50 Free AWS Cloud Practitioner Practice Questions (CLF-C02)

Answer: b) Elasticity and scalability

Explanation: Cloud computing provides elasticity (ability to scale resources up or down) and scalability (ability to handle increased load). This eliminates the need for capacity planning and reduces costs by paying only for what you use.

Answer: d) Cost Optimization

Explanation: Cost Optimization is the pillar focused on eliminating waste, using the most cost-effective resources, and measuring overall efficiency. The other pillars focus on different aspects: Operational Excellence (running systems), Security (protecting data), Reliability (recovering from failures).

Answer: b) A geographic area containing multiple Availability Zones

Explanation: An AWS Region is a geographic area (e.g., us-east-1, eu-west-1) that contains multiple Availability Zones (AZs). Each Region is independent, with its own infrastructure, to isolate failures.

Answer: b) One or more discrete data centers with redundant power and networking

Explanation: An Availability Zone (AZ) is one or more discrete data centers with redundant power, networking, and connectivity. Each Region has multiple AZs (typically 3+) for high availability.

Answer: b) CloudFront

Explanation: Amazon CloudFront is AWS's content delivery network (CDN) service. It delivers content through edge locations worldwide, reducing latency by caching content closer to users.

Answer: b) A site used by CloudFront to cache content closer to users

Explanation: Edge Locations are sites used by CloudFront (CDN) to cache content closer to end users, reducing latency. There are more Edge Locations than Regions worldwide.

Answer: c) Reliability

Explanation: Reliability is the pillar focused on the ability of a system to recover from failures (disaster recovery, backups, failover) and dynamically acquire resources to meet demand.

Answer: b) 12 months of free access to limited services for new customers

Explanation: The AWS Free Tier provides 12 months of free access to selected services (limited usage) for new AWS customers. It includes free tier services, short-term trials, and always-free services.

Answer: c) Fixed capacity

Explanation: Cloud computing features on-demand self-service, broad network access, resource pooling, rapid elasticity, and measured service. Fixed capacity is characteristic of traditional on-premises infrastructure, not cloud.

Answer: b) The complete cost of owning and operating IT infrastructure over time

Explanation: TCO (Total Cost of Ownership) includes all costs associated with IT infrastructure: hardware, software, power, cooling, data center space, IT staff, maintenance, and more. AWS TCO calculators help compare on-premises vs cloud costs.

Answer: b) Route 53

Explanation: Amazon Route 53 is AWS's scalable DNS (Domain Name System) service and domain registrar. It translates domain names (e.g., example.com) into IP addresses.

Answer: d) Both b and c

Explanation: On-Demand Instances have no commitment and you pay by the hour/second. Reserved Instances require a 1-3 year commitment but offer up to 72% discount compared to On-Demand pricing.

Answer: b) Security OF the cloud (infrastructure)

Explanation: AWS is responsible for security OF the cloud: protecting the infrastructure (hardware, software, networking, facilities). Customers are responsible for security IN the cloud: their data, applications, IAM, OS, and firewall configurations.

Answer: b) IAM

Explanation: AWS IAM (Identity and Access Management) manages users, groups, roles, and permissions. It controls who can authenticate and what actions they can perform on AWS resources.

Answer: b) Grant only the permissions required to perform a specific task

Explanation: The principle of least privilege means granting users only the minimum permissions necessary to perform their job functions. This reduces the risk of accidental or malicious damage.

Answer: b) AWS Shield

Explanation: AWS Shield provides DDoS (Distributed Denial of Service) protection. Shield Standard is included free for all customers; Shield Advanced provides additional protection for ~$3000/month.

Answer: b) Requiring two or more verification methods to access an account

Explanation: MFA requires users to provide two or more verification factors: something they know (password), something they have (hardware token, phone), or something they are (biometrics). This adds an extra layer of security.

Answer: b) KMS

Explanation: AWS KMS (Key Management Service) manages encryption keys used to encrypt data at rest. It integrates with many AWS services (S3, EBS, RDS) for automatic encryption.

