Step2Study

AWS Certified Cloud Practitioner (CLF-C02) practice questions

200 free questions with answers and explanations.

Practice test
  1. 101.A company has 50 IAM users who all require the same set of permissions to manage Amazon S3 buckets. The permissions are expected to change periodically as business needs evolve. Which approach minimizes administrative overhead?Security and Compliance
  2. 102.A new cloud administrator wants to know which AWS service records the API calls made within an AWS account, including which IAM identity made each call, the source IP address, and the timestamp, for auditing purposes.Security and Compliance
  3. 103.A DevOps team wants to automatically scan container images stored in Amazon ECR for known software vulnerabilities (CVEs) before they are deployed to production, without manually running third-party scanning tools. Which service provides this capability?Security and Compliance
  4. 104.A gaming company uses AWS Compute Optimizer recommendations to select optimal EC2 instance types and experiments with serverless architectures to reduce latency and improve resource utilization for its workloads. Which Well-Architected Framework pillar does this scenario primarily address?Cloud Concepts
  5. 105.A company wants to encrypt data stored on an Amazon EBS volume attached to an EC2 instance without manually managing the underlying cryptographic keys. Which AWS service integrates directly with EBS to provide this encryption at rest?Security and Compliance
  6. 106.A company notices that a single IP address is sending an unusually high volume of HTTP requests per minute to its web application, attempting to overwhelm the login page with credential-stuffing attempts. Which AWS WAF feature should be configured to automatically block this behavior?Security and Compliance
  7. 107.A financial application performs a large volume of small, random read/write operations against an EBS-backed database and requires consistently high IOPS with low latency. Which EBS volume type should be used?Cloud Technology and Services
  8. 108.A cloud financial analyst wants an automated alert whenever the company's Reserved Instance utilization drops below 80% during the current billing period, indicating wasted commitment spend. Which AWS Budgets type should the analyst configure?Billing, Pricing, and Support
  9. 109.A systems administrator wants to allow team members to remotely access EC2 instances for troubleshooting without opening inbound SSH port 22 in the security group or managing SSH key pairs. Which AWS capability should be used?Security and Compliance
  10. 110.A compliance officer needs to download AWS's SOC 2 report to satisfy an internal audit requirement. Which AWS service should the officer use to access this report?Security and Compliance
  11. 111.During an AWS Cloud Adoption Framework (CAF) assessment, a company evaluates whether its staff have the skills, training programs, and organizational structures needed to support a successful cloud transformation. Which CAF perspective does this activity primarily belong to?Cloud Concepts
  12. 112.A solutions architect uses AWS Pricing Calculator to build an estimate for a proposed workload involving EC2, RDS, and S3 before migration. Which limitation should the architect keep in mind about the estimate produced by the Pricing Calculator?Billing, Pricing, and Support
  13. 113.A company wants to deploy a new application version by gradually replacing instances running the old version with instances running the new version, a few at a time, until all instances are updated. If a problem is detected midway, only a portion of traffic is affected. Which deployment method does this describe?Cloud Technology and Services
  14. 114.A logistics company runs a fleet of EC2 instances that support a core inventory-management application 24/7 with no planned interruptions for the next three years. The company wants to minimize compute costs for this steady, predictable workload. Which EC2 purchasing option should the company choose?Cloud Technology and Services
  15. 115.A company wants its CloudFront distribution to cache and serve static website content to users with the lowest possible latency, regardless of where in the world the users are located. Which AWS infrastructure component enables this by caching content physically close to end users?Cloud Technology and Services
  16. 116.Which AWS Well-Architected Framework pillar focuses on running and monitoring systems to deliver business value, and continually improving supporting processes and procedures?Cloud Concepts
  17. 117.A retail company uses the AWS Customer Carbon Footprint Tool to track emissions from its cloud workloads and consolidates underutilized servers to maximize hardware utilization, aiming to minimize environmental impact of its IT operations. Which Well-Architected Framework pillar addresses this goal?Cloud Concepts
  18. 118.An IAM user belongs to two groups. One group's policy explicitly denies the s3:DeleteObject action on all resources, while the other group's policy explicitly allows s3:DeleteObject on a specific bucket. When the user attempts to delete an object in that bucket, what is the result?Security and Compliance
