Last updated on November 19, 2024
Here are 10 AWS Certified Cloud Practitioner CLF-C02 practice exam questions to help you gauge your readiness for the actual exam.
Question 1
Which of the following channels shares a collection of offerings to help you achieve specific business outcomes related to enterprise cloud adoption through paid engagements in several specialty practice areas?
- AWS Enterprise Support
- Concierge Support
- AWS Professional Services
- AWS Technical Account Manager
Correct Answer: 3
AWS Professional Services shares a collection of offerings to help you achieve specific outcomes related to enterprise cloud adoption. Each offering delivers a set of activities, best practices, and documentation reflecting our experience supporting hundreds of customers in their journey to the AWS Cloud. AWS Professional Services’ offerings use a unique methodology based on Amazon’s internal best practices to help you complete projects faster and more reliably while accounting for evolving expectations and dynamic team structures along the way.
AWS Professional Services created the AWS Cloud Adoption Framework (AWS CAF) to help organizations design and travel an accelerated path to successful cloud adoption. The guidance and best practices provided by the framework help you build a comprehensive approach to cloud computing across your organization and throughout your IT lifecycle. Using the AWS CAF helps you realize measurable business benefits from cloud adoption faster and with less risk.
Hence, the correct answer in this scenario is: AWS Professional Services.
AWS Enterprise Support is incorrect because this is the one that provides 24×7 technical support from high-quality engineers, tools, and technology to automatically manage the health of your environment, consultative architectural guidance delivered in the context of your applications and use-cases, and a designated Technical Account Manager (TAM) to coordinate access to proactive/preventative programs and AWS subject matter experts.
Concierge Support is incorrect because this is a team composed of AWS billing and account experts that specialize in working with enterprise accounts. They will quickly and efficiently assist you with your billing and account inquiries and work with you to implement billing and account best practices so that you can focus on running your business.
AWS Technical Account Manager is incorrect because this is your designated technical point of contact who provides advocacy and guidance to help plan and build solutions using best practices, coordinate access to subject matter experts and product teams, and proactively keep your AWS environment operationally healthy.
References:
https://aws.amazon.com/professional-services/
https://aws.amazon.com/professional-services/CAF/
Check out these AWS Overview Cheat Sheets:
https://tutorialsdojo.com/aws-cheat-sheets-overview/
Tutorials Dojo’s AWS Certified Cloud Practitioner Exam Study Guide:
https://tutorialsdojo.com/aws-certified-cloud-practitioner/
Question 2
A company is planning to launch a new system in AWS but they do not have an employee who has AWS-related expertise. Which of the following AWS channels can instead help the company design, architect, build, migrate, and manage their workloads and applications on AWS?
- AWS Partner Network Technology Partners
- AWS Marketplace
- AWS Partner Network Consulting Partners
- Technical Account Management
Correct Answer: 3
The AWS Partner Network (APN) is focused on helping partners build successful AWS-based businesses to drive superb customer experiences. This is accomplished by developing a global ecosystem of Partners with specialties unique to each customer’s needs.
There are two types of APN Partners:
1. APN Consulting Partners
2. APN Technology Partners
APN Consulting Partners are professional services firms that help customers of all sizes design, architect, migrate, or build new applications on AWS. Consulting Partners include System Integrators (SIs), Strategic Consultancies, Resellers, Digital Agencies, Managed Service Providers (MSPs), and Value-Added Resellers (VARs).
APN Technology Partners provide software solutions that are either hosted on or integrated with the AWS platform. Technology Partners include Independent Software Vendors (ISVs), SaaS, PaaS, developer tools, management, and security vendors.
Hence, the correct answer in this scenario is APN Consulting Partners.
APN Technology Partners is incorrect because this only provides software solutions that are either hosted on or integrated with the AWS platform. You should use APN Consulting Partners instead, as this program helps customers to design, architect, migrate, or build new applications on AWS, which is what is needed in the scenario.
AWS Marketplace is incorrect because this just provides a new sales channel for independent software vendors (ISVs) and Consulting Partners to sell their solutions to AWS customers. This makes it easy for customers to find, buy, deploy, and manage software solutions, including SaaS, in a matter of minutes.
