AWS CLF-C02 Exam Prep

All Questions

Browse exam-style questions one by one from the list. Filter the ones you missed and quickly find the questions you want to review.

G1You have an application running on EC2. You want to automatically increase or decrease the number of instances in response to changes in demand, and also automatically replace unhealthy instances. Which service is the most appropriate?
G1Which of the following are appropriate ways to improve the availability and fault tolerance of an application? Choose 2.
G1Which design concept describes placing a queue between two components of an application so that, even if one component stops, the other can keep processing?
G1Which migration strategy moves an existing on-premises application to AWS virtual servers almost as-is, with little code change? It is commonly called "lift and shift".
G1What is the main purpose of the AWS Cloud Adoption Framework (AWS CAF)?
G2Which instance-level virtual firewall controls, for each individual EC2 instance, the traffic allowed (inbound/outbound) by port and by source?
G2Which service records who performed which API operation, when, and against which AWS resource, so that you can audit and trace it afterward?
G2Which service is best when you want to continuously record the change history of AWS resource configurations and automatically evaluate whether they comply with rules you define (compliance)?
G2Which is the most appropriate best practice for handling the root user of an AWS account?
G2Which of the following correctly pair an AWS security service with its main role? Choose 2.
G3Which of the following statements about Amazon S3 are correct? Choose 2.
G3You want to automatically manage logs stored in S3 with the rule 'move to an infrequent-access tier 30 days after creation, automatically move to Glacier after 1 year, and delete after 7 years'. Which S3 feature should you use?
G3Which persistent block storage attaches to a single EC2 instance, is used like a disk, and stores OS and database data?
G3Which service is best for a beginner who wants to easily launch a small website or blog from a preconfigured template and run it at a predictable fixed monthly price?
G3Which serverless event bus receives events from various AWS services and SaaS apps and routes them to the appropriate targets (such as Lambda) according to rules you define?
G7Which AWS service is the MOST suitable for building multiple Lambda functions and AWS services into a workflow that follows a defined order and conditional branching, and managing it visually?
G7A company needs to retain archive data for 10 years for compliance, but the data is rarely retrieved, and wants to store it in S3 at the lowest possible cost. Retrieval taking several hours is acceptable. Which S3 storage class is the MOST suitable?
G7Which AWS service is the MOST suitable for building a chatbot or interactive voice response (IVR) that interacts by voice or text while understanding the intent of the conversation?
G7What is the unit called that divides a VPC into a range of IP addresses belonging to a single Availability Zone, where resources are placed by purpose (public or private)?
G7Which of the following correctly pair an AWS application integration or monitoring service with its role? (Choose TWO.)
G4Which statement about the AWS Basic support plan is correct?
G4Which tool is best when you want to automatically receive an alert when your monthly cost is about to exceed a budget you set?
G4When a problem occurs in your production workload, you want to be able to contact a technical support engineer 24/7 by phone, chat, or email. Which is the lowest-cost support plan that meets this?
G4For an AWS configuration you plan to build, you want to estimate the approximate monthly cost in advance before you actually build it. Which tool is best?
G4Which statements about AWS support plans are correct? Choose 2.
G5When a company migrates from on-premises to AWS, shifting from CapEx (capital expenditure) to OpEx (operational expenditure) is considered a business benefit. What is the reason that using AWS lets a company convert CapEx into OpEx?
G5A developer wants to call and operate AWS services programmatically from within the code of a custom Python application. Which option is the MOST suitable?
G5A company is migrating a self-managed on-premises database and wants to move it onto a managed AWS database (Amazon RDS) without changing the core functionality, in order to reduce operational burden. Which migration strategy is this?
G5There is exactly one place in a system where, if it fails, the entire system stops. To improve reliability, what is the MOST appropriate measure for this place?
G5Which of the following are included in the AWS migration strategies commonly known as the 7 Rs? (Choose TWO.)
G6Who is responsible for patching a security vulnerability contained in the code of a customer application that runs on an Amazon EC2 instance?
G6A company wants to protect a database server so that it cannot be accessed directly from the internet. How should the database server be placed within a VPC?
G6Which of the following statements about AWS IAM are correct? (Choose TWO.)
G6A company wants to use its existing corporate identities (such as Active Directory) to centrally provide employees with single sign-on (SSO) access to multiple AWS accounts. Which service is the MOST suitable?
G6When an application on an EC2 instance needs to access Amazon S3, which is the MOST recommended way to grant permissions securely with temporary credentials without embedding access keys in the code?
