Amazon AWS Certified Cloud Practitioner CLF-C02 Practice Test 1

Question 1

An AWS planning meeting highlights two independent requirements. Finding 1: A product team wants to test a new feature, but its private lab provides only one shared environment and long reservation queues. Finding 2: A business describes cloud adoption as eliminating every remaining operational task for its employees. Which two-part response addresses both findings in order?

(1) Create short-lived self-service test resources under controlled AWS account and budget guardrails. (2) Clarify that AWS manages cloud infrastructure while customers still govern their applications, data, and chosen configurations.
(1) Start with measured cloud capacity and adjust resource allocation as demand becomes observable. (2) Clarify that AWS manages cloud infrastructure while customers still govern their applications, data, and chosen configurations.
(1) Create short-lived self-service test resources under controlled AWS account and budget guardrails. (2) Use AWS global infrastructure and common deployment configurations across authorized Regions.
(1) Clarify that AWS manages cloud infrastructure while customers still govern their applications, data, and chosen configurations. (2) Create short-lived self-service test resources under controlled AWS account and budget guardrails.

Explanation

Correct Answer

For finding 1: Cloud self-service can accelerate experiments without making governance or cost control optional. For finding 2: Cloud agility reduces some infrastructure burdens but does not transfer all business and security responsibilities. Both actions are required.

Incorrect Answers

For finding 1: Cloud self-service can accelerate experiments without making governance or cost control optional. That action addresses a different situation: A startup expects an unpredictable launch date and wants to avoid predicting its exact server count a year in advance.

For finding 2: Cloud agility reduces some infrastructure burdens but does not transfer all business and security responsibilities. That action addresses a different situation: A publishing company wants employees to access the same approved service in multiple countries while retaining central operational standards.

The actions are reversed. The correct order is (1) Create short-lived self-service test resources under controlled AWS account and budget guardrails. (2) Clarify that AWS manages cloud infrastructure while customers still govern their applications, data, and chosen configurations.

Question 2

A team identifies three independent cloud planning needs. Finding 1: A content team needs durable storage for frequently retrieved images that will be served to a website. Finding 2: A business retains audit records for years and expects to retrieve them rarely, with retrieval time planned in advance. Finding 3: A dataset becomes less frequently accessed after ninety days and should move automatically to a suitable lower-cost storage class. Which complete response addresses all three findings in order?

(1) Choose S3 classes that meet retrieval latency needs rather than minimizing storage price alone. (2) Evaluate an appropriate S3 archival class after checking retrieval time and retention requirements. (3) Configure an Amazon S3 Lifecycle rule aligned with the object's age and access requirements.
(1) Use an appropriate Amazon S3 storage class for frequently accessed objects with controlled access. (2) Evaluate an appropriate S3 archival class after checking retrieval time and retention requirements. (3) Choose S3 classes that meet retrieval latency needs rather than minimizing storage price alone.
(1) Use an appropriate Amazon S3 storage class for frequently accessed objects with controlled access. (2) Evaluate an appropriate S3 archival class after checking retrieval time and retention requirements. (3) Configure an Amazon S3 Lifecycle rule aligned with the object's age and access requirements.
(1) Use an appropriate Amazon S3 storage class for frequently accessed objects with controlled access. (2) Choose S3 classes that meet retrieval latency needs rather than minimizing storage price alone. (3) Configure an Amazon S3 Lifecycle rule aligned with the object's age and access requirements.

Explanation

Correct Answer

For finding 1: S3 object storage suits durable files and different classes support different access patterns. For finding 2: Archival tiers trade retrieval characteristics for lower-cost long-term storage under suitable usage patterns. For finding 3: S3 Lifecycle transitions can automate cost-oriented object storage management. All three decisions are needed.

Incorrect Answers

For finding 1: S3 object storage suits durable files and different classes support different access patterns. That action addresses a different situation: An application needs to instantly read every object, but finance proposes an archive class with long retrieval delays as a universal cost fix.

For finding 3: S3 Lifecycle transitions can automate cost-oriented object storage management. That action addresses a different situation: An application needs to instantly read every object, but finance proposes an archive class with long retrieval delays as a universal cost fix.

For finding 2: Archival tiers trade retrieval characteristics for lower-cost long-term storage under suitable usage patterns. That action addresses a different situation: An application needs to instantly read every object, but finance proposes an archive class with long retrieval delays as a universal cost fix.

Question 3

A cloud adoption review identifies two separate needs. Finding 1: A service must retrieve a third-party API token that changes monthly, but operators currently redeploy the application to update the secret. Finding 2: A security reviewer grants a support engineer temporary diagnostic access, but the permission remains indefinitely after the incident closes. Which two-part response addresses both findings in order?

