration faster and more reliably in accordance with AWS internal best practices.Which AWS service or resource will meet these requirements?

A. Reserved Instances

B. Dedicated Hosts

C. Spot Instances

D. On-Demand Instances

View answer

Correct Answer: B

Question #3

Which of the following is a recommended design principle of the AWS Well-Architected Framework?

A. Reduce downtime by making infrastructure changes infrequently and in large increments

B. Invest the time to configure infrastructure manually

C. Learn to improve from operational failures

D. Use monolithic application design for centralization

View answer

Correct Answer: C

Question #4

A company is running a critical workload on an Amazon RDS DB instance. The company needs the DB instance to be highly available with a recovery time of less than 5 minutes.Which solution will meet these requirements?

A. Create a read replica of the DB instance

B. Create a template of the DB instance by using AWS CloudFormation

C. Take frequent snapshots of the DB instance

D. Modify the DB instance to be a Multi-AZ deployment

View answer

Correct Answer: D

Question #5

A company has a centralized group of users with large file storage requirements that have exceeded the space available on premises. The company wants to extend its file storage capabilities for this group while retaining the performance benefit of sharing content locally.What is the MOST operationally efficient AWS solution for this scenario?

A. reate an Amazon S3 bucket for each user

B. onfigure and deploy an AWS Storage Gateway file gateway

C. ove each user’s working environment to Amazon WorkSpaces

D. eploy an Amazon EC2 instance and attach an Amazon Elastic Block Store (Amazon EBS) Provisioned IOPS volume

View answer

Correct Answer: B

Question #6

Which of the following is a software development framework that a company can use to define cloud resources as code and provision the resources through AWS CloudFormation?

A. AWS CLI

B. AWS Developer Center

C. AWS Cloud Development Kit (AWS CDK)

D. AWS CodeStar

View answer

Correct Answer: C

Question #7

What is the customer ALWAYS responsible for managing, according to the AWS shared responsibility model?

A. Software licenses

B. Networking

C. Customer data

D. Encryption keys

View answer

Correct Answer: C

Question #8

Which option is an AWS Cloud Adoption Framework (AWS CAF) business perspective capability?

A. Culture evolution

B. Event management

C. Data monetization

D. Platform architecture

View answer

Correct Answer: C

Question #9

Which option is an environment that consists of one or more data centers?

A. Amazon CloudFront

B. Availability Zone

C. VPC

D. AWS Outposts

View answer

Correct Answer: B

Question #10

A company wants to operate a data warehouse to analyze data without managing the data warehouse infrastructure. Which AWS service will meet this requirement?

A. Amazon Aurora

B. Amazon Redshift Serverless

C. AWS Lambda

D. Amazon RDS

View answer

Correct Answer: B

Question #11

A company needs to continuously run an experimental workload on an Amazon EC2 instance and stop the instance after 12 hours.Which instance purchasing option will meet this requirement MOST cost-effectively?

A. On-Demand Instances

B. Reserved Instances

C. Spot Instances

D. Dedicated Instances

View answer

Correct Answer: A

Question #12

Which AWS Cloud service can send alerts to customers if custom spending thresholds are exceeded?

A. AWS Budgets

B. AWS Cost Explorer

C. AWS Cost Allocation Tags

D. AWS Organizations

View answer

Correct Answer: A

Question #13

A company has a test AWS environment. A company is planning on testing an application within AWS. The application testing can be interrupted and does not need to run continuously.Which Amazon EC2 purchasing option will meet these requirements MOST cost-effectively?

A. On-Demand Instances

B. Dedicated Instances

C. Spot Instances

D. Reserved Instances

View answer

Correct Answer: C

Question #14

What are the benefits of consolidated billing for AWS Cloud services? (Choose two.)

A. S3 Multi-Region Access Points

B. S3 Storage Lens

C. AWS IAM Identity Center (AWS Single Sign-On)

D. Access Analyzer for S3

View answer

Correct Answer: AC

Question #15

Which tasks are customer responsibilities, according to the AWS shared responsibility model? (Choose two.)

A. Amazon Simple Notification Service (Amazon SNS)

B. Amazon Simple Email Service (Amazon SES)

C. Amazon CloudWatch alerts

D. Amazon Simple Queue Service (Amazon SQS)

View answer

Correct Answer: AB

Question #16

A company wants an AWS service to provide product recommendations based on its customer data.Which AWS service will meet this requirement?

A. Amazon Polly

B. Amazon Personalize

C. Amazon Comprehend

D. Amazon Rekognition

View answer

Correct Answer: B

Question #17

A company wants to receive a notification when a specific AWS cost threshold is reached.Which AWS services or tools can the company use to meet this requirement? (Choose two.)

A. AWS Artifact

B. Amazon Connect

C. AWS Chatbot

D. AWS Knowledge Center

View answer

Correct Answer: BD

Question #18

Which AWS service is a cloud security posture management (CSPM) service that aggregates alerts from various AWS services and partner products in a standardized format?