G11A company wants to run an application in containers but does not want to manage the underlying EC2 servers (provisioning and patching). Which service can run containers serverlessly?
G11A company wants to create its own logically isolated virtual network within the AWS Cloud and control the IP address range, subnets, and routing itself. Which service should it use?
G11A company wants intelligent search that can find the information it needs with high accuracy using natural-language questions across large numbers of documents scattered across the organization. Which AWS service is MOST suitable?
G11Which statements about Amazon RDS are correct? (Choose TWO.)
G11A company wants to automatically distribute incoming traffic across multiple EC2 instances and, when some instances become unhealthy, route traffic only to the healthy instances. Which service is MOST suitable?
G15Which component is attached to a VPC to allow a web server placed in a public subnet to communicate bidirectionally with the internet?
G15Which graph database service is BEST suited when you want to represent the connections (relationships) between data, such as friend relationships and recommendations in a social network, and efficiently handle complex queries that traverse those relationships?
G15Which service is BEST suited when you want to cache the results of repeated read queries to a database in memory, speed up responses, and reduce the load on the database?
G15For an application that spans multiple services, which AWS service is BEST suited when you want to visualize and analyze (distributed tracing) which path a request takes and where latency or errors occur?
G15Which combinations of an AWS storage service and its characteristics are correct? (Choose TWO.)
G8When estimating AWS costs, which option BEST describes the three main components that make up the pricing?
G8Which option BEST describes what TCO (total cost of ownership), used to compare on-premises and cloud costs, includes?
G8Which of the following are correct about the basic ideas of AWS pricing? (Choose TWO.)
G8Which service lets you check the operational status of AWS services and events (such as maintenance or outages) that may affect the resources in your own account?
G8From a cost optimization perspective, what is the MOST appropriate action for EBS volumes that are no longer used and Elastic IPs that remain even though nothing is running?
G9Which pillar of the Well-Architected Framework is MOST related to a requirement to keep a service running even when a component fails and to automatically recover from failures?
G9A company's traffic varies significantly by season. Which combination of AWS characteristics can handle the traffic variation while minimizing wasted cost? (Choose TWO.)
G9A company wants to deliver static content such as images and videos with low latency to users around the world. Which component of the AWS global infrastructure should the company use?
G9Which migration strategy retires a business application operated in-house and switches to a SaaS product with equivalent functionality?
G9A company with a large on-premises environment wants to avoid the risk of migrating everything at once and instead move systems to AWS gradually, using on-premises and AWS together until the migration is complete. Which deployment model is suitable for this period?
G10Which stateless firewall feature controls traffic at the subnet level and lets you set explicit deny rules in addition to allow rules?
G10A company wants to store sensitive information such as database passwords and API keys securely without writing it directly in code, and to automatically rotate it (periodic renewal) as needed. Which service is MOST suitable?
G10A company wants to automatically detect and classify sensitive data such as credit card numbers and personally identifiable information (PII) among large amounts of data stored in Amazon S3. Which service is MOST suitable?
G10Which statements about VPC network security are correct? (Choose TWO.)
G10Which option BEST describes what “encryption at rest” means?
G19A factory needs to securely connect a large number of sensors and devices to the cloud, and manage data collection and bidirectional communication with those devices. Which AWS service is MOST suited for this requirement?
G19A company needs a data warehouse that can run complex aggregation and analytical queries at high speed against large volumes of data collected from multiple systems. Which AWS service is MOST suited for this requirement?
G19A company wants to run a large number of batch jobs that can be re-executed if interrupted, at the LOWEST possible cost. Which EC2 purchasing option offers discounts of up to approximately 90% compared to On-Demand pricing?
G19Which TWO of the following correctly match an AWS service to its role? (Choose TWO.)
G19A company wants to process large-scale big data using open-source frameworks such as Apache Spark and Hadoop. Which AWS service is MOST suited for this requirement?
G23A company wants to quickly connect its on-premises environment to AWS using an existing internet connection with encrypted communication. Which service is MOST suitable for this requirement?
G23A company wants to automate the end-to-end workflow of build, test, and deploy (a CI/CD pipeline) triggered by source code changes. Which AWS service is MOST suitable for this requirement?
G23A company operates a production server with a nearly constant workload running 24 hours a day, 365 days a year. The company wants to receive a significant discount by committing to 1 or 3 years of usage. Which purchasing option is MOST suitable?
G23Which TWO statements about Amazon VPC and its components are correct? (Choose TWO.)
G23A company needs a highly available DNS service that translates domain names (such as example.com) to their corresponding IP addresses and routes user requests to the appropriate resources. Which service meets this requirement?