  19. 119.A security engineer wants a single dashboard that aggregates and prioritizes findings from GuardDuty, Inspector, and AWS Config, and evaluates the account against industry standards like the CIS AWS Foundations Benchmark. Which service should the engineer use?Security and Compliance
  20. 120.A security engineer is investigating whether IAM policies within an AWS account unintentionally grant external accounts or public access to S3 buckets and IAM roles. Which AWS service can automatically analyze resource policies to identify this unintended external access?Security and Compliance
  21. 121.A company currently operates a self-hosted, on-premises customer relationship management (CRM) system. Instead of migrating the existing CRM code to AWS, the company decides to discontinue the legacy system and adopt Salesforce, a cloud-based SaaS CRM offering. Which of the 7 Rs migration strategy does this represent?Cloud Concepts
  22. 122.A security team wants a fully managed threat detection service that continuously analyzes VPC Flow Logs, DNS logs, and CloudTrail event logs to identify malicious or unauthorized activity without deploying any agents. Which service should they use?Security and Compliance
  23. 123.A company currently runs an on-premises server with the following monthly costs: $500 depreciation, $150 maintenance, and $100 for power and cooling. They are evaluating an equivalent AWS EC2 instance priced at $0.50 per hour, running continuously for a full 30-day month (720 hours). Based on a total cost of ownership comparison, how much would the company save per month by moving to AWS?Cloud Concepts
  24. 124.A retail company runs its production database on Amazon RDS and wants automatic failover to a standby copy in a different Availability Zone if the primary database instance becomes unavailable, with minimal manual intervention. Which RDS feature should the company enable?Cloud Technology and Services
  25. 125.A multinational company must ensure that customer data collected from users in the European Union is stored and processed only within EU-based AWS infrastructure to comply with data residency requirements. Which AWS concept primarily enables the company to meet this requirement?Security and Compliance
  26. 126.A small consulting firm needs to run a proof-of-concept web application for two weeks before deciding whether to continue the project. The workload is short-term and the firm does not want to commit to any long-term contract. Which EC2 purchasing option is MOST appropriate?Cloud Technology and Services
  27. 127.A consultant needs to produce a cost estimate for a proposed multi-tier application that has not yet been deployed on AWS, in order to present pricing options to a client before purchasing. Which tool is designed specifically for this pre-deployment estimating task?Billing, Pricing, and Support
  28. 128.A company reviews its AWS Cost Explorer reports monthly, right-sizes underused EC2 instances, and purchases Savings Plans for predictable workloads to reduce spend without sacrificing capacity. This practice best aligns with which Well-Architected Framework pillar?Cloud Concepts
  29. 129.A media streaming company has customers in North America, Europe, and Asia. The company wants DNS queries to be answered with the IP address of the region that provides the fastest response time for each user, based on network conditions. Which Route 53 routing policy should the company use?Cloud Technology and Services
  30. 130.A startup is deploying its first workload on AWS and wants to understand which security tasks AWS handles automatically versus which tasks the startup must handle. Under the AWS shared responsibility model, which task is always the customer's responsibility?Security and Compliance
  31. 131.A company using AWS Organizations wants to minimize risk from its management (payer) account, since actions taken there can affect all member accounts, including the ability to close accounts or leave the organization. What is the recommended security best practice for the management account's root user?Security and Compliance
  32. 132.A company runs a web application on multiple EC2 instances across two Availability Zones. It wants incoming traffic automatically distributed across the healthy instances to improve fault tolerance. Which AWS service should the company use?Cloud Technology and Services
  33. 133.A ticketing platform must process purchase order messages in the exact order they were submitted and ensure that no order is processed more than once. Which Amazon SQS queue type should the platform use?Cloud Technology and Services
  34. 134.A retail company wants to encrypt sensitive customer data stored in Amazon S3 and maintain full control over the lifecycle and rotation of the encryption keys, including the ability to disable or delete keys. Which service should they use to manage these keys?Security and Compliance