A. AWS Security Hub

B. AWS Trusted Advisor

C. Amazon EventBridge

D. Amazon GuardDuty

View answer

Correct Answer: A

Question #19

A company has 5 TB of data stored in Amazon S3. The company plans to occasionally run queries on the data for analysis.Which AWS service should the company use to run these queries in the MOST cost-effective manner?

A. Amazon Redshift

B. Amazon Athena

C. Amazon Kinesis

D. Amazon RDS

View answer

Correct Answer: B

Question #20

A company is planning to migrate its application to the AWS Cloud.Which AWS tool or set of resources should the company use to analyze and assess its readiness for migration?

A. AWS Cloud Adoption Framework (AWS CAF)

B. AWS Pricing Calculator

C. AWS Well-Architected Framework

D. AWS Budgets

View answer

Correct Answer: A

Question #21

A company wants to migrate its NFS on-premises workload to AWS.Which AWS Storage Gateway type should the company use to meet this requirement?

A. Tape Gateway

B. Volume Gateway

C. Amazon FSx File Gateway

D. Amazon S3 File Gateway

View answer

Correct Answer: D

Question #22

A company is setting up AWS Identity and Access Management (IAM) on an AWS account.Which recommendation complies with IAM security best practices?

A. Use the account root user access keys for administrative tasks

B. Grant broad permissions so that all company employees can access the resources they need

C. Turn on multi-factor authentication (MFA) for added security during the login process

D. Avoid rotating credentials to prevent issues in production applications

View answer

Correct Answer: C

Question #23

A company needs fully managed, highly reliable, and scalable file storage that is accessible over the Server Message Block (SMB) protocol.Which AWS service will meet these requirements?

A. Amazon S3

B. Amazon Elastic File System (Amazon EFS)

C. Amazon FSx for Windows File Server

D. Amazon Elastic Block Store (Amazon EBS)

View answer

Correct Answer: C

Question #24

A company needs to plan, schedule, and run hundreds of thousands of computing jobs on AWS.Which AWS service can the company use to meet this requirement?

A. AWS Step Functions

B. AWS Service Catalog

C. Amazon Simple Queue Service (Amazon SQS)

D. AWS Batch

View answer

Correct Answer: D

Question #25

Which option is a shared responsibility between AWS and its customers under the AWS shared responsibility model?

A. Configuration of Amazon EC2 instance operating systems

B. Application file system server-side encryption

C. Patch management

D. Security of the physical infrastructure

View answer

Correct Answer: C

Question #26

Which options are AWS Cloud Adoption Framework (AWS CAF) security perspective capabilities? (Choose two.)

A. AWS Graviton processor

B. Dedicated Hosts

C. EC2 Instance Savings Plans

D. Amazon EC2 Auto Scaling instances

View answer

Correct Answer: CD

Question #27

A company is planning to move data backups to the AWS Cloud. The company needs to replace on-premises storage with storage that is cloud-based but locally cached.Which AWS service meets these requirements?

A. AWS Storage Gateway

B. AWS Snowcone

C. AWS Backup

D. Amazon Elastic File System (Amazon EFS)

View answer

Correct Answer: A

Question #28

Which AWS service enables companies to deploy an application close to end users?

A. Amazon CloudFront

B. AWS Auto Scaling

C. AWS AppSync

D. Amazon Route 53

View answer

Correct Answer: A

Question #29

A company wants an AWS service to provide product recommendations based on its customer data.Which AWS service will meet this requirement?

A. Amazon Polly

B. Amazon Personalize

C. Amazon Comprehend

D. Amazon Rekognition

View answer

Correct Answer: B

Question #30

A company is storing sensitive customer data in an Amazon S3 bucket. The company wants to protect the data from accidental deletion or overwriting.Which S3 feature should the company use to meet these requirements?

A. S3 Lifecycle rules

B. S3 Versioning

C. S3 bucket policies

D. S3 server-side encryption

View answer

Correct Answer: B

Question #31

A company has deployed applications on Amazon EC2 instances. The company needs to assess application vulnerabilities and must identify infrastructure deployments that do not meet best practices.Which AWS service can the company use to meet these requirements?

A. AWS Trusted Advisor

B. Amazon Inspector

C. AWS Config

D. Amazon GuardDuty

View answer

Correct Answer: B

Question #32

A company has 5 TB of data stored in Amazon S3. The company plans to occasionally run queries on the data for analysis.Which AWS service should the company use to run these queries in the MOST cost-effective manner?

A. Amazon Redshift

B. Amazon Athena

C. Amazon Kinesis

D. Amazon RDS

View answer

Correct Answer: B

Question #33

Which of the following services can be used to block network traffic to an instance? (Choose two.)

A. AWS Identity and Access Management (IAM)

B. AWS CloudTrail

C. AWS Compute Optimizer

D. Amazon EventBridge

View answer

Correct Answer: AC

Question #34

A company wants to automatically add and remove Amazon EC2 instances. The company wants the EC2 instances to adjust to varying workloads dynamically.Which service or feature will meet these requirements?

A. Amazon DynamoDB

B. Amazon EC2 Spot Instances

C. AWS Snow Family

D. Amazon EC2 Auto Scaling

View answer

Correct Answer: D

Question #35

Which option is a benefit of using AWS for cloud computing?

