AWS Certified Cloud Practitioner CLF-C02 v1.
0 (AWS Certified Cloud Practitioner CLF-
C02) - Full Access
Disclaimer: We declare no affiliation, sponsorship, nor any partnerships with Amazon or any of its trademarks.
Question 201 ( Exam A )
A company is storing data that will not be frequently accessed in the AWS Cloud. If the company needs to access the data, the data needs to be retrieved within 12 hours. The company wants a solution that is
cost-effective for storage costs for each gigabyte.
Which Amazon S3 storage class will meet these requirements?
A. S3 Standard
B. S3 Glacier Flexible Retrieval
C. S3 One Zone-Infrequent Access (S3 One Zone-IA)
D. S3 Standard-Infrequent Access (S3 Standard-IA)
Answer : B
Question 202 ( Exam A )
Which AWS service or resource can be used to identify services that have been used by a user within a specified date range?
A. Amazon S3 access control lists (ACLs)
B. AWS Certificate Manager (ACM)
C. Network Access Analyzer
D. AWS Identity and Access Management Access Analyzer
Answer : D
Question 203 ( Exam A )
A company needs to engage third-party consultants to help maintain and support its AWS environment and the company’s business needs.
Which AWS service or resource will meet these requirements?
A. AWS Support
B. AWS Organizations
C. AWS Service Catalog
D. AWS Partner Network (APN)
Answer : D
Question 204 ( Exam A )
A company wants to create Amazon QuickSight dashboards every week by using its billing data.
Which AWS feature or tool can the company use to meet these requirements?
A. AWS Budgets
B. AWS Cost Explorer
C. AWS Cost and Usage Report
D. AWS Cost Anomaly Detection
Answer : C
https://www.itexams.com/exam/AWS-Certified-Cloud-Practitioner-CLF-C02? 12/13/23, 6 37 PM
Page 1 of 13
:
Question 205 ( Exam A )
A company is planning to move data backups to the AWS Cloud. The company needs to replace on-premises storage with storage that is cloud-based but locally cached.
Which AWS service meets these requirements?
A. AWS Storage Gateway
B. AWS Snowcone
C. AWS Backup
D. Amazon Elastic File System (Amazon EFS)
Answer : A
Question 206 ( Exam A )
A company needs to organize its resources and track AWS costs on a detailed level. The company needs to categorize costs by business department, environment, and application.
Which solution will meet these requirements?
A. Access the AWS Cost Management console to organize resources, set an AWS budget, and receive notifications of unintentional usage.
B. Use tags to organize the resources. Activate cost allocation tags to track AWS costs on a detailed level.
C. Create Amazon CloudWatch dashboards to visually organize and track costs individually.
D. Access the AWS Billing and Cost Management dashboard to organize and track resource consumption on a detailed level.
Answer : B
Question 207 ( Exam A )
A company needs to plan, schedule, and run hundreds of thousands of computing jobs on AWS.
Which AWS service can the company use to meet this requirement?
A. AWS Step Functions
B. AWS Service Catalog
C. Amazon Simple Queue Service (Amazon SQS)
D. AWS Batch
Answer : D
Question 208 ( Exam A )
Which AWS services or features provide high availability and low latency by enabling failover across different AWS Regions? (Choose two.)
A. Amazon Route 53
B. Network Load Balancer
C. Amazon S3 Transfer Acceleration
D. AWS Global Accelerator
E. Application Load Balancer
Answer : AD
https://www.itexams.com/exam/AWS-Certified-Cloud-Practitioner-CLF-C02? 12/13/23, 6 37 PM
Page 2 of 13
:
Question 209 ( Exam A )
Which of the following is a way to use Amazon EC2 Auto Scaling groups to scale capacity in the AWS Cloud?
A. Scale the number of EC2 instances in or out automatically, based on demand.
B. Use serverless EC2 instances.
C. Scale the size of EC2 instances up or down automatically, based on demand.
D. Transfer unused CPU resources between EC2 instances.
Answer : A
Question 210 ( Exam A )
Which abilities are benefits of the AWS Cloud? (Choose two.)
A. Trade variable expenses for capital expenses.
B. Deploy globally in minutes.
C. Plan capacity in advance of deployments.
D. Take advantage of economies of scale.
E. Reduce dependencies on network connectivity.
Answer : BD
Question 211 ( Exam A )
Which AWS security service protects applications from distributed denial of service attacks with always-on detection and automatic inline mitigations?
A. Amazon Inspector
B. AWS Web Application Firewall (AWS WAF)
C. Elastic Load Balancing (ELB)
D. AWS Shield
Answer : D
Question 212 ( Exam A )
Which AWS service allows users to model and provision AWS resources using common programming languages?