G12Which combinations of an AWS cost management tool and its role are correct? (Choose TWO.)
G12A company has found that many of its running Amazon EC2 instances have very low utilization relative to their allocated specifications. Which action is MOST appropriate to optimize costs?
G12A company wants to output its billing breakdown as the MOST detailed line-item data, down to the hourly and per-resource level, and analyze it in detail with its own tools. Which option is MOST suitable?
G12A large enterprise that runs mission-critical workloads needs support from a dedicated technical account manager (TAM), the shortest response times, and concierge support. Which support plan is MOST suitable?
G12Which AWS support plans provide support from a technical account manager (TAM)?
G13Which description BEST defines an AWS Availability Zone (AZ)?
G13A company is required by law to store customer data within its own country. Which consideration is MOST important to meet this requirement on AWS?
G13A company wants to define the same AWS infrastructure (such as VPC, EC2, and RDS) in a template so that it can be built and deleted automatically and repeatably any number of times with high reproducibility. Which service is BEST suited for this?
G13Which options are valid ways to operate and manage AWS resources? (Choose TWO.)
G13Which is the MOST representative cost that can typically be reduced or avoided by migrating from on-premises to AWS?
G14Which IAM best practices improve the security of an AWS account? (Choose TWO.)
G14Which service is MOST suitable to automatically scan EC2 instances and container images for known software vulnerabilities and assess the risk?
G14Which managed service continuously analyzes logs in an AWS account (such as VPC flow logs, CloudTrail, and DNS logs) and automatically detects suspicious activity and potential threats?
G14Who is responsible for applying security patches to the hypervisor and the virtualization infrastructure itself?
G14Which service is MOST suitable to block malicious requests targeting web applications, such as SQL injection and cross-site scripting (XSS), based on rules?
G26A company wants to automate and centrally manage backups for multiple AWS services — including Amazon EBS, Amazon RDS, Amazon DynamoDB, and Amazon EFS — based on policies. Which AWS service is MOST suitable for this requirement?
G26Which TWO of the following correctly pair an AWS analytics, machine learning, or developer service with its role? (Choose TWO.)
G26A company wants to temporarily store messages between an order-intake application and a processing application so that messages are not lost and are processed sequentially even when the processing side is temporarily slow. Which AWS service is MOST suitable for this requirement?
G26A company wants to continuously replicate on-premises and cloud servers to AWS so that those servers can be quickly recovered (failed over) on AWS in the event of a disaster. Which AWS service is designed for this disaster recovery use case?
G26Which AWS service runs code in response to events without any server provisioning or management, and charges only for the execution time and number of requests consumed?
G28A company wants to bring existing software that is licensed per physical server to AWS. The company requires exclusive use of a physical server and must be able to view and control physical attributes such as the number of sockets and cores. Which Amazon EC2 purchasing option BEST meets these requirements?
G28A company wants to build and operate a proprietary generative AI application using foundation models. Which AWS fully managed service allows the company to access foundation models from multiple providers through a single API?
G28Which AWS service enables a user to run standard SQL queries directly against data stored in Amazon S3 without provisioning any servers, and charges based on the amount of data scanned?
G28A company wants to provide employees with cloud-based virtual desktops so that employees can access their work environment from a browser or dedicated client without using a corporate PC. Which AWS service BEST meets this requirement?
G28Which TWO combinations correctly match an AWS database or related service with its characteristics? (Choose TWO.)
G16Which online catalog store lets a customer find, buy, and quickly deploy third-party software (such as virtual appliances and SaaS) into their own AWS environment?
G16Which combinations of an AWS account management and governance service and its role are correct? (Choose TWO.)
G16Which statement about AWS data transfer pricing is generally correct?
G16Which option can be attached to resources and used for classification in billing reports so that AWS costs can be aggregated and allocated per department or project?
G16What is the mechanism that lets users who are new to AWS try eligible services for free within set limits?
G17AWS aggregates resource demand from millions of customers to achieve bulk purchasing, and continuously passes the resulting cost savings back to customers. What is this mechanism called?
G17Which TWO statements correctly describe the economic characteristics of cloud computing (all-in cloud)? (Choose TWO.)
G17A company has the goal of continuously reducing the energy consumption and environmental impact associated with its cloud workloads. Which pillar of the AWS Well-Architected Framework addresses this goal?
G17A company wants to keep a confidential system in its on-premises environment while running some workloads on AWS and connecting both environments to work together. Which deployment model describes this approach?