A. Trade variable expense for fixed expense

B. Pay-as-you-go pricing

C. Decreased speed and agility

D. Spending money running and maintaining data centers

View answer

Correct Answer: B

Question #36

Which of the following acts as an instance-level firewall to control inbound and outbound access?

A. Network access control list

B. Security groups

C. AWS Trusted Advisor

D. Virtual private gateways

View answer

Correct Answer: B

Question #37

Which AWS service or tool helps users visualize, understand, and manage spending and usage over time?

A. AWS Organizations

B. AWS Pricing Calculator

C. AWS Cost Explorer

D. AWS Service Catalog

View answer

Correct Answer: C

Question #38

Which AWS benefit is demonstrated by on-demand technology services that enable companies to replace upfront fixed expenses with variable expenses?

A. High availability

B. Economies of scale

C. Pay-as-you-go pricing

D. Global reach

View answer

Correct Answer: C

Question #39

Which AWS service can be used to retrieve compliance reports on demand?

A. AWS Secrets Manager

B. AWS Artifact

C. AWS Security Hub

D. AWS Certificate Manager

View answer

Correct Answer: B

Question #40

A company wants to make an upfront commitment for continued use of its production Amazon EC2 instances in exchange for a reduced overall cost.Which pricing options meet these requirements with the LOWEST cost? (Choose two.)

A. Amazon Connect

B. AWS Wavelength

C. AWS Regions

D. AWS Direct Connect

View answer

Correct Answer: CD

Question #41

A company needs to transfer data between an Amazon S3 bucket and an on-premises application.Who is responsible for the security of this data, according to the AWS shared responsibility model?

A. The company

B. AWS

C. Firewall vendor

D. AWS Marketplace partner

View answer

Correct Answer: A

Question #42

A company needs to quickly and securely move files over long distances between its client and an Amazon S3 bucket. Which S3 feature will meet this requirement?

A. S3 Versioning

B. S3 Transfer Acceleration

C. S3ACLs

D. S3 Intelligent-Tiering

View answer

Correct Answer: B

Question #43

Which of the following are benefits of using AWS Trusted Advisor? (Choose two.)

A. roviding high-performance container orchestration

B. reating and rotating encryption keys

C. etecting underutilized resources to save costs

D. mproving security by proactively monitoring the AWS environment

E. mplementing enforced tagging across AWS resources

View answer

Correct Answer: CD

Question #44

A company wants a unified tool to provide a consistent method to interact with AWS services.Which AWS service or tool will meet this requirement?

A. AWS CLI

B. Amazon Elastic Container Service (Amazon ECS)

C. AWS Cloud9

D. AWS Virtual Private Network (AWS VPN)

View answer

Correct Answer: A

Question #45

A company has an AWS account. The company wants to audit its password and access key rotation details for compliance purposes. Which AWS service or tool will meet this requirement?

A. IAM Access Analyzer

B. AWS Artifact

C. IAM credential report

D. AWS Audit Manager

View answer

Correct Answer: C

Question #46

Using AWS Identity and Access Management (IAM) to grant access only to the resources needed to perform a task is a concept known as:

A. restricted access

B. as-needed access

C. least privilege access

D. token access

View answer

Correct Answer: C

Question #47

A company is running a workload in the AWS Cloud.Which AWS best practice ensures the MOST cost-effective architecture for the workload?

A. Loose coupling

B. Rightsizing

C. Caching

D. Redundancy

View answer

Correct Answer: B

Question #48

Which Amazon EC2 pricing model is the MOST cost efficient for an uninterruptible workload that runs once a year for 24 hours?

A. On-Demand Instances

B. Reserved Instances

C. Spot Instances

D. Dedicated Instances

View answer

Correct Answer: A

Question #49

A user wants to securely automate the management and rotation of credentials that are shared between applications, while spending the least amount of time on managing tasks.Which AWS service or feature can be used to accomplish this?

A. AWS CloudHSM

B. AWS Key Management Service (AWS KMS)

C. AWS Secrets Manager

D. Server-side encryption

View answer

Correct Answer: C

Question #50

A company must be able to develop, test, and launch an application in the AWS Cloud quickly.Which advantage of cloud computing will meet these requirements?

A. Stop guessing capacity

B. Trade fixed expense for variable expense

C. Achieve economies of scale

D. Increase speed and agility

View answer

Correct Answer: D

Question #51

A company is building an application that needs to deliver images and videos globally with minimal latency. Which approach can the company use to accomplish this in a cost effective manner?

A. Deliver the content through Amazon CloudFront

B. Store the content on Amazon S3 and enable S3 cross-region replication

C. Implement a VPN across multiple AWS Regions

D. Deliver the content through AWS PrivateLink

View answer

Correct Answer: A

Question #52

Which of the following is an AWS value proposition that describes a user’s ability to scale infrastructure based on demand?

A. Speed of innovation

B. Resource elasticity

C. Decoupled architecture

D. Global deployment

View answer

Correct Answer: B

Question #53

Which AWS Cloud benefit is shown by an architecture’s ability to withstand failures with minimal downtime?

