AWS Certified Cloud Practitioner (CLF-C02) practice questions
200 free questions with answers and explanations.
- 51.Which S3 storage class is MOST cost-effective for archival data that is accessed once or twice a year and can tolerate a retrieval time of up to 12 hours?Cloud Technology and Services
- 52.A media streaming service automatically adds additional server capacity during a viral video's peak traffic hours and automatically removes that capacity once traffic returns to normal, without any manual intervention. Which cloud characteristic is being demonstrated?Cloud Concepts
- 53.A gaming company needs a fully managed NoSQL database that automatically scales throughput to handle unpredictable traffic spikes without manual capacity planning. Which AWS service and configuration BEST fits this need?Cloud Technology and Services
- 54.A database administrator wants to protect point-in-time copies of an EBS volume so that the volume can be restored in case of accidental data corruption. Which AWS feature should be used to create these point-in-time backups?Cloud Technology and Services
- 55.A company wants to continuously verify that all Amazon S3 buckets in its account remain compliant with a rule requiring public access to be blocked, and automatically flag any bucket that becomes non-compliant. Which AWS service should they use?Security and Compliance
- 56.A compliance officer wants full access to all Trusted Advisor checks, including security, cost optimization, performance, fault tolerance, and service limits, with the ability to set CloudWatch alarms on check status changes. Which is the minimum AWS Support plan required to unlock this complete set of Trusted Advisor checks?Billing, Pricing, and Support
- 57.A company wants to release a new version of its web application to only 5% of production users initially, monitor error rates and performance, and then gradually increase the percentage of traffic to the new version if no issues are found. Which deployment method BEST describes this approach?Cloud Technology and Services
- 58.A media archive team stores transcoded video proxy files that can be easily regenerated from original source footage if lost. The files are accessed infrequently, and the team wants the lowest-cost storage option while accepting reduced availability due to data being stored in only one Availability Zone. Which S3 storage class should they choose?Cloud Technology and Services
- 59.A company needs to send a single event notification to multiple independent systems (an email alert, a Lambda function, and an SQS queue) simultaneously when a new order is placed. Which architecture pattern should they implement?Cloud Technology and Services
- 60.A company has two VPCs in the same AWS Region: one hosts its production application, and the other hosts an internal analytics service. The company wants instances in both VPCs to communicate using private IP addresses without routing traffic over the public internet. Which solution should the company implement?Cloud Technology and Services
- 61.A company's primary Amazon RDS database is experiencing heavy read traffic from reporting applications, which is slowing down write performance for the main application. The company wants to offload read queries without changing the primary database's availability. Which solution should the company implement?Cloud Technology and Services
- 62.A financial services firm needs a relational database that can automatically fail over within seconds, supports up to 15 read replicas, and offers storage that automatically scales up to 128 TB. Which AWS database service BEST meets these requirements?Cloud Technology and Services
- 63.An auditor needs to verify that CloudTrail log files stored in an S3 bucket have not been tampered with or deleted since they were delivered. Which CloudTrail feature should be enabled to support this verification?Security and Compliance
- 64.A company's EC2 instances are deployed in a public subnet and need to be reachable from the internet, and they also need to initiate outbound connections to the internet. Which VPC component must be attached to the VPC to allow this internet connectivity?Cloud Technology and Services
- 65.A company wants a fully managed service that uses machine learning to automatically discover and classify sensitive data, such as personally identifiable information (PII), stored in Amazon S3 buckets. Which AWS service should the company use?Security and Compliance
- 66.A development team needs to store and automatically rotate database credentials used by an application, without hard-coding them into application code. Which AWS service is purpose-built for this requirement?Security and Compliance
- 67.A company manages 15 AWS accounts through AWS Organizations and wants a compliance analyst to view AWS Config compliance data from all accounts and Regions in a single consolidated dashboard, without switching between accounts. Which AWS Config feature should the company use?Security and Compliance