  35. 135.A company is applying the AWS Well-Architected Framework to review its workload and wants guidance specifically focused on protecting information, systems, and assets while delivering business value through risk assessments and mitigation strategies. Which pillar of the framework addresses this focus area?Security and Compliance
  36. 136.A startup's finance team notes that AWS has reduced its per-GB storage prices multiple times over the past several years, even as AWS's own infrastructure costs have likely changed. Which cloud economic principle best explains why AWS is able to pass these savings on to customers?Cloud Concepts
  37. 137.A security engineer wants AWS CloudTrail to automatically detect unusual patterns in API call volume, such as a sudden spike in IAM policy deletion calls, and generate distinct events to flag for investigation. Which CloudTrail feature provides this capability?Security and Compliance
  38. 138.A company manages dozens of AWS accounts using AWS Organizations and wants to centrally deploy and enforce AWS WAF rules and Shield Advanced protections consistently across all accounts and resources, rather than configuring each account individually. Which AWS service is designed for this purpose?Security and Compliance
  39. 139.A retail company wants to know its exact spend on Amazon EC2 over the past six months, broken down by linked account and instance type, to identify cost trends. Which AWS tool should the finance team use?Billing, Pricing, and Support
  40. 140.A company wants to allow an external auditing firm to access specific read-only resources in its AWS account without creating individual IAM users or sharing long-term credentials. Which approach follows AWS best practices?Security and Compliance
  41. 141.A company uses an AWS KMS customer managed key to encrypt sensitive data and wants the underlying key material rotated automatically every year without needing to update any application code that references the key. Which KMS capability satisfies this requirement?Security and Compliance
  42. 142.A cloud administrator wants to create a single IAM policy document that can be attached to multiple users, groups, and roles, and that can be updated in one place so every attached identity automatically receives the change. Which type of IAM policy should the administrator create?Security and Compliance
  43. 143.A company conducting a migration assessment identifies an internal reporting application that has had zero active users for the past 18 months because a newer BI tool replaced its functionality. The migration team recommends shutting down this application entirely rather than migrating it. Which of the 7 Rs migration strategy is being applied, and what is its primary benefit?Cloud Concepts
  44. 144.A nonprofit organization has minimal AWS usage and relies solely on the free Basic support plan. During a critical outage of their web application hosted on EC2, they attempt to open a technical support case for troubleshooting help. What should they expect?Billing, Pricing, and Support
  45. 145.A company is designing a new workload on AWS and wants to estimate the projected monthly and annual costs of various service combinations, such as EC2 instance types, storage options, and data transfer, before deploying any resources. Which AWS tool is specifically designed for this purpose?Cloud Concepts
  46. 146.During a CAF assessment, a security team defines how to structure the selection and implementation of controls for identity and access management, threat detection, infrastructure protection, and incident response as the company moves to AWS. Which CAF perspective is the security team addressing?Cloud Concepts
  47. 147.A company has a legacy application that runs on specialized, unsupported hardware and cannot be modified. The application must remain on-premises for now, but the company plans to revisit a cloud migration for it in a future phase once compatible cloud options exist. Which of the 7 Rs migration strategy does this represent?Cloud Concepts
  48. 148.A company is applying the AWS Cloud Adoption Framework (CAF) to prepare for a large-scale migration. One workstream focuses on ensuring that workloads are deployed, operated, monitored, and can recover from incidents efficiently, using practices such as site reliability engineering (SRE). Which CAF perspective does this describe?Cloud Concepts
  49. 149.A company runs its entire data center on VMware virtualization technology. It wants to move workloads to AWS with the least possible changes to its existing VMware tools, processes, and architecture, without purchasing new physical hardware or re-hosting onto native EC2 instances. Which migration strategy best fits this requirement?Cloud Concepts
  50. 150.A startup wants to quickly test a new product idea in the market. Using AWS, the team can launch infrastructure in minutes, run experiments, and terminate resources immediately if the idea does not succeed, incurring minimal cost. Which cloud benefit does this scenario primarily illustrate?Cloud Concepts