A. Agility

B. Elasticity

C. Scalability

D. High availability

View answer

Correct Answer: D

Question #54

A company wants a unified tool to provide a consistent method to interact with AWS services.Which AWS service or tool will meet this requirement?

A. AWS CLI

B. Amazon Elastic Container Service (Amazon ECS)

C. AWS Cloud9

D. AWS Virtual Private Network (AWS VPN)

View answer

Correct Answer: A

Question #55

A company has an Amazon EC2 instance in a private subnet. The company wants to initiate a connection to the internet to pull operating system updates while preventing traffic from the internet from accessing the EC2 instance.Which AWS managed service allows this?

A. VPC endpoint

B. NAT gateway

C. Amazon PrivateLink

D. VPC peering

View answer

Correct Answer: B

Question #56

What does the concept of agility mean in AWS Cloud computing? (Choose two.)

A. AWS WAF

B. AWS Shield

C. Network ACLs

D. Security groups

View answer

Correct Answer: AC

Question #57

A company is storing data that will not be frequently accessed in the AWS Cloud. If the company needs to access the data, the data needs to be retrieved within 12 hours. The company wants a solution that is cost-effective for storage costs for each gigabyte.Which Amazon S3 storage class will meet these requirements?

A. S3 Standard

B. S3 Glacier Flexible Retrieval

C. S3 One Zone-Infrequent Access (S3 One Zone-IA)

D. S3 Standard-Infrequent Access (S3 Standard-IA)

View answer

Correct Answer: B

Question #58

A company is running a monolithic on-premises application that does not scale and is difficult to maintain. The company has a plan to migrate the application to AWS and divide the application into microservices.Which best practice of the AWS Well-Architected Framework is the company following with this plan?

A. Integrate functional testing as part of AWS deployment

B. Use automation to deploy changes

C. Deploy the application to multiple locations

D. Implement loosely coupled dependencies

View answer

Correct Answer: D

Question #59

Which AWS service is a cloud security posture management (CSPM) service that aggregates alerts from various AWS services and partner products in a standardized format?

A. AWS Security Hub

B. AWS Trusted Advisor

C. Amazon EventBridge

D. Amazon GuardDuty

View answer

Correct Answer: A

Question #60

Which AWS service or feature allows a user to establish a dedicated network connection between a company’s on-premises data center and the AWS Cloud?

A. AWS Direct Connect

B. VPC peering

C. AWS VPN

D. Amazon Route 53

View answer

Correct Answer: A

Question #61

A company wants to assess its operational readiness. It also wants to identify and mitigate any operational risks ahead of a new product launch.Which AWS Support plan offers guidance and support for this kind of event at no additional charge?

A. AWS Business Support

B. AWS Basic Support

C. AWS Developer Support

D. AWS Enterprise Support

View answer

Correct Answer: D

Question #62

A cloud practitioner needs to obtain AWS compliance reports before migrating an environment to the AWS Cloud. How can these reports be generated?

A. Contact the AWS Compliance team

B. Download the reports from AWS Artifact

C. Open a case with AWS Support

D. Generate the reports with Amazon Macie

View answer

Correct Answer: B

Question #63

A company needs to organize its resources and track AWS costs on a detailed level. The company needs to categorize costs by business department, environment, and application.Which solution will meet these requirements?

A. Access the AWS Cost Management console to organize resources, set an AWS budget, and receive notifications of unintentional usage

B. Use tags to organize the resources

C. Create Amazon CloudWatch dashboards to visually organize and track costs individually

D. Access the AWS Billing and Cost Management dashboard to organize and track resource consumption on a detailed level

View answer

Correct Answer: B

Question #64

Which AWS services or tools can identify rightsizing opportunities for Amazon EC2 instances? (Choose two.)

A. Elimination of expenses for running and maintaining data centers

B. Price discounts that are identical to discounts from hardware providers

C. Distribution of all operational controls to AWS

D. Elimination of operational expenses

View answer

Correct Answer: AE

Question #65

Which task is the responsibility of AWS when using AWS services?

A. Amazon CloudWatch

B. AWS Config

C. AWS Trusted Advisor

D. AWS CloudFormation

View answer

Correct Answer: C

Question #66

Which design principles support the reliability pillar of the AWS Well-Architected Framework? (Choose two.)

A. Inbound data transfer from the internet

B. Outbound data transfer to the internet

C. Data transfer between AWS Regions

D. Data transfer between Availability Zones

View answer

Correct Answer: CE

Question #67

Which of the following describes some of the core functionality of Amazon S3?

A. Amazon S3 is a high-performance block storage service that is designed for use with Amazon EC2

B. Amazon S3 is an object storage service that provides high-level performance, security, scalability, and data availability

C. Amazon S3 is a fully managed, highly reliable, and scalable file storage system that is accessible over the industry-standard SMB protocol

D. Amazon S3 is a scalable, fully managed elastic NFS for use with AWS Cloud services and on-premises resources

View answer

Correct Answer: B

Question #68

A company wants to migrate its database to a managed AWS service that is compatible with PostgreSQL.Which AWS services will meet these requirements? (Choose two.)