- 68.A media company's AWS bill shows usage measured in GB-months for S3 storage and an EC2 On-Demand rate billed per second (with a 60-second minimum) for Linux instances. A billing analyst is asked to explain why the EC2 cost calculation multiplies the hourly rate by the exact number of seconds the instance ran divided by 3600, rather than rounding up to the nearest hour. What AWS pricing characteristic explains this?Billing, Pricing, and Support
- 69.A financial services company wants to enforce that all IAM users must provide a second authentication factor when signing in to the AWS Management Console. Which feature should the company enable?Security and Compliance
- 70.A company has data that is accessed roughly once per month but must be retrievable within milliseconds when needed. The company wants to minimize storage costs while retaining fast retrieval times. Which S3 storage class BEST fits this requirement?Cloud Technology and Services
- 71.A company's Trusted Advisor dashboard flags several IAM users that do not have MFA enabled and an S3 bucket that is publicly accessible. Which category of Trusted Advisor checks generated these findings?Security and Compliance
- 72.A startup's finance manager wants to pay a lower hourly rate for EC2 compute without any upfront payment and without committing to a specific instance family, in exchange for committing to a consistent dollar amount of usage per hour for one year. Which AWS pricing option best matches this requirement?Billing, Pricing, and Support
- 73.A cloud administrator is designing IAM policies for a new team and wants to ensure each user can perform only the actions required for their specific job function. Which security principle does this describe?Security and Compliance
- 74.Which AWS Well-Architected Framework pillar focuses on protecting data, systems, and assets through risk assessments, identity management, and mitigation strategies?Cloud Concepts
- 75.A company runs a steady-state workload on an On-Demand EC2 instance that costs $0.10 per hour, running continuously 24 hours a day for a full year (365 days). AWS also offers a 1-year Standard Reserved Instance for this instance type with an all-upfront payment of $600 and no additional hourly charge. Based on annual cost alone, how much would the company save by purchasing the Reserved Instance instead of using On-Demand pricing for the full year?Cloud Concepts
- 76.A company upgrades from AWS Business Support to a plan that includes a dedicated Concierge team for billing and account assistance, separate from technical troubleshooting. Which AWS Support plan includes this Concierge service?Billing, Pricing, and Support
- 77.A company needs to provision and manage public SSL/TLS certificates for its Application Load Balancer at no additional cost, with automatic renewal. Which AWS service should the company use?Security and Compliance
- 78.During a cloud migration readiness assessment using the AWS CAF, a company's leadership focuses on defining policies, managing risk, ensuring compliance with regulatory requirements, and tracking IT assets across the organization. This work most directly aligns with which CAF perspective?Cloud Concepts
- 79.A holding company uses AWS Organizations with consolidated billing across one management account and four linked member accounts. Each month, which entity receives a single consolidated invoice covering usage from all five accounts?Billing, Pricing, and Support
- 80.A gaming company runs short-lived batch rendering jobs that can be interrupted without major impact and wants to minimize EC2 compute costs for this workload. Which pricing model should the company choose?Billing, Pricing, and Support
- 81.A financial services company wants to enforce that all IAM users create passwords that are at least 14 characters long, contain a mix of character types, and expire after 90 days. Which AWS feature should be configured to meet this requirement?Security and Compliance
- 82.A cloud architecture team defines organization-wide standards for provisioning infrastructure, establishes a catalog of approved services, and designs principles for managing hybrid environments that span on-premises data centers and multiple AWS Regions. Which AWS Cloud Adoption Framework (CAF) perspective does this team primarily represent?Cloud Concepts
- 83.An auditor is reviewing an AWS account after a security incident and needs to determine which IAM user made a specific API call to terminate an EC2 instance, including the source IP address and timestamp. Which service provides this historical record of API activity?Security and Compliance
- 84.A company discovers that an Amazon S3 bucket containing sensitive documents was accidentally made public through a misconfigured bucket policy. The security team wants a setting that prevents any S3 bucket in the account from ever becoming publicly accessible, regardless of future policy or ACL changes. Which feature should they enable?Security and Compliance