(1) Replace the distributed key with a suitable role-based short-lived credential mechanism and rotate exposed material. (2) Time-bound or remove the elevated access after its approved purpose ends and retain an access review record.
(1) Store and rotate the token through an approved AWS secret-management workflow with limited retrieval permissions. (2) Limit the IAM principal's permissions independently of how its credentials are stored.
(1) Store and rotate the token through an approved AWS secret-management workflow with limited retrieval permissions. (2) Time-bound or remove the elevated access after its approved purpose ends and retain an access review record.
(1) Time-bound or remove the elevated access after its approved purpose ends and retain an access review record. (2) Store and rotate the token through an approved AWS secret-management workflow with limited retrieval permissions.

Explanation

Correct Answer

For finding 1: Centralized secret storage can decouple credential rotation from application source releases. For finding 2: Privilege should not remain standing once its business justification has expired. Both actions are required.

Incorrect Answers

For finding 1: Centralized secret storage can decouple credential rotation from application source releases. That action addresses a different situation: An automation script uses a long-lived IAM access key that has been copied into several unencrypted workstation files.

For finding 2: Privilege should not remain standing once its business justification has expired. That action addresses a different situation: A team believes that encrypting an IAM access key file means the principal's permissions can safely include every AWS action.

The actions are reversed. The correct order is (1) Store and rotate the token through an approved AWS secret-management workflow with limited retrieval permissions. (2) Time-bound or remove the elevated access after its approved purpose ends and retain an access review record.

Question 4

Three AWS decisions are needed in the order given. Finding 1: A file service sends large quantities of data to customers across the internet, but its budget assumes every transferred byte costs the same as inbound upload. Finding 2: A backup team chooses the cheapest advertised S3 archival storage rate but expects thousands of immediate restores each day. Finding 3: An application communicates between two AWS Regions and the team assumes there can be no networking charges because both Regions belong to AWS. Which complete response addresses all three findings in order?

(1) Distinguish compute capacity reservation needs from savings commitments and evaluate their supported combinations. (2) Include retrieval, minimum-duration, and access-pattern considerations when comparing eligible S3 storage classes. (3) Review the relevant inter-Region data transfer pricing and architecture before estimating recurring costs.
(1) Check the applicable outbound and cross-boundary data transfer pricing rather than assuming it matches inbound transfer. (2) Include retrieval, minimum-duration, and access-pattern considerations when comparing eligible S3 storage classes. (3) Distinguish compute capacity reservation needs from savings commitments and evaluate their supported combinations.
(1) Check the applicable outbound and cross-boundary data transfer pricing rather than assuming it matches inbound transfer. (2) Distinguish compute capacity reservation needs from savings commitments and evaluate their supported combinations. (3) Review the relevant inter-Region data transfer pricing and architecture before estimating recurring costs.
(1) Check the applicable outbound and cross-boundary data transfer pricing rather than assuming it matches inbound transfer. (2) Include retrieval, minimum-duration, and access-pattern considerations when comparing eligible S3 storage classes. (3) Review the relevant inter-Region data transfer pricing and architecture before estimating recurring costs.

Explanation

Correct Answer

For finding 1: Data transfer charges can vary by direction and path, so inbound and outbound traffic are not necessarily priced alike. For finding 2: Total storage cost depends on access behavior as well as the per-gigabyte storage rate. For finding 3: Transfers between AWS locations can incur charges even when the endpoints are both AWS-hosted. All three decisions are needed.

Incorrect Answers

For finding 1: Data transfer charges can vary by direction and path, so inbound and outbound traffic are not necessarily priced alike. That action addresses a different situation: A finance analyst assumes Capacity Reservations and Savings Plans are identical products with the same capacity guarantees and discounts.

For finding 3: Transfers between AWS locations can incur charges even when the endpoints are both AWS-hosted. That action addresses a different situation: A finance analyst assumes Capacity Reservations and Savings Plans are identical products with the same capacity guarantees and discounts.

For finding 2: Total storage cost depends on access behavior as well as the per-gigabyte storage rate. That action addresses a different situation: A finance analyst assumes Capacity Reservations and Savings Plans are identical products with the same capacity guarantees and discounts.

Question 5

An AWS planning meeting highlights two independent requirements. Finding 1: A retailer asks why a cloud provider can offer services without the retailer purchasing a separate global data center fleet. Finding 2: A company plans to replicate every noncritical dataset across several distant Regions solely because it assumes more copies are always better. Which two-part response addresses both findings in order?