Technical Account Management is incorrect because this is just a part of AWS Enterprise Support which provides advocacy and guidance to help plan and build solutions using best practices, coordinate access to subject matter experts and product teams, and proactively keep your AWS environment operationally healthy.
References:
https://aws.amazon.com/partners/
https://aws.amazon.com/partners/consulting/journey/
https://aws.amazon.com/partners/technology/journey/
Tutorials Dojo’s AWS Certified Cloud Practitioner Exam Study Guide:
https://tutorialsdojo.com/aws-certified-cloud-practitioner/
Question 3
Which of the following options is an AWS Cloud Adoption Framework (CAF) perspective specifically tailored to ensure your cloud investments expedite your digital transformation goals and business outcomes?
- Governance perspective
- Business perspective
- People perspective
- Operations perspective
Correct Answer: 2
AWS Cloud Adoption Framework (CAF) is a comprehensive guide designed to help organizations effectively plan and implement their cloud adoption strategies. The framework addresses the various aspects of cloud adoption from different perspectives, including the business, people, governance, platform, operations, and security.
The Business Perspective within the AWS CAF focuses on aligning the organization’s strategic objectives with its cloud adoption goals. It aims to address the business challenges, risks, and opportunities associated in transitioning to the cloud. The primary goal is to maximize the business value derived from cloud services while minimizing disruptions to operations.
The following are the capabilities of the AWS CAF – Business Perspective:
–Strategy Management
– Product Management
– Business Insights
– Portfolio Management
– Strategic Partnership
– Data Science
– Innovation Management
– Data Monetization
Hence the correct answer is: Business perspective
Governance perspective is incorrect because this perspective only focuses on establishing policies, controls, and processes to ensure compliance, security, and cost optimization. Therefore, it is not specifically tailored to expedite digital transformation goals and business outcomes.
People perspective is incorrect because this simply ensures that the organization has the necessary skills, resources, and organizational structure to support cloud adoption. It emphasizes training, cultural change, and enabling teams to adopt new practices.
Operations perspective is incorrect because this just helps ensure that your cloud services are delivered at a level that is agreed upon with your business stakeholders.
References:
https://docs.aws.amazon.com/whitepapers/latest/aws-caf-business-perspective/aws-caf-business-perspective.html
https://docs.aws.amazon.com/pdfs/whitepapers/latest/overview-aws-cloud-adoption-framework/overview-aws-cloud-adoption-framework.pdf
Question 4
A group of Software Engineers is working on a project that requires a new Microsoft SQL Server database to be hosted in AWS. The team needs to ensure that the database can be set up quickly and efficiently to meet an urgent deadline.
Which of the following AWS services should they use to meet their requirement? (SELECT TWO)
- Amazon Aurora
- Amazon Relational Database Service (Amazon RDS)
- Amazon EC2
- Amazon Redshift
- Amazon Aurora Backtrack
Correct Answer: 2,3
Amazon Web Services offers you the flexibility to run Microsoft SQL Server for as much or as little time as you need and select from a number of versions and editions. SQL Server on Amazon Elastic Compute Cloud (Amazon EC2) and Amazon Elastic Block Store (Amazon EBS) gives you complete control over every setting, just like when it’s installed on-premises. Amazon Relational Database Service (Amazon RDS) is a managed service that takes care of all the maintenance, backups, and patching for you.
Hence, the correct answers in this scenario are:
-Amazon EC2
-Amazon Relational Database Service (Amazon RDS)
Amazon Aurora is incorrect because this is primarily used as a MySQL or PostgreSQL-compatible relational database. Although you can use the AWS Schema Conversion Tool to migrate your existing Microsoft SQL Server to Amazon Aurora, this service is still not applicable in this scenario since the requirement is urgent and you will be hosting a brand new database, not an already existing one.
Amazon Redshift is incorrect because this is just a fully managed data warehouse that makes it simple and cost-effective to analyze all your data using standard SQL and your existing Business Intelligence (BI) tools. This service can’t be used to host a relational database like Microsoft SQL Server.