- 85.A small manufacturing company currently spends $200,000 upfront every five years to purchase and install physical servers. After migrating to AWS, they instead pay a monthly bill based on usage. Which cloud economic shift does this describe?Cloud Concepts
- 86.A company wants to run and manage containerized applications using the open-source Kubernetes orchestration tool, while having AWS manage the Kubernetes control plane for high availability and patching. Which AWS service should the company use?Cloud Technology and Services
- 87.A healthcare startup encrypts data at rest in Amazon S3 using SSE-KMS and now wants to ensure that data is also protected while traveling between clients and the Application Load Balancer over the internet. Which combination of AWS services best addresses encryption in transit for this scenario?Security and Compliance
- 88.A global enterprise on the AWS Enterprise Support plan wants a single point of contact who understands their specific architecture and can proactively guide them on cost optimization and operational best practices. Which resource provides this?Billing, Pricing, and Support
- 89.A company uses AWS Organizations to manage multiple member accounts. The security team wants to prevent any account in the 'Sandbox' organizational unit from disabling AWS CloudTrail, regardless of the IAM permissions granted within those accounts. What should the security team implement?Security and Compliance
- 90.A company wants to migrate an application to AWS as quickly as possible with minimal code changes, moving it 'as-is' onto EC2 instances to meet an urgent deadline. Which of the 7 Rs migration strategy does this describe?Cloud Concepts
- 91.A network administrator suspects that an EC2 instance is communicating with an unusual external IP address and wants to capture metadata about IP traffic going to and from the instance's network interface, including source, destination, and port information. Which AWS feature should be used?Security and Compliance
- 92.A media company wants to distribute video content globally with low latency to end users while caching content at locations close to viewers. Which AWS service should they use?Cloud Technology and Services
- 93.A security engineer enables AWS Security Hub and wants it to automatically evaluate the account's configuration against a widely recognized set of security best practices, such as restricting root account usage and enforcing strong password policies. Which Security Hub feature should be enabled to achieve this?Security and Compliance
- 94.A cloud administrator opens Cost Explorer to understand which service is driving an unexpected spike in last month's bill. Which built-in Cost Explorer capability should the administrator use to drill down and identify the specific service and linked account responsible?Billing, Pricing, and Support
- 95.An auditor reviewing CloudTrail wants to see individual S3 GetObject and PutObject API calls made against a specific bucket, which are not captured by default in a standard trail. Which type of CloudTrail event must be enabled to capture this activity?Security and Compliance
- 96.A financial analyst compares three payment options for a 1-year Standard Reserved Instance, assuming the instance runs continuously for all 8,760 hours in the year: No Upfront at an effective rate of $0.100 per hour, Partial Upfront with a $400 upfront fee plus $0.050 per hour, and All Upfront with a single payment of $850. Which payment option results in the lowest total annual cost?Billing, Pricing, and Support
- 97.A security architect is comparing security groups and network ACLs (NACLs) within an Amazon VPC. Which statement correctly distinguishes the two?Security and Compliance
- 98.A security team wants to identify EC2 instances that have network paths accessible from the internet due to misconfigured security groups or route tables, in addition to scanning those instances for known software vulnerabilities. Which AWS service provides both network reachability analysis and vulnerability scanning?Security and Compliance
- 99.A retail company purchases a third-party security monitoring solution through AWS Marketplace that bills on an hourly software usage fee in addition to the underlying EC2 infrastructure cost. How does this Marketplace charge typically appear in the company's AWS billing?Billing, Pricing, and Support
- 100.A company plans to expand its application into a new geographic market. Setting up an on-premises data center in that region would require an estimated 6 months for site selection, hardware procurement, and installation. By deploying its application into an existing AWS Region instead, the company launches the new deployment within 3 days. Which benefit of cloud computing does this scenario best illustrate?Cloud Concepts