(1) Explain how large shared cloud infrastructure can distribute investment and operating costs across many customers. (2) Treat a budget as a monitoring and management control unless explicit enforcement mechanisms are also configured.
(1) Establish ownership and an automated cleanup review for short-lived resources after their business purpose ends. (2) Assess durability, residency, recovery, and transfer costs before selecting an appropriate replication strategy.
(1) Explain how large shared cloud infrastructure can distribute investment and operating costs across many customers. (2) Assess durability, residency, recovery, and transfer costs before selecting an appropriate replication strategy.
(1) Assess durability, residency, recovery, and transfer costs before selecting an appropriate replication strategy. (2) Explain how large shared cloud infrastructure can distribute investment and operating costs across many customers.

Explanation

Correct Answer

For finding 1: Economies of scale help a large provider operate infrastructure more efficiently than each customer independently. For finding 2: Additional redundancy can provide value but also incurs charges and operational trade-offs. Both actions are required.

Incorrect Answers

For finding 2: Additional redundancy can provide value but also incurs charges and operational trade-offs. That action addresses a different situation: A finance analyst argues that once a monthly AWS budget is approved, no spending can exceed it regardless of workload consumption.

For finding 1: Economies of scale help a large provider operate infrastructure more efficiently than each customer independently. That action addresses a different situation: An application was provisioned for a marketing campaign but its resource owner never removed the temporary compute or disks afterward.

The actions are reversed. The correct order is (1) Explain how large shared cloud infrastructure can distribute investment and operating costs across many customers. (2) Assess durability, residency, recovery, and transfer costs before selecting an appropriate replication strategy.

Question 6

A company places an internet-facing application in a subnet but has no route from that subnet to an internet gateway. What should the team do?

Use stateful security group behavior appropriately while evaluating separate network ACL controls.
Evaluate a NAT gateway with the required route design for supported outbound internet access.
Attach and configure supported VPC internet connectivity and the necessary route to the internet gateway.
Design an Amazon VPC with appropriate subnets, route tables, and security rules for each tier.

Explanation

Correct Answer

Publicly reachable networking requires an appropriate gateway, routes, and relevant access controls.

Incorrect Answers

Publicly reachable networking requires an appropriate gateway, routes, and relevant access controls. That alternative applies to a different situation: An administrator treats a security group as stateless and adds duplicate inbound and outbound return rules for each allowed response packet.

Publicly reachable networking requires an appropriate gateway, routes, and relevant access controls. That alternative applies to a different situation: A private application subnet must start outbound internet connections, but the instances should not accept direct unsolicited inbound internet traffic.

Publicly reachable networking requires an appropriate gateway, routes, and relevant access controls. That alternative applies to a different situation: A team needs a logically isolated network for cloud instances with separate public web and private database address ranges.

Question 7

Two cloud decisions must be made in the stated order. Finding 1: A company launches an Amazon EC2 instance with its own operating system and assumes AWS will install every guest OS security patch automatically. Finding 2: A finance application handles confidential customer data on EC2 and its team believes AWS will automatically classify and restrict every file by business sensitivity. Which two-part response addresses both findings in order?

(1) Assign guest operating system patching and configuration to the customer or a customer-managed automation process. (2) Implement customer-owned data protection, identity, and application controls appropriate to the regulated workload.
(1) Assign guest operating system patching and configuration to the customer or a customer-managed automation process. (2) Recognize that AWS is responsible for physical security of the facilities that house AWS Cloud infrastructure.
(1) Configure and review the instance security groups and applicable network access controls according to the application requirement. (2) Implement customer-owned data protection, identity, and application controls appropriate to the regulated workload.
(1) Implement customer-owned data protection, identity, and application controls appropriate to the regulated workload. (2) Assign guest operating system patching and configuration to the customer or a customer-managed automation process.

Explanation

Correct Answer

For finding 1: AWS maintains the underlying cloud infrastructure while customers are accountable for software they operate inside EC2 instances. For finding 2: AWS infrastructure protections do not replace customer governance of the data and applications the customer places on instances. Both actions are required.

Incorrect Answers

For finding 2: AWS infrastructure protections do not replace customer governance of the data and applications the customer places on instances. That action addresses a different situation: An application owner says physical data center surveillance must be performed by the EC2 customer because the server is assigned to its AWS account.

For finding 1: AWS maintains the underlying cloud infrastructure while customers are accountable for software they operate inside EC2 instances. That action addresses a different situation: An EC2 workload needs inbound HTTPS access, but an administrator assumes AWS will decide which public ports the application should expose.

