Free Sample — 15 Practice Questions
Preview 15 of 715 questions from the CLF-C02 exam.
Try before you buy — purchase the full study guide for all 715 questions with answers and explanations.
Question 549
Which AWS service should users use to learn about AWS service availability and operations?
A. Amazon EventBridge
B. AWS Service Catalog
C. AWS Control Tower
D. AWS Health Dashboard
Show Answer
Correct Answer: D
Explanation:
AWS Health Dashboard is the service designed to inform users about AWS service availability and operations. It provides real-time and historical information on service health, outages, planned maintenance, and other events that may affect AWS services or a specific account. The other options serve different purposes (event routing, service provisioning, or multi-account governance) and do not focus on service availability status.
Question 282
A company's application is running on Amazon EC2 instances. The company is planning a partial migration to a serverless architecture in the next year and wants to pay for resources up front.
Which AWS purchasing option will optimize the company's costs?
A. Convertible Reserved Instances
B. Spot Instances
C. EC2 Instance Savings Plans
D. Compute Savings Plan
Show Answer
Correct Answer: D
Explanation:
The company wants to pay upfront and is planning a partial migration from EC2 to serverless. Compute Savings Plans provide the most flexibility because they apply to EC2, AWS Lambda, and AWS Fargate, allowing savings to continue as workloads shift to serverless. Reserved Instances and EC2 Instance Savings Plans are limited to EC2 only, and Spot Instances do not meet the upfront payment requirement.
Question 710
What does the concept of agility mean in AWS Cloud computing? (Choose two.)
A. The speed at which AWS resources are implemented
B. The speed at which AWS creates new AWS Regions
C. The ability to experiment quickly
D. The elimination of wasted capacity
E. The low cost of entry into cloud computing
Show Answer
Correct Answer: A, C
Explanation:
In AWS, agility refers to how quickly customers can respond to change and innovate. This includes rapidly provisioning and implementing resources on demand (A) and being able to experiment quickly with new ideas, architectures, or configurations without heavy upfront investment (C). Other options relate to cost optimization or AWS’s internal operations, not the core concept of agility.
Question 57
A company wants to use a serverless compute service for an application.
Which AWS service will meet this requirement?
A. AWS Lambda
B. AWS CloudFormation
C. AWS Elastic Beanstalk
D. Elastic Load Balancing
Show Answer
Correct Answer: A
Explanation:
AWS Lambda is a serverless compute service that lets you run code without provisioning or managing servers. The other options are not serverless compute services: CloudFormation is infrastructure as code, Elastic Beanstalk is a PaaS that still manages underlying resources, and Elastic Load Balancing distributes traffic but does not run application code.
Question 221
A company wants to set up a secure network connection from on premises to the AWS Cloud within 1 week.
Which solution will meet these requirements?
A. AWS Direct Connect
B. Amazon VPC
C. AWS Site-to-Site VPN
D. Edge location
Show Answer
Correct Answer: C
Explanation:
AWS Site-to-Site VPN can be set up quickly—often within hours or days—using internet-based IPSec tunnels, making it suitable for a 1-week timeline. AWS Direct Connect requires longer provisioning times, Amazon VPC alone does not establish an on-premises connection, and edge locations are for content delivery, not private network connectivity.
Question 443
A company wants to migrate its applications to the AWS Cloud. The company plans to identify and prioritize any business transformation opportunities and evaluate its AWS Cloud readiness.
Which AWS service or tool should the company use to meet these requirements?
A. AWS Cloud Adoption Framework (AWS CAF)
B. AWS Managed Services (AMS)
C. AWS Well-Architected Framework
D. AWS Migration Hub
Show Answer
Correct Answer: A
Explanation:
The AWS Cloud Adoption Framework (AWS CAF) is designed to help organizations assess cloud readiness and identify and prioritize business transformation opportunities. It provides structured guidance across business, people, governance, platform, security, and operations perspectives to plan and evolve a cloud adoption journey.
Question 298
Which AWS service helps users plan and track their server and application inventory migration data to AWS?
A. Amazon CloudWatch
B. AWS DataSync
C. AWS Migration Hub
D. AWS Application Migration Service
Show Answer
Correct Answer: C
Explanation:
The service that helps users plan and track their server and application inventory migration data to AWS is AWS Migration Hub. Migration Hub provides a centralized dashboard to discover, assess, plan, and track the progress of application and server migrations across multiple AWS and partner migration tools. AWS Application Migration Service focuses on executing server migrations, not planning and tracking inventory at a high level.