A. AWS IoT Core

B. Amazon Lightsail

C. AWS Storage Gateway

D. AWS Snowball Edge

View answer

Correct Answer: BE

Question #69

A developer has been hired by a large company and needs AWS credentials.Which are security best practices that should be followed? (Choose two.)

A. Security groups

B. AWS Firewall Manager

C. IAM roles

D. IAM user SSH keys

View answer

Correct Answer: AE

Question #70

Which AWS service provides highly durable object storage?

A. Amazon S3

B. Amazon Elastic File System (Amazon EFS)

C. Amazon Elastic Block Store (Amazon EBS)

D. Amazon FSx

View answer

Correct Answer: A

Question #71

A company wants to migrate its on-premises workloads to the AWS Cloud. The company wants to separate workloads for chargeback to different departments.Which AWS services or features will meet these requirements? (Choose two.)

A. Enable client-side encryption for objects that are stored in Amazon S3

B. Configure IAM security policies to comply with the principle of least privilege

C. Patch the guest operating system on an Amazon EC2 instance

D. Apply updates to the Nitro Hypervisor

View answer

Correct Answer: BE

Question #72

A company is developing an application that uses multiple AWS services. The application needs to use temporary, limited-privilege credentials for authentication with other AWS APIs.Which AWS service or feature should the company use to meet these authentication requirements?

A. Amazon API Gateway

B. IAM users

C. AWS Security Token Service (AWS STS)

D. IAM instance profiles

View answer

Correct Answer: C

Question #73

Which responsibility belongs to AWS when a company hosts its databases on Amazon EC2 instances?

A. Database backups

B. Database software patches

C. Operating system patches

D. Operating system installations

View answer

Correct Answer: D

Question #74

Which AWS service is a key-value database that provides sub-millisecond latency on a large scale?

A. Amazon DynamoDB

B. Amazon Aurora

C. Amazon DocumentDB (with MongoDB compatibility)

D. Amazon Neptune

View answer

Correct Answer: A

Question #75

A company is running a workload in the AWS Cloud.Which AWS best practice ensures the MOST cost-effective architecture for the workload?

A. Loose coupling

B. Rightsizing

C. Caching

D. Redundancy

View answer

Correct Answer: B

Question #76

A company needs to engage third-party consultants to help maintain and support its AWS environment and the company’s business needs.Which AWS service or resource will meet these requirements?

A. AWS Support

B. AWS Organizations

C. AWS Service Catalog

D. AWS Partner Network (APN)

View answer

Correct Answer: D

Question #77

A user wants to securely automate the management and rotation of credentials that are shared between applications, while spending the least amount of time on managing tasks.Which AWS service or feature can be used to accomplish this?

A. AWS CloudHSM

B. AWS Key Management Service (AWS KMS)

C. AWS Secrets Manager

D. Server-side encryption

View answer

Correct Answer: C

Question #78

Which AWS service enables companies to deploy an application close to end users?

A. Amazon CloudFront

B. AWS Auto Scaling

C. AWS AppSync

D. Amazon Route 53

View answer

Correct Answer: A

Question #79

Which AWS service is a hybrid cloud storage service that provides on-premises users access to virtually unlimited cloud storage?

A. AWS Pricing Calculator

B. Amazon CloudWatch

C. AWS Cost Explorer

D. AWS Budgets

View answer

Correct Answer: C

Question #80

An online gaming company needs to choose a purchasing option to run its Amazon EC2 instances for 1 year. The web traffic is consistent, and any increases in traffic are predictable. The EC2 instances must be online and available without any disruption.Which EC2 instance purchasing option will meet these requirements MOST cost-effectively?

A. On-Demand Instances

B. Reserved Instances

C. Spot Instances

D. Spot Fleet

View answer

Correct Answer: B

Question #81

A company is developing an application that uses multiple AWS services. The application needs to use temporary, limited-privilege credentials for authentication with other AWS APIs.Which AWS service or feature should the company use to meet these authentication requirements?

A. Amazon API Gateway

B. IAM users

C. AWS Security Token Service (AWS STS)

D. IAM instance profiles

View answer

Correct Answer: C

Question #82

Which Amazon EC2 instance pricing model can provide discounts of up to 90%?

A. Reserved Instances

B. On-Demand

C. Dedicated Hosts

D. Spot Instances

View answer

Correct Answer: D

Question #83

Which task is a customer’s responsibility, according to the AWS shared responsibility model?

A. Management of the guest operating systems

B. Maintenance of the configuration of infrastructure devices

C. Management of the host operating systems and virtualization

D. Maintenance of the software that powers Availability Zones

View answer

Correct Answer: A

Question #84

Which perspective in the AWS Cloud Adoption Framework (AWS CAF) includes capabilities for configuration management and patch management?

A. Platform

B. Operations

C. Security

D. Governance

View answer

Correct Answer: B

Question #85

A user wants to review all Amazon S3 buckets with ACLs and S3 bucket policies in the S3 console.Which AWS service or resource will meet this requirement?