The actions are reversed. The correct order is (1) Assign guest operating system patching and configuration to the customer or a customer-managed automation process. (2) Implement customer-owned data protection, identity, and application controls appropriate to the regulated workload.

Question 8

A mature service has predictable continuous compute usage and finance wants to evaluate discounts tied to a long-term commitment. What should the team do?

Select eligible On-Demand Instances when flexibility matters more than a usage commitment.
Evaluate Dedicated Hosts and their licensing and placement requirements before selecting the purchasing model.
Evaluate Spot Instances with interruption handling and a workload that tolerates capacity reclamation.
Compare Savings Plans or eligible Reserved Instance purchasing options against the known steady usage.

Explanation

Correct Answer

Commitment-based pricing can lower eligible costs when long-running demand is sufficiently predictable.

Incorrect Answers

Commitment-based pricing can lower eligible costs when long-running demand is sufficiently predictable. That alternative applies to a different situation: A startup runs unpredictable short-lived compute tasks and does not want to commit to a long-term usage level.

Commitment-based pricing can lower eligible costs when long-running demand is sufficiently predictable. That alternative applies to a different situation: A regulated system requires a dedicated physical host for a specific licensing or placement obligation rather than only isolated application processes.

Commitment-based pricing can lower eligible costs when long-running demand is sufficiently predictable. That alternative applies to a different situation: A video rendering team can retry interrupted batch jobs and wants to pay less for eligible spare compute capacity.

Question 9

A cloud adoption review identifies two separate needs. Finding 1: A company is ready to migrate technology but has not assigned who owns cloud costs, security policy, or employee training. Finding 2: An organization has skilled data center administrators but no process for working with managed cloud services. Which two-part response addresses both findings in order?

(1) Establish specific business outcomes and measurable adoption metrics before comparing migration options. (2) Include workforce enablement and role changes in the cloud adoption plan rather than limiting it to server transfers.
(1) Include workforce enablement and role changes in the cloud adoption plan rather than limiting it to server transfers. (2) Use AWS Cloud Adoption Framework perspectives to identify organizational capabilities, owners, and readiness gaps.
(1) Use AWS Cloud Adoption Framework perspectives to identify organizational capabilities, owners, and readiness gaps. (2) Include workforce enablement and role changes in the cloud adoption plan rather than limiting it to server transfers.
(1) Use AWS Cloud Adoption Framework perspectives to identify organizational capabilities, owners, and readiness gaps. (2) Define account ownership, financial governance, and cost accountability as part of adoption readiness.

Explanation

Correct Answer

For finding 1: Cloud adoption involves people, governance, business, platform, security, and operations as well as technology. For finding 2: Skills and operating practices must evolve for an organization to realize the benefits of its new platform. Both actions are required.

Incorrect Answers

For finding 1: Cloud adoption involves people, governance, business, platform, security, and operations as well as technology. That action addresses a different situation: A board expects measurable benefits from migration but no department has defined which outcomes would count as success.

The actions are reversed. The correct order is (1) Use AWS Cloud Adoption Framework perspectives to identify organizational capabilities, owners, and readiness gaps. (2) Include workforce enablement and role changes in the cloud adoption plan rather than limiting it to server transfers.

For finding 2: Skills and operating practices must evolve for an organization to realize the benefits of its new platform. That action addresses a different situation: A migration program has an approved technical architecture but finance refuses to fund ongoing consumption because the cost ownership model is unclear.

Question 10

A team already packages its service in containers and wants AWS-managed container orchestration without adopting Kubernetes APIs. Which response best addresses the situation?

Evaluate Amazon EKS for supported Kubernetes cluster management and application integration.
Evaluate Amazon ECS with a supported task and service deployment model.
Evaluate AWS Fargate with the supported container service and workload constraints.
Use AWS Lambda with a supported event trigger for the short-lived processing task.

Explanation

Correct Answer

ECS orchestrates container workloads without requiring teams to run their own Kubernetes control plane.

Incorrect Answers

ECS orchestrates container workloads without requiring teams to run their own Kubernetes control plane. That alternative applies to a different situation: A software platform depends on Kubernetes-native deployments and wants a managed AWS Kubernetes control-plane offering.

ECS orchestrates container workloads without requiring teams to run their own Kubernetes control plane. That alternative applies to a different situation: An organization wants to run compatible containers while avoiding management of the EC2 hosts underneath each task.

ECS orchestrates container workloads without requiring teams to run their own Kubernetes control plane. That alternative applies to a different situation: A small application runs a short action after each new file arrives in Amazon S3 and does not need a continuously running server.