A. AWS CloudFormation
B. AWS CodePipeline
C. AWS Cloud Development Kit (AWS CDK)
D. AWS Systems Manager
Answer : C
https://www.itexams.com/exam/AWS-Certified-Cloud-Practitioner-CLF-C02? 12/13/23, 6 37 PM
Page 3 of 13
:
Question 213 ( Exam A )
Which Amazon EC2 instance pricing model can provide discounts of up to 90%?
A. Reserved Instances
B. On-Demand
C. Dedicated Hosts
D. Spot Instances
Answer : D
Question 214 ( Exam A )
Which of the following acts as an instance-level firewall to control inbound and outbound access?
A. Network access control list
B. Security groups
C. AWS Trusted Advisor
D. Virtual private gateways
Answer : B
Question 215 ( Exam A )
A company must be able to develop, test, and launch an application in the AWS Cloud quickly.
Which advantage of cloud computing will meet these requirements?
A. Stop guessing capacity
B. Trade fixed expense for variable expense
C. Achieve economies of scale
D. Increase speed and agility
Answer : D
Question 216 ( Exam A )
A company has teams that have different job roles and responsibilities. The company’s employees often change teams. The company needs to manage permissions for the employees so that the permissions
are appropriate for the job responsibilities.
Which IAM resource should the company use to meet this requirement with the LEAST operational overhead?
A. IAM user groups
B. IAM roles
C. IAM instance profiles
D. IAM policies for individual users
Answer : B
https://www.itexams.com/exam/AWS-Certified-Cloud-Practitioner-CLF-C02? 12/13/23, 6 37 PM
Page 4 of 13
:
Question 217 ( Exam A )
Which AWS service can a company use to securely store and encrypt passwords for a database?
A. AWS Shield
B. AWS Secrets Manager
C. AWS Identity and Access Management (IAM)
D. Amazon Cognito
Answer : B
Question 218 ( Exam A )
What can a cloud practitioner use to retrieve AWS security and compliance documents and submit them as evidence to an auditor or regulator?
A. AWS Certificate Manager
B. AWS Systems Manager
C. AWS Artifact
D. Amazon Inspector
Answer : C
Question 219 ( Exam A )
Which encryption types can be used to protect objects at rest in Amazon S3? (Choose two.)
A. Server-side encryption with Amazon S3 managed encryption keys (SSE-S3)
B. Server-side encryption with AWS KMS managed keys (SSE-KMS)
C. TLS
D. SSL
E. Transparent Data Encryption (TDE)
Answer : AB
Question 220 ( Exam A )
A company wants to integrate its online shopping website with social media login credentials.
Which AWS service can the company use to make this integration?
A. AWS Directory Service
B. AWS Identity and Access Management (IAM)
C. Amazon Cognito
D. AWS IAM Identity Center (AWS Single Sign-On)
Answer : C
https://www.itexams.com/exam/AWS-Certified-Cloud-Practitioner-CLF-C02? 12/13/23, 6 37 PM
Page 5 of 13
:
Question 221 ( Exam A )
Which AWS service is used to track, record, and audit configuration changes made to AWS resources?
A. AWS Shield
B. AWS Config
C. AWS IAM
D. Amazon Inspector
Answer : B
Question 222 ( Exam A )
A customer runs an On-Demand Amazon Linux EC2 instance for 3 hours, 5 minutes, and 6 seconds.
For how much time will the customer be billed?
A. 3 hours, 5 minutes
B. 3 hours, 5 minutes, and 6 seconds
C. 3 hours, 6 minutes
D. 4 hours
Answer : C
Question 223 ( Exam A )
A company website is experiencing DDoS attacks.
Which AWS service can help protect the company website against these attacks?
A. AWS Resource Access Manager
B. AWS Amplify
C. AWS Shield
D. Amazon GuardDuty
Answer : C
Question 224 ( Exam A )
A company wants a customized assessment of its current on-premises environment. The company wants to understand its projected running costs in the AWS Cloud.
Which AWS service or tool will meet these requirements?
A. AWS Trusted Advisor
B. Amazon Inspector
C. AWS Control Tower
D. Migration Evaluator
Answer : D
https://www.itexams.com/exam/AWS-Certified-Cloud-Practitioner-CLF-C02? 12/13/23, 6 37 PM
Page 6 of 13
:
Question 225 ( Exam A )
A company that has multiple business units wants to centrally manage and govern its AWS Cloud environments. The company wants to automate the creation of AWS accounts, apply service control policies
(SCPs), and simplify billing processes.
Which AWS service or tool should the company use to meet these requirements?
A. AWS Organizations
B. Cost Explorer
C. AWS Budgets
D. AWS Trusted Advisor
Answer : A
Question 226 ( Exam A )
A company is hosting an application in the AWS Cloud. The company wants to verify that underlying AWS services and general AWS infrastructure are operating normally.