A. AWS Artifact

B. AWS Marketplace

C. Amazon Inspector

D. AWS Support

View answer

Correct Answer: D

Question #86

Which option is an environment that consists of one or more data centers?

A. Amazon CloudFront

B. Availability Zone

C. VPC

D. AWS Outposts

View answer

Correct Answer: B

Question #87

A company wants its Amazon EC2 instances to operate in a highly available environment, even if there is a natural disaster in a particular geographic area.Which approach will achieve this goal?

A. Use EC2 instances in multiple AWS Regions

B. Use EC2 instances in multiple Amazon CloudFront locations

C. Use EC2 instances in multiple edge locations

D. Use EC2 instances in AWS Local Zones

View answer

Correct Answer: A

Question #88

A user has a stateful workload that will run on Amazon EC2 for the next 3 years.What is the MOST cost-effective pricing model for this workload?

A. n-Demand Instances

B. eserved Instances

C. edicated Instances

D. pot Instances

View answer

Correct Answer: B

Question #89

Which service enables customers to audit API calls in their AWS accounts?

A. AWS CloudTrail

B. AWS Trusted Advisor

C. Amazon Inspector

D. AWS X-Ray

View answer

Correct Answer: A

Question #90

Which fully managed AWS service assists with the creation, testing, and management of custom Amazon EC2 images?

A. EC2 Image Builder

B. Amazon Machine Image (AMI)

C. AWS Launch Wizard

D. AWS Elastic Beanstalk

View answer

Correct Answer: A

Question #91

Which tasks are the customer’s responsibility, according to the AWS shared responsibility model? (Choose two.)

A. Resource tagging

B. Consolidated billing

C. Pay-as-you-go pricing

D. Spot Instances

View answer

Correct Answer: BC

Question #92

To reduce costs, a company is planning to migrate a NoSQL database to AWS.Which AWS service is fully managed and can automatically scale throughput capacity to meet database workload demands?

A. Amazon Redshift

B. Amazon Aurora

C. Amazon DynamoDB

D. Amazon RDS

View answer

Correct Answer: C

Question #93

A network engineer needs to build a hybrid cloud architecture connecting on-premises networks to the AWS Cloud using AWS Direct Connect. The company has a few VPCs in a single AWS Region and expects to increase the number of VPCs to hundreds over time.Which AWS service or feature should the engineer use to simplify and scale this connectivity as the VPCs increase in number?

A. VPC endpoints

B. AWS Transit Gateway

C. Amazon Route 53

D. AWS Secrets Manager

View answer

Correct Answer: B

Question #94

Which AWS service helps users audit API activity across their AWS account?

A. AWS CloudTrail

B. Amazon Inspector

C. AWS WAF

D. AWS Config

View answer

Correct Answer: A

Question #95

Which of the following are pillars of the AWS Well-Architected Framework? (Choose two.)

A. Amazon Inspector

B. Access keys

C. SSH public keys

D. AWS Key Management Service (AWS KMS) keys

View answer

Correct Answer: BE

Question #96

Which AWS service gives users the ability to discover and protect sensitive data that is stored in Amazon S3 buckets?

A. Amazon Macie

B. Amazon Detective

C. Amazon GuardDuty

D. AWS IAM Access Analyzer

View answer

Correct Answer: A

Question #97

An ecommerce company has migrated its IT infrastructure from an on-premises data center to the AWS Cloud. Which cost is the company's direct responsibility?

A. ost of application software licenses

B. ost of the hardware infrastructure on AWS

C. ost of power for the AWS servers

D. ost of physical security for the AWS data center

View answer

Correct Answer: A

Question #98

Which task is the responsibility of AWS when using AWS services?

A. Amazon CloudWatch

B. AWS Config

C. AWS Trusted Advisor

D. AWS CloudFormation

View answer

Correct Answer: C

Question #99

A company needs to engage third-party consultants to help maintain and support its AWS environment and the company’s business needs.Which AWS service or resource will meet these requirements?

A. AWS Support

B. AWS Organizations

C. AWS Service Catalog

D. AWS Partner Network (APN)

View answer

Correct Answer: D

Question #100

Which cloud transformation journey phase of the AWS Cloud Adoption Framework (AWS CAF) focuses on demonstrating how the cloud helps accelerate business outcomes?

A. Scale

B. Envision

C. Align

D. Launch

View answer

Correct Answer: B

Question #101

Which AWS service or feature is a browser-based, pre-authenticated service that can be launched directly from the AWS Management Console?

A. AWS API

B. AWS Lightsail

C. AWS Cloud9

D. AWS CloudShell

View answer

Correct Answer: D

Question #102

A company is moving an on-premises data center to the AWS Cloud. The company must migrate 50 petabytes of file storage data to AWS with the least possible operational overhead.Which AWS service or resource should the company use to meet these requirements?

A. AWS Snowmobile

B. AWS Snowball Edge

C. AWS Data Exchange

D. AWS Database Migration Service (AWS DMS)

View answer

Correct Answer: A

Question #103

Which AWS services or features enable users to connect on-premises networks to a VPC? (Choose two.)