Amazon Aurora Backtrack is incorrect because this is just a feature of Amazon Aurora which allows you to restore or “backtrack” a DB cluster to a specific time, without restoring data from a backup. Hence, this is not a suitable option to host a Microsoft SQL Server database. This feature somewhat rewinds the DB cluster to the time you specify. Backtracking is not a replacement for backing up your DB cluster so that you can restore it to a point in time.
References:
https://aws.amazon.com/sql/
https://docs.aws.amazon.com/prescriptive-guidance/latest/patterns/migrate-an-on-premises-microsoft-sql-server-database-to-microsoft-sql-server-on-amazon-ec2-running-linux.html
Check out these Amazon EC2 and Amazon RDS Cheat Sheets:
https://tutorialsdojo.com/amazon-elastic-compute-cloud-amazon-ec2/
https://tutorialsdojo.com/amazon-relational-database-service-amazon-rds/
Question 5
A company is using multiple AWS services to host their application, and they want to ensure that they optimize the environment by adhering to AWS best practices.
Which of the following services is capable of inspecting your AWS environment and making recommendations to lower expenditures, improve system performance and reliability, and close security gaps?
- AWS Cost Explorer
- AWS Trusted Advisor
- AWS Budgets
- AWS Inspector
Correct Answer: 2
AWS Trusted Advisor is an online tool that provides you with real-time guidance to help you provision your resources following AWS best practices. It inspects your AWS environment and makes recommendations for saving money, improving system performance and reliability, or closing security gaps.
Whether establishing new workflows, developing applications or as part of ongoing improvement, take advantage of the recommendations provided by Trusted Advisor on a regular basis to help keep your solutions provisioned optimally.
Trusted Advisor includes an ever-expanding list of checks in the following five categories:
Cost Optimization – recommendations that can potentially save you money by highlighting unused resources and opportunities to reduce your bill.
Security – identification of security settings that could make your AWS solution less secure.
Fault Tolerance – recommendations that help increase the resiliency of your AWS solution by highlighting redundancy shortfalls, current service limits, and over-utilized resources.
Performance – recommendations that can help to improve the speed and responsiveness of your applications.
Service Limits – recommendations that will tell you when service usage is more than 80% of the service limit.
Hence, the correct answer is: AWS Trusted Advisor.
AWS Cost Explorer is incorrect because this is just a tool that enables you to view and analyze your costs and usage. You can explore your usage and costs using the main graph, the Cost Explorer cost and usage reports, or the Cost Explorer RI reports. It has an easy-to-use interface that lets you visualize, understand, and manage your AWS costs and usage over time.
AWS Budgets is incorrect because it simply gives you the ability to set custom budgets that alert you when your costs or usage exceed (or are forecasted to exceed) your budgeted amount. You can also use AWS Budgets to set reservation utilization or coverage targets and receive alerts when your utilization drops below the threshold you define.
AWS Inspector is incorrect because it is just an automated security assessment service that helps improve the security and compliance of applications deployed on AWS. Amazon Inspector automatically assesses applications for exposure, vulnerabilities, and deviations from best practices.
References:
https://aws.amazon.com/economics/
https://aws.amazon.com/premiumsupport/technology/trusted-advisor/
Check out this AWS Trusted Advisor Cheat Sheet:
https://tutorialsdojo.com/aws-trusted-advisor/
Tutorials Dojo’s AWS Certified Cloud Practitioner Exam Study Guide:
https://tutorialsdojo.com/aws-certified-cloud-practitioner/
Question 6
Which of the following Amazon EC2 instance purchasing options can help you address compliance requirements and reduce costs by allowing you to use your existing server-bound software licenses?
- On-Demand Instance
- Dedicated Instance
- Reserved Instance
- Dedicated Host
Correct Answer: 4
An Amazon EC2 Dedicated Host is a physical server with EC2 instance capacity fully dedicated to your use. Dedicated Hosts can help you address compliance requirements and reduce costs by allowing you to use your existing server-bound software licenses.
Dedicated Hosts allow you to use your existing per-socket, per-core, or per-VM software licenses, including Microsoft Windows Server, Microsoft SQL Server, SUSE Linux Enterprise Server, Red Hat Enterprise Linux, or other software licenses that are bound to VMs, sockets, or physical cores, subject to your license terms.