Question 586
A company needs to evaluate its AWS environment and provide best practice recommendations in five categories: cost, performance, service limits, fault tolerance and security.
Which AWS service can the company use to meet these requirements?
A. AWS Shield
B. AWS WAF
C. AWS Trusted Advisor
D. AWS Service Catalog
Show Answer
Correct Answer: C
Explanation:
AWS Trusted Advisor evaluates an AWS environment and provides best‑practice recommendations across exactly five categories: cost optimization, performance, service limits, fault tolerance, and security. The other services focus on specific areas (security protection or catalog management) and do not provide holistic best‑practice analysis.
Question 45
A company wants to organize its users so that the company can grant permissions to the users as a group.
Which AWS service or tool can the company use to meet this requirement?
A. Security groups
B. AWS Identity and Access Management (IAM)
C. Resource groups
D. AWS Security Hub
Show Answer
Correct Answer: B
Explanation:
AWS Identity and Access Management (IAM) lets you organize users into groups and attach permissions to those groups, enabling permission management at the group level. The other options do not manage user permissions as groups.
Question 615
Which AWS service can run a managed PostgreSQL database that provides online transaction processing (OLTP)?
A. Amazon DynamoDB
B. Amazon Athena
C. Amazon RDS
D. Amazon EMR
Show Answer
Correct Answer: C
Explanation:
Amazon RDS is a fully managed relational database service that supports PostgreSQL and is designed for transactional (OLTP) workloads. The other options do not provide managed PostgreSQL databases: DynamoDB is NoSQL, Athena is a query service over S3, and EMR is a big data processing platform.
Question 180
Which AWS service or feature can be used to monitor for potential disk write spikes on a system that is running on Amazon EC2?
A. AWS CloudTrail
B. AWS Health Dashboard
C. AWS Trusted Advisor
D. Amazon CloudWatch
Show Answer
Correct Answer: D
Explanation:
Amazon CloudWatch provides built-in and custom metrics for Amazon EC2 instances, including disk read/write operations and throughput. It allows real-time monitoring and the creation of alarms to detect abnormal disk write spikes. The other options focus on auditing (CloudTrail), service health notifications (AWS Health Dashboard), or general optimization recommendations (Trusted Advisor), not detailed disk performance monitoring.
Question 622
Which option is a shared responsibility between AWS and its customers under the AWS shared responsibility model?
A. Configuration of Amazon EC2 instance operating systems
B. Application file system server-side encryption
C. Patch management
D. Security of the physical infrastructure
Show Answer
Correct Answer: C
Explanation:
Under the AWS shared responsibility model, patch management is a shared control: AWS patches and secures the underlying infrastructure and managed services, while customers are responsible for patching the guest operating systems and applications they run. The other options are either purely customer responsibilities (EC2 OS configuration, application encryption) or purely AWS responsibilities (physical infrastructure security).
Question 61
A company needs to use AWS technology to deploy a static website.
Which solution meets this requirement with the LEAST amount of operational overhead?
A. Deploy the website on Amazon EC2.
B. Host the website on AWS Elastic Beanstalk.
C. Deploy the website with Amazon Lightsail.
D. Host the website on Amazon S3.
Show Answer
Correct Answer: D
Explanation:
For a static website, Amazon S3 provides the least operational overhead. S3 can natively host static content (HTML, CSS, JavaScript) without any servers to provision, patch, or manage. EC2, Elastic Beanstalk, and Lightsail all require managing compute resources to some extent, which adds unnecessary operational complexity for a purely static site.
Question 597
A company wants to manage its AWS Cloud resources through a web interface.
Which AWS service will meet this requirement?
A. AWS Management Console
B. AWS CLI
C. AWS SDK
D. AWS Cloud9
Show Answer
Correct Answer: A
Explanation:
The AWS Management Console is a web-based graphical interface designed to view, configure, and manage AWS resources. The AWS CLI and SDK are programmatic/command-line tools, and AWS Cloud9 is a browser-based IDE for development rather than general resource management.
Question 316
Which AWS service or resource can a company use to deploy AWS WAF rules?
A. Amazon EC2
B. Application Load Balancer
C. AWS Trusted Advisor
D. Network Load Balancer
Show Answer
Correct Answer: B
Explanation:
AWS WAF rules are deployed by associating a web ACL with supported AWS resources. Among the options given, only the Application Load Balancer natively integrates with AWS WAF. EC2 instances cannot have WAF rules attached directly, Network Load Balancers operate at Layer 4 and do not support WAF, and AWS Trusted Advisor is only an advisory service.