A. Amazon RDS

B. Amazon DynamoDB

C. Amazon Aurora

D. Amazon Redshift

View answer

Correct Answer: AC

Question #104

A company wants to migrate its database to a managed AWS service that is compatible with PostgreSQL.Which AWS services will meet these requirements? (Choose two.)

A. AWS IoT Core

B. Amazon Lightsail

C. AWS Storage Gateway

D. AWS Snowball Edge

View answer

Correct Answer: BE

Question #105

Which AWS service or feature allows users to create new AWS accounts, group multiple accounts to organize workflows, and apply policies to groups of accounts?

A. AWS Identity and Access Management (IAM)

B. AWS Trusted Advisor

C. AWS CloudFormation

D. AWS Organizations

View answer

Correct Answer: D

Question #106

A user needs to quickly deploy a nonrelational database on AWS. The user does not want to manage the underlying hardware or the database software.Which AWS service can be used to accomplish this?

A. Network ACLs

B. Security groups

C. AWS Trusted Advisor

D. AWS WAF

View answer

Correct Answer: B

Question #107

Which AWS service is always provided at no charge?

A. Amazon S3

B. AWS Identity and Access Management (IAM)

C. Elastic Load Balancers

D. AWS WAF

View answer

Correct Answer: B

Question #108

Which of the following is a way to use Amazon EC2 Auto Scaling groups to scale capacity in the AWS Cloud?

A. Scale the number of EC2 instances in or out automatically, based on demand

B. Use serverless EC2 instances

C. Scale the size of EC2 instances up or down automatically, based on demand

D. Transfer unused CPU resources between EC2 instances

View answer

Correct Answer: A

Question #109

A company wants to query its server logs to gain insights about its customers’ experiences.Which AWS service will store this data MOST cost-effectively?

A. Amazon Aurora

B. Amazon Elastic File System (Amazon EFS)

C. Amazon Elastic Block Store (Amazon EBS)

D. Amazon S3

View answer

Correct Answer: D

Question #110

A company is deploying a machine learning (ML) research project that will require a lot of compute power over several months. The ML processing jobs do not need to run at specific times.Which Amazon EC2 instance purchasing option will meet these requirements at the lowest cost?

A. On-Demand Instances

B. Spot Instances

C. Reserved Instances

D. Dedicated Instances

View answer

Correct Answer: B

Question #111

Which option is a physical location of the AWS global infrastructure?

A. AWS DataSync

B. AWS Region

C. Amazon Connect

D. AWS Organizations

View answer

Correct Answer: B

Question #112

Which of the following are benefits of using AWS Trusted Advisor? (Choose two.)

A. AWS Resource Explorer

B. AWS Service Catalog

C. AWS Organizations

D. AWS Systems Manager

View answer

Correct Answer: CD

Question #113

A company plans to migrate to the AWS Cloud. The company wants to use the AWS Cloud Adoption Framework (AWS CAF) to define and track business outcomes as part of its cloud transformation journey.Which AWS CAF governance perspective capability will meet these requirements?

A. Benefits management

B. Risk management

C. Application portfolio management

D. Cloud financial management

View answer

Correct Answer: A

Question #114

Which security service automatically recognizes and classifies sensitive data or intellectual property on AWS?

A. Amazon GuardDuty

B. Amazon Macie

C. Amazon Inspector

D. AWS Shield

View answer

Correct Answer: B

Question #115

Which of the following is a recommended design principle for AWS Cloud architecture?

A. Design tightly coupled components

B. Build a single application component that can handle all the application functionality

C. Make large changes on fewer iterations to reduce chances of failure

D. Avoid monolithic architecture by segmenting workloads

View answer

Correct Answer: D

Question #116

A company wants an automated process to continuously scan its Amazon EC2 instances for software vulnerabilities. Which AWS service will meet these requirements?

A. Amazon GuardDuty

B. Amazon Inspector

C. Amazon Detective

D. Amazon Cognito

View answer

Correct Answer: B

Question #117

Which task is the customer’s responsibility, according to the AWS shared responsibility model?

A. Maintain the security of the AWS Cloud

B. Configure firewalls and networks

C. Patch the operating system of Amazon RDS instances

D. Implement physical and environmental controls

View answer

Correct Answer: B

Question #118

A company plans to use an Amazon Snowball Edge device to transfer files to the AWS Cloud.Which activities related to a Snowball Edge device are available to the company at no cost?

A. Use of the Snowball Edge appliance for a 10-day period

B. The transfer of data out of Amazon S3 and to the Snowball Edge appliance

C. The transfer of data from the Snowball Edge appliance into Amazon S3

D. Daily use of the Snowball Edge appliance after 10 days

View answer

Correct Answer: C

Question #119

A company wants to store and retrieve files in Amazon S3 for its existing on-premises applications by using industry-standard file system protocols.Which AWS service will meet these requirements?

A. AWS DataSync

B. AWS Snowball Edge

C. Amazon S3 File Gateway

D. AWS Transfer Family

View answer

Correct Answer: C

Question #120

A developer wants to deploy an application quickly on AWS without manually creating the required resources. Which AWS service will meet these requirements?