Which combination of AWS services can the company use to gather the required information? (Choose two.)
A. AWS Personal Health Dashboard
B. AWS Systems Manager
C. AWS Trusted Advisor
D. AWS Service Health Dashboard
E. AWS Service Catalog
Answer : AD
Question 227 ( Exam A )
A company needs to migrate a PostgreSQL database from on-premises to Amazon RDS.
Which AWS service or tool should the company use to meet this requirement?
A. Cloud Adoption Readiness Tool
B. AWS Migration Hub
C. AWS Database Migration Service (AWS DMS)
D. AWS Application Migration Service
Answer : C
Question 228 ( Exam A )
Which cloud concept is demonstrated by using AWS Compute Optimizer?
A. Security validation
B. Rightsizing
C. Elasticity
D. Global reach
Answer : B
https://www.itexams.com/exam/AWS-Certified-Cloud-Practitioner-CLF-C02? 12/13/23, 6 37 PM
Page 7 of 13
:
Question 229 ( Exam A )
A company hosts a large amount of data in AWS. The company wants to identify if any of the data should be considered sensitive.
Which AWS service will meet the requirement?
A. Amazon Inspector
B. Amazon Macie
C. AWS Identity and Access Management (IAM)
D. Amazon CloudWatch
Answer : B
Question 230 ( Exam A )
A user has a stateful workload that will run on Amazon EC2 for the next 3 years.
What is the MOST cost-effective pricing model for this workload?
A. On-Demand Instances
B. Reserved Instances
C. Dedicated Instances
D. Spot Instances
Answer : B
Question 231 ( Exam A )
Who enables encryption of data at rest for Amazon Elastic Block Store (Amazon EBS)?
A. AWS Support
B. AWS customers
C. AWS Key Management Service (AWS KMS)
D. AWS Trusted Advisor
Answer : B
Question 232 ( Exam A )
What can a user accomplish using AWS CloudTrail?
A. Generate an IAM user credentials report.
B. Record API calls made to AWS services.
C. Assess the compliance of AWS resource configurations with policies and guidelines.
D. Ensure that Amazon EC2 instances are patched with the latest security updates.
Answer : B
https://www.itexams.com/exam/AWS-Certified-Cloud-Practitioner-CLF-C02? 12/13/23, 6 37 PM
Page 8 of 13
:
Question 233 ( Exam A )
A company is planning to host its workloads on AWS.
Which AWS service requires the company to update and patch the guest operating system?
A. Amazon DynamoDB
B. Amazon S3
C. Amazon EC2
D. Amazon Aurora
Answer : C
Question 234 ( Exam A )
Which AWS service or feature will search for and identify AWS resources that are shared externally?
A. Amazon OpenSearch Service
B. AWS Control Tower
C. AWS IAM Access Analyzer
D. AWS Fargate
Answer : C
Question 235 ( Exam A )
A company is migrating its workloads to the AWS Cloud. The company must retain full control of patch management for the guest operating systems that host its applications.
Which AWS service should the company use to meet these requirements?
A. Amazon DynamoDB
B. Amazon EC2
C. AWS Lambda
D. Amazon RDS
Answer : B
Question 236 ( Exam A )
At what support level do users receive access to a support concierge?
A. Basic Support
B. Developer Support
C. Business Support
D. Enterprise Support
Answer : D
https://www.itexams.com/exam/AWS-Certified-Cloud-Practitioner-CLF-C02? 12/13/23, 6 37 PM
Page 9 of 13
:
Question 237 ( Exam A )
Which AWS service can a company use to visually design and build serverless applications?
A. AWS Lambda
B. AWS Batch
C. AWS Application Composer
D. AWS App Runner
Answer : C
Question 238 ( Exam A )
A company wants to migrate to AWS and use the same security software it uses on premises. The security software vendor offers its security software as a service on AWS.
Where can the company purchase the security solution?
A. AWS Partner Solutions Finder
B. AWS Support Center
C. AWS Management Console
D. AWS Marketplace
Answer : D
Question 239 ( Exam A )
A company has deployed an Amazon EC2 instance.
Which option is an AWS responsibility under the AWS shared responsibility model?
A. Managing and encrypting application data
B. Installing updates and security patches of guest operating system
C. Configuration of infrastructure devices
D. Configuration of security groups on each instance
Answer : C
Question 240 ( Exam A )
A company wants to migrate its PostgreSQL database to AWS. The company does not use the database frequently.
Which AWS service or resource will meet these requirements with the LEAST management overhead?
A. PostgreSQL on Amazon EC2
B. Amazon RDS for PostgreSQL
C. Amazon Aurora PostgreSQL-Compatible Edition
D. Amazon Aurora Serverless
Answer : D
https://www.itexams.com/exam/AWS-Certified-Cloud-Practitioner-CLF-C02? 12/13/23, 6 37 PM
Page 10 of 13
:
Question 241 ( Exam A )
A company is using Amazon DynamoDB for its application database.