You can use Dedicated Hosts and Dedicated instances to launch Amazon EC2 instances on physical servers that are dedicated to your use. An important difference between a Dedicated Host and a Dedicated instance is that a Dedicated Host gives you additional visibility and control over how instances are placed on a physical server, and you can consistently deploy your instances to the same physical server over time. As a result, Dedicated Hosts enable you to use your existing server-bound software licenses and address corporate compliance and regulatory requirements.
The following table highlights the key similarities and differences in the features available to you when using Dedicated Hosts and Dedicated instances:
You have the option to launch instances onto a specific Dedicated Host, or you can let Amazon EC2 place the instances automatically. Controlling instance placement allows you to deploy applications to address licensing, corporate compliance, and regulatory requirements.
Hence, the correct answer is: Dedicated Host.
On-Demand Instance purchasing option is incorrect because this only enables you to pay for compute capacity per hour or per second, depending on which instances you run. You cannot use your existing server-bound software licenses with this option.
Dedicated Instance purchasing option is incorrect. Although Dedicated instances also run on dedicated hardware, Dedicated Hosts provide further visibility and control by allowing you to place your instances on a specific, physical server.
Reserved Instance purchasing option is incorrect, as you would not be able to use your existing server-bound software licenses with this one. You have to use a Dedicated Host instead.
References:
https://aws.amazon.com/ec2/dedicated-hosts/
https://aws.amazon.com/windows/faq/#byol
Check out this Amazon EC2 Cheat Sheet:
https://tutorialsdojo.com/amazon-elastic-compute-cloud-amazon-ec2/
Question 7
Which service provides an event history of your AWS account activity, including actions taken through the AWS Management Console, AWS SDKs, command line tools, and other AWS services?
- Amazon CloudWatch
- AWS CloudTrail
- AWS Config
- AWS Infrastructure Event Management
Correct Answer: 2
AWS CloudTrail is a service that enables governance, compliance, operational auditing, and risk auditing of your AWS account. With CloudTrail, you can log, continuously monitor, and retain account activity related to actions across your AWS infrastructure. CloudTrail provides event history of your AWS account activity, including actions taken through the AWS Management Console, AWS SDKs, command-line tools, and other AWS services. This event history simplifies security analysis, resource change tracking, and troubleshooting.
With AWS CloudTrail, you can simplify your compliance audits by automatically recording and storing event logs for actions made within your AWS account. Integration with Amazon CloudWatch Logs provides a convenient way to search through log data, identify out-of-compliance events, accelerate incident investigations, and expedite responses to auditor requests.
It also increases visibility into your user and resource activity by recording AWS Management Console actions and API calls. You can identify which users and accounts called AWS, the source IP address from which the calls were made, and when the calls occurred.
Hence, the correct answer is: AWS CloudTrail.
Amazon CloudWatch is incorrect because this service is primarily used to collect monitoring and operational data in the form of logs, metrics, and events, providing you with a unified view of AWS resources, applications, and services that run on AWS and on-premises servers.
AWS Config is incorrect because this is just a service that enables you to assess, audit, and evaluate the configurations of your AWS resources. It doesn’t provide you with an event history of your AWS account activity, unlike CloudTrail.
AWS Infrastructure Event Management is incorrect because this is a structured program available to Enterprise Support customers (and Business Support customers for an additional fee) that helps you plan for large-scale events such as product or application launches, infrastructure migrations, and marketing events. The type of “events” that this program tracks is relating to business operations such as Application Launch, Datacenter Migration or Marketing Event, which is quite different from the type of “event” that CloudTrail tracks.
References:
https://aws.amazon.com/cloudtrail/
https://aws.amazon.com/cloudtrail/faqs/
Check out this AWS CloudTrail Cheat Sheet:
Question 8
Which of the following characteristics correctly describes the Amazon Simple Storage Service? (Select TWO.)
- A durable, high throughput file system
- A storage service with virtually unlimited space
- A highly durable object storage infrastructure
- A high-performance block storage service
- A hybrid cloud storage service
Correct Answer: 2,3
Amazon Simple Storage Service (Amazon S3) is an object storage service that offers industry-leading scalability, data availability, security, and performance with virtually unlimited storage space. This means customers of all sizes and industries can use it to store and protect any amount of data for a range of use cases, such as websites, mobile applications, backup and restore, archive, enterprise applications, IoT devices, and big data analytics.