G17By using AWS, a company can rapidly deploy new services and applications to a production environment. Which AWS characteristic represents this advantage?
G18Which statement BEST describes the difference between an IAM user and an IAM role?
G18Who is responsible for the physical security of AWS data centers (such as building access controls, surveillance cameras, and placement of security personnel)?
G18A company wants to grant the same set of permissions to 50 developers at once and manage member additions, removals, and permission changes efficiently. Which IAM approach is MOST suitable?
G18A company needs to download AWS third-party certification reports (such as SOC reports and ISO certifications) and other compliance documents on demand for an audit. Which service is MOST suitable?
G18Which TWO statements about data encryption in AWS are correct? (Choose TWO.)
G29A company wants to allow remote employees to securely connect to resources inside a VPC from their individual laptops. Which service is MOST suitable for this requirement?
G29A company needs a test environment for only a few weeks and wants to launch instances when needed and pay only for what is used, with no long-term commitment or upfront payment. Which Amazon EC2 purchasing option BEST meets these requirements?
G29A company wants to collect metrics such as Amazon EC2 CPU utilization, visualize them on a dashboard, and automatically trigger alarms with notifications or actions when a threshold is exceeded. Which AWS service BEST meets these requirements?
G29Which TWO of the following correctly match an AWS AI service with its function? (Choose TWO.)
G29A company wants to automatically extract sentiment (positive/negative), key phrases, and named entities from a large volume of customer review text. Which AWS service is MOST suitable for this use case?
G30Which TWO combinations of an AWS compute service and its characteristic are correct? (Choose TWO.)
G30A company wants to automatically extract not only text but also tables and form fields as structured data from scanned document images such as invoices and application forms. Which AWS service is MOST suitable for this requirement?
G30Which configuration is effective for improving the availability of an RDS database and automatically failing over to a standby instance in a different Availability Zone when the primary instance fails?
G30Which fully managed service allows a company to build, train, and deploy machine learning models end to end?
G30An RDS database handles an extremely high volume of read queries. Which feature is effective for distributing read traffic and improving the read performance of the application?
G20A company wants to calculate the projected costs of migrating to AWS based on actual on-premises usage data, and create a migration business case (investment justification document). Which service is MOST suitable for this requirement?
G20A company wants to find certified third-party consulting firms and system integrators that can assist with migrating to AWS and building out the environment. Which mechanism is MOST suitable for this requirement?
G20Which statement BEST describes the primary benefit of using AWS Organizations Consolidated Billing?
G20Which TWO practices represent appropriate ways to optimize AWS costs? (Choose TWO.)
G20What is the term for the fundamental AWS pricing model in which a customer pays only for the resources actually consumed, without any upfront payment or long-term contract?
G21An initiative to identify and stop unused resources, choose appropriate instance sizes, and eliminate wasteful spending maps to which pillar of the AWS Well-Architected Framework?
G21An application currently runs in a single Availability Zone. Which approach is MOST appropriate for improving availability so that service continues even if an AZ failure occurs?
G21Which statement BEST describes the purpose of the AWS Well-Architected Framework?
G21A company wants to conduct a self-review of a designed workload by answering questions aligned with the Well-Architected pillars, and then document the risks and improvement plan in a report. Which tool is MOST appropriate?
G21Which TWO options are officially defined pillars of the AWS Well-Architected Framework? (Choose TWO.)
G22Which TWO combinations correctly pair an AWS governance and auditing service with its role? (Choose TWO.)
G22In IAM, what is the JSON-format document that defines which users or roles are allowed or denied specific actions on specific AWS resources?
G22A company wants to aggregate findings from multiple security services such as GuardDuty and Macie into a single location and manage the overall security posture in a centralized view. Which service is MOST suitable for this requirement?
G22For requests received by Amazon API Gateway, who is responsible for implementing security settings such as authentication (API key validation, IAM authentication, etc.) and rate limiting (DDoS protection)?
G22Which service automatically checks an AWS environment against best practices across categories such as cost optimization, performance, security, fault tolerance, and service quotas, and provides improvement recommendations?
G31Which managed file system can be mounted and shared by multiple Linux EC2 instances at the same time and scales automatically as stored capacity grows?
G31Which PaaS-like service lets developers simply upload application code while AWS automatically handles server provisioning, capacity adjustment, load balancing, and deployment?
G31Which AWS service is BEST suited for automatically transcribing recorded audio from meetings or call centers into text so that it can be searched and analyzed?
G31Which service can run, in a serverless manner, the ETL process that extracts data from various data sources, transforms it into an analysis-friendly form, and loads it into another destination?