A. Amazon EC2

B. AWS Elastic Beanstalk

C. AWS CodeBuild

D. Amazon Personalize

View answer

Correct Answer: B

Question #121

A company wants a fully managed Windows file server for its Windows-based applications.Which AWS service will meet this requirement?

A. Amazon FSx

B. Amazon Elastic Kubernetes Service (Amazon EKS)

C. Amazon Elastic Container Service (Amazon ECS)

D. Amazon EMR

View answer

Correct Answer: A

Question #122

Which cloud transformation journey phase of the AWS Cloud Adoption Framework (AWS CAF) focuses on demonstrating how the cloud helps accelerate business outcomes?

A. Scale

B. Envision

C. Align

D. Launch

View answer

Correct Answer: B

Question #123

Which task is a responsibility of AWS, according to the AWS shared responsibility model?

A. Configure identity and access management for applications

B. Manage encryption options for data that is stored on AWS

C. Configure security groups for Amazon EC2 instances

D. Maintain the physical hardware of the infrastructure

View answer

Correct Answer: D

Question #124

A company needs to organize its resources and track AWS costs on a detailed level. The company needs to categorize costs by business department, environment, and application.Which solution will meet these requirements?

A. Access the AWS Cost Management console to organize resources, set an AWS budget, and receive notifications of unintentional usage

B. Use tags to organize the resources

C. Create Amazon CloudWatch dashboards to visually organize and track costs individually

D. Access the AWS Billing and Cost Management dashboard to organize and track resource consumption on a detailed level

View answer

Correct Answer: B

Question #125

Which AWS services or tools can identify rightsizing opportunities for Amazon EC2 instances? (Choose two.)

A. Elimination of expenses for running and maintaining data centers

B. Price discounts that are identical to discounts from hardware providers

C. Distribution of all operational controls to AWS

D. Elimination of operational expenses

View answer

Correct Answer: AE

Question #126

A company wants its Amazon EC2 instances to operate in a highly available environment, even if there is a natural disaster in a particular geographic area.Which approach will achieve this goal?

A. Use EC2 instances in multiple AWS Regions

B. Use EC2 instances in multiple Amazon CloudFront locations

C. Use EC2 instances in multiple edge locations

D. Use EC2 instances in AWS Local Zones

View answer

Correct Answer: A

Question #127

A company is running a monolithic on-premises application that does not scale and is difficult to maintain. The company has a plan to migrate the application to AWS and divide the application into microservices.Which best practice of the AWS Well-Architected Framework is the company following with this plan?

A. Integrate functional testing as part of AWS deployment

B. Use automation to deploy changes

C. Deploy the application to multiple locations

D. Implement loosely coupled dependencies

View answer

Correct Answer: D

Question #128

What is a customer responsibility when using AWS Lambda according to the AWS shared responsibility model?

A. Managing the code within the Lambda function

B. Confirming that the hardware is working in the data center

C. Patching the operating system

D. Shutting down Lambda functions when they are no longer in use

View answer

Correct Answer: A

Question #129

Which AWS service or resource can be used to identify services that have been used by a user within a specified date range?

A. Amazon S3 access control lists (ACLs)

B. AWS Certificate Manager (ACM)

C. Network Access Analyzer

D. AWS Identity and Access Management Access Analyzer

View answer

Correct Answer: D

Question #130

A company wants to create Amazon QuickSight dashboards every week by using its billing data.Which AWS feature or tool can the company use to meet these requirements?

A. AWS Budgets

B. AWS Cost Explorer

C. AWS Cost and Usage Report

D. AWS Cost Anomaly Detection

View answer

Correct Answer: C

Question #131

Which AWS service provides highly durable object storage?

A. Amazon S3

B. Amazon Elastic File System (Amazon EFS)

C. Amazon Elastic Block Store (Amazon EBS)

D. Amazon FSx

View answer

Correct Answer: A

Question #132

Which of the following acts as an instance-level firewall to control inbound and outbound access?

A. Network access control list

B. Security groups

C. AWS Trusted Advisor

D. Virtual private gateways

View answer

Correct Answer: B

Question #133

A company needs to quickly and securely move files over long distances between its client and an Amazon S3 bucket. Which S3 feature will meet this requirement?

A. S3 Versioning

B. S3 Transfer Acceleration

C. S3ACLs

D. S3 Intelligent-Tiering

View answer

Correct Answer: B

DON'T WANT TO MISS A THING?

100% Pass Cisco, PMP, CISA, CISM, AWS Practice test on SALE!
Get Now

Pass the AWS Exam Easily with Updated CLF-C02 Practice Questions

View The Updated CLF-C02 Exam Questions

View The Updated AWS Exam Questions

View Answers after Submission

DON'T WANT TO MISS A THING?

100% Pass Cisco, PMP, CISA, CISM, AWS Practice test on SALE! Get Now

Pass the AWS Exam Easily with Updated CLF-C02 Practice Questions

View The Updated CLF-C02 Exam Questions

View The Updated AWS Exam Questions

View Answers after Submission

100% Pass Cisco, PMP, CISA, CISM, AWS Practice test on SALE!
Get Now