Amazon S3 provides easy-to-use management features so you can organize your data and configure finely-tuned access controls to meet your specific business, organizational, and compliance requirements. Amazon S3 is designed for 99.999999999% (11 9’s) of durability and stores data for millions of applications for companies all around the world. Amazon S3 gives any developer access to the same highly scalable, highly available, fast, inexpensive data storage infrastructure that Amazon uses to run its own global network of websites.
Amazon S3 provides customers with a highly durable storage infrastructure. It has a Versioning feature that offers an additional level of protection by providing a means of recovery when customers accidentally overwrite or delete objects. This allows you to recover easily from unintended user actions and application failures. You can also use Versioning for data retention and archiving.
Hence, the correct options that correctly describe Amazon S3 are:
– A storage service with virtually unlimited space
– A highly durable object storage infrastructure
The option that says: A durable, high throughput file system is incorrect because this describes the Amazon Elastic File System (EFS) instead of Amazon S3. Amazon EFS is a fully-managed service that makes it easy to set up, scale, and cost-optimize file storage in the Amazon Cloud.
The option that says: A high-performance block storage service is incorrect because this describes Amazon Elastic Block Storage (EBS) instead of Amazon S3. Amazon Elastic Block Store (EBS) is an easy-to-use, high-performance block storage service designed for use with Amazon Elastic Compute Cloud (EC2) for both throughput and transaction-intensive workloads at any scale.
The option that says: A hybrid cloud storage service is incorrect because this describes AWS Storage Gateway instead of Amazon S3. AWS Storage Gateway connects an on-premises software appliance with cloud-based storage to provide seamless integration with data security features between your on-premises IT environment and the AWS storage infrastructure. The term “hybrid” refers to the connection of your on-premises data center to AWS.
References:
https://aws.amazon.com/s3/
https://aws.amazon.com/products/storage/
https://aws.amazon.com/s3/faqs
Check out this Amazon S3 Cheat Sheet:
Question 9
Which of the following can you use to resolve the connection between your on-premises VPN and your Amazon VPC (Amazon Virtual Private Cloud)? (Select TWO.)
- NAT Gateway
- Virtual Private Gateway
- Egress-Only Internet Gateway
- VPC Peering
- Amazon Route 53
Correct Answer: 2,5
Enterprise environments are often a mix of cloud, on-premises data centers, and edge locations. Hybrid cloud architectures help organizations integrate their on-premises and cloud operations to support a broad spectrum of use cases using a common set of cloud services, tools, and APIs across on-premises and cloud environments.
An Amazon VPC Site-to-Site VPN connection can link your data center (or network) to your Amazon Virtual Private Cloud (VPC). A customer gateway is an anchor on your side of that connection. It can be a physical or software appliance. The anchor on the AWS side of the VPN connection is called a virtual private gateway.
The following diagram shows your network, the customer gateway, the VPN connection that goes to the virtual private gateway, and the VPC. There are two lines between the customer gateway and virtual private gateway because the VPN connection consists of two tunnels to provide increased availability for the Amazon VPC service. If there’s a device failure within AWS, your VPN connection automatically fails over to the second tunnel so that your access isn’t interrupted.
From time to time, AWS also performs routine maintenance on the virtual private gateway, which may briefly disable one of the two tunnels of your VPN connection. Your VPN connection automatically fails over to the second tunnel while this maintenance is performed. When you configure your customer gateway, it’s therefore important that you configure both tunnels.
Amazon Route 53 is a highly available and scalable cloud Domain Name System (DNS) web service. It is designed to give developers and businesses an extremely reliable and cost-effective way to route end users to Internet applications by translating names like www.tutorialsdojo.com into the numeric IP addresses like 192.0.2.1 that computers use to connect to each other.
This service can also help you create a hybrid cloud architecture using the Amazon Route 53 Resolver, which provides recursive DNS for your Amazon VPC and on-premises networks over AWS Direct Connect or a VPN solution.