Which tasks are the responsibility of AWS, according to the AWS shared responsibility model? (Choose two.)
A. Classify data.
B. Configure access permissions.
C. Manage encryption options.
D. Provide public endpoints to store and retrieve data.
E. Manage the infrastructure layer and the operating system.
Answer : DE
Question 242 ( Exam A )
A company wants to create a globally accessible ecommerce platform for its customers. The company wants to use a highly available and scalable DNS web service to connect users to the platform.
Which AWS service will meet these requirements?
A. Amazon EC2
B. Amazon VPC
C. Amazon Route 53
D. Amazon RDS
Answer : C
Question 243 ( Exam A )
Which maintenance task is the customer’s responsibility, according to the AWS shared responsibility model?
A. Physical connectivity among Availability Zones
B. Network switch maintenance
C. Hardware updates and firmware patches
D. Amazon EC2 updates and security patches
Answer : D
Question 244 ( Exam A )
A company wants to improve its security posture by reviewing user activity through API calls.
Which AWS service will meet this requirement?
A. AWS WAF
B. Amazon Detective
C. Amazon CloudWatch
D. AWS CloudTrail
Answer : D
https://www.itexams.com/exam/AWS-Certified-Cloud-Practitioner-CLF-C02? 12/13/23, 6 37 PM
Page 11 of 13
:
Question 245 ( Exam A )
A company is migrating to the AWS Cloud and plans to run experimental workloads for 3 to 6 months on AWS.
Which pricing model will meet these requirements?
A. Use Savings Plans for a 3-year term.
B. Use Dedicated Hosts.
C. Buy Reserved Instances.
D. Use On-Demand Instances.
Answer : D
Question 246 ( Exam A )
A company that has AWS Enterprise Support is launching a new version of a popular product in 2 months. The company expects a large increase in traffic to its website. The website is hosted on Amazon EC2
instances.
Which action should the company take to assess its readiness to scale for this launch?
A. Replace the EC2 instances with AWS Lambda functions.
B. Use AWS Infrastructure Event Management (IEM) support.
C. Submit a request on AWS Marketplace to monitor the event.
D. Review the coverage reports in the AWS Cost Management console.
Answer : B
Question 247 ( Exam A )
A company wants to launch multiple workloads on AWS. Each workload is related to a different business unit. The company wants to separate and track costs for each business unit.
Which solution will meet these requirements with the LEAST operational overhead?
A. Use AWS Organizations and create one account for each business unit.
B. Use a spreadsheet to control the owners and cost of each resource.
C. Use an Amazon DynamoDB table to record costs for each business unit.
D. Use the AWS Billing console to assign owners to resources and track costs.
Answer : A
Question 248 ( Exam A )
A company wants a time-series database service that makes it easier to store and analyze trillions of events each day.
Which AWS service will meet this requirement?
A. Amazon Neptune
B. Amazon Timestream
C. Amazon Forecast
D. Amazon DocumentDB (with MongoDB compatibility)
Answer : B
https://www.itexams.com/exam/AWS-Certified-Cloud-Practitioner-CLF-C02? 12/13/23, 6 37 PM
Page 12 of 13
:
Question 249 ( Exam A )
Which option is a shared control between AWS and the customer, according to the AWS shared responsibility model?
A. Configuration management
B. Physical and environmental controls
C. Data integrity authentication
D. Identity and access management
Answer : D
Question 250 ( Exam A )
A company often does not use all of its current Amazon EC2 capacity to run stateless workloads. The company wants to optimize its EC2 costs.
Which EC2 instance type will meet these requirements?
A. Spot Instances
B. Dedicated Instances
C. Reserved Instances
D. On-Demand Instances
Answer : A
Question 251 ( Exam A )
A company wants to store data in Amazon S3. The company rarely access the data, and the data can be regenerated if necessary. The company wants to store the data in the most cost-effective storage class.
Which S3 storage class will meet this requirement?
A. S3 Standard
B. S3 Intelligent-Tiering
C. S3 Standard-Infrequent Access (S3 Standard-IA)
D. S3 One Zone-Infrequent Access (S3 One Zone-IA)
Answer : D
Question 252 ( Exam A )
A company has migrated its workloads to AWS. The company wants to adopt AWS at scale and operate more efficiently and securely. Which AWS service or framework should the company use for operational
support?
A. AWS Support
B. AWS Cloud Adoption Framework (AWS CAF)
C. AWS Managed Services (AMS)
D. AWS Well-Architected Framework
Answer : D
https://www.itexams.com/exam/AWS-Certified-Cloud-Practitioner-CLF-C02? 12/13/23, 6 37 PM
Page 13 of 13
:
