Amazon CLF-C02 AWS Certified Cloud Practitioner (CLF-C02) Free Practice Test — 30 Questions

Question 1

A company is designing a cloud architecture for a new application that requires high availability and fault tolerance. The application will be deployed across multiple AWS regions to ensure that it remains operational even in the event of a regional failure. The architecture must also support automatic scaling based on user demand. Which architectural pattern should the company implement to achieve these requirements effectively?

Accepted Answer

Multi-Region Active-Active Architecture

Question 2

A financial services company is implementing a new cloud-based application that handles sensitive customer data, including personal identification information (PII) and financial records. The company needs to ensure that data is protected both at rest and in transit. They decide to use encryption as a primary security measure. Which of the following strategies would best ensure the confidentiality and integrity of the data throughout its lifecycle?

Accepted Answer

Implementing AES-256 encryption for data at rest and using TLS 1.2 for data in transit.

Question 3

A company is experiencing rapid growth in its online retail business, leading to a significant increase in website traffic. The IT team is tasked with ensuring that the website can handle this increased load without performance degradation. They are considering two approaches: vertical scaling, which involves upgrading the existing server to a more powerful machine, and horizontal scaling, which involves adding more servers to distribute the load. Given that the company anticipates further growth and fluctuating traffic patterns, which approach would be more effective in achieving scalability while maintaining performance?

Accepted Answer

Horizontal scaling, as it allows for distributing the load across multiple servers and can accommodate sudden spikes in traffic more effectively.

Question 4

A company is planning to migrate its web application to AWS and wants to estimate the monthly costs using the AWS Pricing Calculator. The application will run on an EC2 instance with the following specifications: a t3.medium instance type, running 24 hours a day for 30 days, in the US East (N. Virginia) region. The company also anticipates using 100 GB of EBS General Purpose SSD storage and transferring 500 GB of data out to the internet each month. Given the following pricing details: EC2 t3.medium instance costs $0.0416 per hour, EBS General Purpose SSD storage costs $0.10 per GB per month, and data transfer out to the internet costs $0.09 per GB, what will be the total estimated monthly cost for the application?

Accepted Answer

$134.56

Question 5

A company is planning to migrate its on-premises infrastructure to the cloud and is considering using Infrastructure as a Service (IaaS) for its operations. The company has a workload that requires variable compute resources, with peak usage occurring during specific times of the day. They are evaluating the cost implications of using IaaS versus maintaining their existing physical servers. If the company estimates that their peak usage requires 10 virtual machines (VMs) running at 80% utilization for 4 hours a day, and their off-peak usage requires 2 VMs running at 20% utilization for the remaining 20 hours, how would you calculate the total monthly cost of using IaaS if each VM costs $0.10 per hour?

Accepted Answer

$144

Question 6

A company is evaluating different cloud service models to optimize its IT infrastructure for a new application that requires high scalability and minimal management overhead. The application is expected to handle variable workloads, with peak usage during specific times of the day. Considering the company\'s need for flexibility, cost-effectiveness, and the ability to quickly deploy resources, which cloud service model would best suit their requirements?

Accepted Answer

Platform as a Service (PaaS)

Question 7

A company is implementing AWS Identity and Access Management (IAM) to manage user permissions effectively. They have a scenario where a new project requires a specific set of permissions for a team of developers. The project manager wants to ensure that only the developers assigned to this project can access the resources necessary for their work, while also maintaining the principle of least privilege. Which approach should the company take to achieve this goal while ensuring that permissions can be easily managed and audited?

Accepted Answer

Create a new IAM group for the developers, assign the necessary permissions to that group, and add the developers to this group.

Question 8

A company is planning to deploy a multi-tier web application on AWS that requires high availability and low latency for its users across different geographical regions. The application will utilize Amazon Route 53 for DNS management and AWS Global Accelerator to optimize the path to the application endpoints. Given this scenario, which combination of services and configurations would best ensure that the application remains resilient and performs optimally under varying loads and potential regional outages?

Accepted Answer

Use Amazon CloudFront for content delivery, configure Route 53 with latency-based routing, and set up health checks for the application endpoints.

Question 9

A company has been using AWS services for several months and wants to analyze its spending patterns to optimize costs. They have identified that their monthly bill fluctuates significantly, and they want to understand the factors contributing to these changes. The company decides to use AWS Cost Explorer to visualize their costs over the past six months. If their total spending for the last six months was $12,000, and they want to calculate the average monthly cost, what would be the average monthly cost? Additionally, if they notice that their costs increased by 20% in the last month compared to the previous month, what was the cost for the previous month?

Accepted Answer

$2,000

Question 10

A company is planning to migrate its web application to AWS and wants to estimate the monthly costs using the AWS Pricing Calculator. The application will use the following services: EC2 instances (2 x t3.medium), RDS (1 x db.t3.medium), and S3 storage (500 GB). The company expects to run the EC2 instances for 720 hours a month and the RDS instance for 720 hours as well. Additionally, they anticipate transferring 100 GB of data out of S3 each month. Given the following pricing: EC2 t3.medium at $0.0416 per hour, RDS db.t3.medium at $0.018 per hour, S3 storage at $0.023 per GB, and data transfer out at $0.09 per GB, what will be the estimated total monthly cost for these services?

Accepted Answer

$66.76

Question 11

A company is planning to migrate its on-premises database to AWS and is considering using Amazon RDS for its relational database needs. The database currently handles an average of 500 transactions per second (TPS) and peaks at 1,200 TPS during high traffic periods. The company wants to ensure that the new database can scale to handle these peak loads without performance degradation. Which of the following strategies should the company implement to optimize performance and ensure scalability in Amazon RDS?

Accepted Answer

Utilize Amazon RDS Read Replicas to distribute read traffic and improve performance during peak loads.

Question 12

A cloud engineer is tasked with automating the deployment of a web application using the AWS Command Line Interface (CLI). The application requires the creation of an Amazon S3 bucket, an IAM role with specific permissions, and the deployment of an EC2 instance. The engineer writes a script that includes commands to create the S3 bucket and the IAM role, but they are unsure how to ensure that the EC2 instance has the correct IAM role attached to it upon launch. Which approach should the engineer take to ensure that the EC2 instance is launched with the appropriate IAM role?

Accepted Answer

Use the `--iam-instance-profile` parameter in the `aws ec2 run-instances` command to specify the IAM role when launching the instance.

Question 13

A company is implementing a new cloud-based application that requires specific permissions for different user roles. The roles include Admin, Developer, and Viewer. The Admin role should have full access to all resources, the Developer role should have permissions to create and modify resources, and the Viewer role should only have read access. The company is using AWS Identity and Access Management (IAM) to manage these permissions. If the company wants to ensure that no user can escalate their privileges beyond their assigned role, which of the following approaches would best achieve this goal while adhering to the principle of least privilege?

Accepted Answer

Create separate IAM policies for each role that explicitly define the allowed actions and attach them to the respective users or groups.

Question 14

A data analyst is tasked with optimizing the performance of a data warehouse using Amazon Redshift. The analyst notices that certain queries are running slower than expected, particularly those involving large datasets. To address this, the analyst considers implementing distribution styles for the tables involved. Which distribution style would be most effective for a table that is frequently joined with another large table on a specific key, and what are the implications of this choice on query performance and data distribution?

Accepted Answer

Key distribution

Question 15

A company is developing a new application that will handle variable workloads, such as spikes in user traffic during promotional events. They are considering using a serverless architecture to manage their backend services. Which of the following considerations is most critical when designing a serverless application to ensure optimal performance and cost efficiency during these variable workloads?

Accepted Answer

Implementing a robust monitoring and logging system to track function performance and usage patterns

Question 16

A smart agricultural company is implementing an IoT solution on AWS to monitor soil moisture levels across multiple fields. They plan to use AWS IoT Core to connect their sensors, which will send data every 10 minutes. The company wants to analyze this data in real-time to optimize irrigation schedules. If each sensor sends a data payload of 250 bytes, calculate the total data sent by one sensor in a day and discuss how AWS IoT Core can facilitate the processing of this data for real-time analytics.

Accepted Answer

36 MB

Question 17

A company is experiencing rapid growth in its online retail business, leading to a significant increase in website traffic. The IT team is tasked with ensuring that the website can handle this increased load without performance degradation. They are considering two approaches: vertical scaling, which involves upgrading the existing server\'s hardware, and horizontal scaling, which involves adding more servers to distribute the load. Given that the company anticipates further growth and fluctuating traffic patterns, which approach would be more effective in achieving scalability while maintaining cost efficiency and flexibility?

Accepted Answer

Horizontal scaling, as it allows for adding or removing servers based on demand, providing better flexibility and cost management.

Question 18

A financial services company is migrating its applications to AWS and is focused on ensuring high availability for its critical services. They plan to deploy their application across multiple Availability Zones (AZs) within a single AWS Region. The application architecture includes a load balancer, multiple EC2 instances, and a database. To achieve high availability, the company needs to understand the implications of deploying resources across AZs. Which of the following strategies would best enhance the high availability of their application while minimizing downtime during maintenance or unexpected failures?

Accepted Answer

Deploying EC2 instances in at least two different Availability Zones and configuring the load balancer to distribute traffic across these instances.

Question 19

A financial services company is planning to deploy a new application that requires ultra-low latency for its users located in a specific metropolitan area. The company is considering using AWS Local Zones to enhance the performance of their application. Which of the following considerations should the company prioritize when deciding to utilize AWS Local Zones for their deployment?

Accepted Answer

The proximity of Local Zones to end-users to minimize latency and improve application responsiveness.

Question 20

A company is deploying a web application using AWS Elastic Beanstalk. The application is expected to handle varying levels of traffic throughout the day, with peak usage during business hours and minimal usage at night. The development team wants to ensure that the application can scale automatically based on the incoming traffic while minimizing costs. Which configuration should the team implement to achieve this goal effectively?

Accepted Answer

Configure Auto Scaling with a minimum of 1 instance and a maximum of 5 instances, and set up a scaling policy based on CPU utilization thresholds of 30% for scaling out and 10% for scaling in.

Question 21

A company is deploying a multi-tier application using AWS CloudFormation. The architecture consists of a web tier, an application tier, and a database tier. The company wants to ensure that the application can scale automatically based on traffic and that the resources are provisioned in a secure manner. Which of the following strategies should the company implement in their CloudFormation template to achieve these goals?

Accepted Answer

Use AWS Auto Scaling groups for the web and application tiers, and define security groups to restrict access to the database tier.

Question 22

A company is evaluating its cloud strategy and is considering the deployment of a multi-tier application architecture on AWS. The application consists of a web tier, an application tier, and a database tier. The company wants to ensure high availability and fault tolerance across all tiers. Which architectural approach should the company adopt to achieve these goals while minimizing costs?

Accepted Answer

Deploy each tier in multiple Availability Zones (AZs) using Elastic Load Balancing (ELB) and Amazon RDS with Multi-AZ deployments.

Question 23

A company is implementing AWS Identity and Access Management (IAM) to manage access to its resources. The security team has decided to create a policy that allows users to perform specific actions on S3 buckets. They want to ensure that only users in the \"DataAnalysts\" group can list the contents of a specific S3 bucket named \"CompanyData\" while allowing all users in the \"DataAnalysts\" group to read objects from that bucket. Additionally, they want to restrict all other users from accessing the bucket entirely. Which of the following configurations would best achieve this requirement?

Accepted Answer

Create an IAM policy that allows the "s3:ListBucket" action for the "DataAnalysts" group on the "CompanyData" bucket and allows the "s3:GetObject" action for the same group on all objects within that bucket. Attach this policy to the "DataAnalysts" group.