G31Which combinations of an AWS network or delivery service and its role are correct? (Choose TWO.)
G32Which service is BEST suited for using a relational database such as MySQL or PostgreSQL while delegating operations like backups, patching, and failure recovery to AWS?
G32A company wants to migrate a running database to AWS while keeping downtime as low as possible. Which managed service can keep the source database running during the migration?
G32Which Pub/Sub messaging service can broadcast a notification of an event to multiple subscribers (such as email, Lambda, and SQS) at the same time when the event occurs?
G32Which combinations of an AWS migration, backup, or disaster recovery service and its role are correct? (Choose TWO.)
G32Which managed BI service is BEST suited for visualizing analyzed data as charts and dashboards and sharing it with business stakeholders?
G24When traffic to a web application spikes suddenly, what is the method of distributing the load by adding one server at a time called?
G24Which service category is Amazon S3 classified under?
G24Which TWO statements about AWS Regions and Availability Zones are correct? (Choose TWO.)
G24A new startup has decided to build all of its systems on AWS without owning any servers. Which deployment model does this represent?
G24A company is planning a cloud migration and wants to strengthen its organizational capabilities for managing migration-related risks and ensuring compliance. Which perspective of the AWS Cloud Adoption Framework (AWS CAF) does this correspond to?
G25What is the mechanism called that encrypts data exchanged between a user's browser and a web server so that it cannot be intercepted on the communication path?
G25Which mechanism requires an additional factor such as a one-time code in addition to a password at sign-in, making it harder for an attacker to log in even if the password is compromised?
G25Under the shared responsibility model, which TWO items are ALWAYS the customer's responsibility regardless of the type of service used? (Choose TWO.)
G25Which AWS service is specifically designed to protect applications on AWS from DDoS attacks that flood the service with large volumes of requests and cause it to stop responding?
G25Which statement about AWS Shield Standard is correct?
G33Which service is BEST suited for connecting an on-premises data center and AWS over a dedicated line that does not traverse the internet, ensuring stable bandwidth and consistent low latency?
G33Which combinations of an EC2 purchasing option and its characteristic are correct? (Choose TWO.)
G33Which AWS service can compile source code, run tests, and generate a deployable artifact without managing servers?
G33A company wants to receive a globally accessed TCP-based application on fixed static IP addresses and route it through the AWS global network to the nearest healthy Region to improve availability and performance. Which service is BEST suited?
G33Which AWS-native relational database is compatible with MySQL and PostgreSQL and provides commercial-grade performance and availability through a cloud-native design?
G34A company wants to migrate hundreds of terabytes of on-premises data to AWS, but its network line is thin and online transfer would take months. Which service can migrate the data by loading it onto physical devices and shipping them to AWS?
G34The access frequency of some data varies greatly over time, and its future access pattern cannot be predicted. Which S3 storage class is BEST suited to automatically move the data to the most cost-effective tier based on access without manual movement?
G34Which AWS service is BEST suited for a developer who wants to quickly build and publish the frontend of a web or mobile application, including hosting, authentication, APIs, and CI/CD?
G34Which service provides hybrid storage integration in which on-premises applications access data over familiar protocols while the actual data is stored in AWS cloud storage?
G34Which combinations of an AWS developer tool or business application service and its role are correct? (Choose TWO.)
G27Regulations require that encryption keys be managed on a company-owned dedicated physical hardware security module (HSM). Which AWS service meets this requirement?
G27Which TWO combinations of AWS security service and its primary role are correct? (Choose TWO.)
G27What is the security principle called that grants users and applications ONLY the minimum permissions necessary for their job and does NOT grant unnecessary permissions?
G27Which managed service centrally creates and manages the encryption keys used to encrypt data in Amazon S3, Amazon EBS, and other services, while also providing access control and auditing capabilities?
G27Which statement CORRECTLY describes the difference between a security group and a network ACL (NACL)?
G35Which AWS service is BEST suited for automatically detecting and analyzing objects, scenes, faces, and inappropriate content in large numbers of uploaded images and videos?
G35When migrating an Oracle database to Amazon Aurora PostgreSQL, which tool converts the schema and code that is needed because the database engines differ?
G35Which AWS service is BEST suited for converting written text into an audio file read aloud in a natural voice?
G35Which combinations of an AWS AI or generative AI service and its role are correct? (Choose TWO.)
G35Servers in a private subnet must be allowed only outbound communication to the internet for software updates, and must NOT receive direct access from the internet. Which component is BEST suited?

AWS exam prep content