Hence, the correct answers are:
– Virtual Private Gateway
– Amazon Route 53
NAT Gateway is incorrect because this just enables EC2 instances in a private subnet to connect to the Internet or other AWS services but prevents the Internet from initiating a connection with those instances.
Egress-Only Internet Gateway is incorrect because this works like a NAT Gateway but for IPv6 traffic only. An egress-only Internet gateway is a horizontally scaled, redundant, and highly available VPC component that allows outbound communication over IPv6 from instances in your VPC to the Internet and prevents the Internet from initiating an IPv6 connection with your instances.
VPC Peering is incorrect because this is just a networking connection between two VPCs, and not between your on-premises data center and VPC. You can create a VPC peering connection between your own VPCs, with a VPC in another AWS account, or with a VPC in a different AWS Region.
References:
https://docs.aws.amazon.com/vpc/latest/adminguide/Introduction.html
https://aws.amazon.com/route53/
Check out these Amazon VPC and Route 53 Cheat Sheets:
https://tutorialsdojo.com/amazon-vpc/
https://tutorialsdojo.com/amazon-route-53/
Resolve Route 53 Private Hosted Zones from an On-premises Network:
https://tutorialsdojo.com/resolve-route-53-private-hosted-zones-from-an-on-premises-network/
Question 10
Which of the following is a key financial benefit of migrating systems hosted on your on-premises data center to AWS?
- Opportunity to replace upfront operational expenses (OPEX) with low variable operational expenses (OPEX).
- Opportunity to replace variable operational expenses (OPEX) with low upfront capital expenses (CAPEX).
- Opportunity to replace upfront capital expenses (CAPEX) with low variable costs.
- Opportunity to replace variable capital expenses (CAPEX) with low upfront costs.
Correct Answer: 3
Amazon Web Services offers a broad set of global cloud-based products including compute, storage, databases, analytics, networking, mobile, developer tools, management tools, IoT, security, and enterprise applications: on-demand, available in seconds, with pay-as-you-go pricing. From data warehousing to deployment tools, directories to content delivery, over 140 AWS services are available.
New services can be provisioned quickly without the upfront capital expense. This allows enterprises, start-ups, small and medium-sized businesses, and customers in the public sector to access the building blocks they need to respond quickly to changing business requirements.
In 2006, Amazon Web Services (AWS) began offering IT infrastructure services to businesses as web services—now commonly known as cloud computing. One of the key benefits of cloud computing is the opportunity to replace upfront capital infrastructure expenses with low variable costs that scale with your business. With the cloud, businesses no longer need to plan for and procure servers and other IT infrastructure weeks or months in advance. Instead, they can instantly spin up hundreds or thousands of servers in minutes and deliver results faster.
Hence, the correct answer is: Opportunity to replace upfront capital expenses (CAPEX) with low variable cost.
The option that says: Opportunity to replace upfront operational expenses (OPEX) with low variable operational expenses (OPEX) is incorrect. Although moving to AWS provides an opportunity for low variable expenditures, the main benefit is actually the opportunity to replace upfront capital expenses (CAPEX) and not the operational expenses (OPEX).
The option that says: Opportunity to replace variable operational expenses (OPEX) with low upfront capital expenses (CAPEX) is incorrect because the primary benefit is the opportunity to replace upfront capital expenses (CAPEX) and not the OPEX.
The option that says: Opportunity to replace variable capital expenses (CAPEX) with low upfront costs is incorrect because it is actually the other way around. AWS provides the opportunity to replace the upfront capital expenses (CAPEX) of your on-premises data center with low variable costs.
References:
https://docs.aws.amazon.com/whitepapers/latest/aws-overview/introduction.html
https://d1.awsstatic.com/whitepapers/introduction-to-aws-cloud-economics-final.pdf
Tutorials Dojo’s AWS Certified Cloud Practitioner Exam Study Guide:
https://tutorialsdojo.com/aws-certified-cloud-practitioner/
For more practice questions like these and to further prepare you for the actual AWS Certified Cloud Practitioner CLF-C02 exam, we recommend that you take our top-notch AWS Certified Cloud Practitioner Practice Exams, which have been regarded as the best in the market.
Also check out our AWS Certified Cloud Practitioner CLF-C02 Exam Study Guide here.