Question 24

A company is evaluating its cloud strategy and is considering the deployment of a multi-cloud architecture. They want to understand the implications of using multiple cloud service providers for their applications. Which of the following best describes the primary advantage of adopting a multi-cloud strategy in terms of flexibility and risk management?

Accepted Answer

It allows the company to avoid vendor lock-in and leverage the best services from different providers.

Question 25

A multinational corporation is evaluating different cloud deployment models to optimize its IT infrastructure for a new global application that requires high availability and scalability. The application will be deployed across multiple regions to ensure low latency for users worldwide. Considering the need for compliance with various regional regulations and the desire to maintain control over sensitive data, which cloud deployment model would best suit the corporation\'s requirements?

Accepted Answer

Hybrid Cloud

Question 26

A global e-commerce company is planning to expand its services to multiple regions worldwide. They want to ensure low latency and high availability for their customers. To achieve this, they are considering deploying their application across multiple AWS Regions and Availability Zones. Which of the following strategies would best optimize their infrastructure for performance and reliability while minimizing costs?

Accepted Answer

Deploy the application in multiple AWS Regions, utilizing multiple Availability Zones within each Region to ensure redundancy and failover capabilities.

Question 27

A financial services company is implementing a new cloud-based data storage solution to comply with regulatory requirements for data protection. They need to ensure that sensitive customer data is encrypted both at rest and in transit. The company is considering various encryption methods and their implications on performance and security. Which encryption strategy should the company prioritize to achieve optimal data protection while maintaining system performance?

Accepted Answer

Use AES-256 encryption for data at rest and TLS 1.2 for data in transit

Question 28

A cloud engineer is tasked with automating the deployment of a web application using the AWS Command Line Interface (CLI). The application requires the creation of an Amazon S3 bucket, an IAM role with specific permissions, and the deployment of an EC2 instance that will host the application. The engineer needs to ensure that the S3 bucket is created with versioning enabled, the IAM role has permissions to access the S3 bucket, and the EC2 instance is launched with a specific security group. Which sequence of CLI commands should the engineer execute to achieve this?

Accepted Answer

`aws s3api create-bucket --bucket my-app-bucket --region us-west-2 && aws s3api put-bucket-versioning --bucket my-app-bucket --versioning-configuration Status=Enabled && aws iam create-role --role-name MyAppRole --assume-role-policy-document file://trust-policy.json && aws iam attach-role-policy --role-name MyAppRole --policy-arn arn:aws:iam::aws:policy/AmazonS3FullAccess && aws ec2 run-instances --image-id ami-12345678 --count 1 --instance-type t2.micro --security-group-ids sg-12345678 --iam-instance-profile Name=MyAppRole`

Question 29

A global e-commerce company is experiencing high latency issues for users accessing their website from various geographical locations. They decide to implement AWS CloudFront to improve the performance of their content delivery. The company has multiple origin servers located in different regions, and they want to ensure that users receive the content from the nearest edge location. Which of the following configurations would best optimize the performance and reduce latency for their users?

Accepted Answer

Configure CloudFront to use multiple origins and set up origin failover to ensure high availability and performance.

Question 30

A company is evaluating its cloud service provider options to enhance its business support capabilities. They are particularly interested in understanding the total cost of ownership (TCO) for a cloud solution compared to their current on-premises infrastructure. The current on-premises infrastructure incurs a fixed cost of $100,000 annually, with an additional variable cost of $20,000 for maintenance and support. The cloud provider offers a subscription model with a monthly fee of $8,000, which includes all maintenance and support. If the company plans to use the cloud service for 3 years, what is the total cost of ownership for both options, and which option is more cost-effective?

Accepted Answer

The cloud solution is more cost-effective with a TCO of $288,000.

Amazon CLF-C02 AWS Certified Cloud Practitioner (CLF-C02) Free Practice Test — 30 Questions

A lot more is already mapped out

About the Amazon CLF-C02 AWS Certified Cloud Practitioner (CLF-C02) Certification