Answer: b) Logs API calls and user activity

Explanation: AWS CloudTrail records API calls and user activity in your AWS account. It provides event history for auditing, compliance, and troubleshooting.

Answer: b) HIPAA

Explanation: HIPAA (Health Insurance Portability and Accountability Act) is the US regulation for handling protected health information (PHI). AWS offers HIPAA-eligible services for healthcare workloads.

Answer: b) A virtual firewall for EC2 instances

Explanation: Security Groups act as virtual firewalls for EC2 instances (and other resources). They control inbound and outbound traffic at the instance level using rules.

Answer: b) Security Groups are stateful, NACLs are stateless

Explanation: Security Groups are stateful (return traffic is automatically allowed) and work at the instance level. NACLs (Network ACLs) are stateless (both inbound and outbound rules must be defined) and work at the subnet level.

Answer: b) AWS Directory Service

Explanation: AWS Directory Service provides managed Microsoft Active Directory in the cloud, allowing integration with on-premises AD and Windows-based applications.

Answer: b) A portal for accessing compliance reports and agreements

Explanation: AWS Artifact is a portal where customers can access AWS compliance reports (SOC, PCI, ISO, etc.) and online agreements (Business Associate Addendum, NDA). It helps with compliance auditing.

Answer: b) RDS

Explanation: Amazon RDS (Relational Database Service) provides managed relational databases including MySQL, PostgreSQL, Oracle, SQL Server, and Amazon Aurora. It handles provisioning, patching, backup, and recovery.

Answer: b) DynamoDB

Explanation: Amazon DynamoDB is a fast, flexible NoSQL database service for key-value and document data structures. It's fully managed and scales automatically.

Answer: b) A serverless compute service that runs code in response to events

Explanation: AWS Lambda is a serverless compute service that runs code in response to events (e.g., S3 upload, API Gateway request) without provisioning servers. You pay only for compute time used.

Answer: a) S3 Standard

Explanation: S3 Standard is designed for frequently accessed data with low latency and high throughput. S3 Glacier is for archival (retrieval in minutes/hours). EBS is block storage for EC2 instances.

Answer: b) Block storage for EC2 instances

Explanation: Amazon EBS (Elastic Block Store) provides persistent block storage volumes for EC2 instances. It's like a hard drive that can be attached to an EC2 instance.

Answer: b) EKS

Explanation: Amazon EKS (Elastic Kubernetes Service) provides managed Kubernetes. It handles the control plane, while you manage the worker nodes and applications.

Answer: a) A virtual private cloud for isolated network resources

Explanation: Amazon VPC (Virtual Private Cloud) lets you provision a logically isolated section of the AWS cloud where you can launch resources in a virtual network you define.

Answer: b) ELB (Elastic Load Balancing)

Explanation: Elastic Load Balancing (ELB) automatically distributes incoming application traffic across multiple targets (EC2 instances, containers, IP addresses). Types include Application LB, Network LB, and Gateway LB.

Answer: a) A logging and monitoring service

Explanation: Amazon CloudWatch is a monitoring and observability service. It collects metrics, logs, and events from AWS resources and applications, enabling monitoring, alerting, and automated actions.

Answer: c) Redshift

Explanation: Amazon Redshift is a fast, fully managed data warehouse service. It's optimized for analytical queries on large datasets using columnar storage and parallel processing.

Answer: a) Elastic Container Service for Docker containers

Explanation: Amazon ECS (Elastic Container Service) is a managed container orchestration service for Docker containers. It integrates with EC2 or runs on Fargate (serverless).

Answer: c) Both a and b

Explanation: Both RDS and DynamoDB provide automated backups. RDS offers automated backups with point-in-time recovery. DynamoDB offers continuous backups and point-in-time recovery.

Answer: b) 5 TB

Explanation: The maximum size of a single S3 object is 5 TB. Objects larger than 5 GB must be uploaded using multipart upload.

Answer: d) All of the above

Explanation: AWS provides multiple ML services: SageMaker (build/train/deploy ML models), Rekognition (image/video analysis), Comprehend (natural language processing), and many others.

Answer: b) On-Demand

Explanation: On-Demand pricing allows you to pay for compute capacity by the hour or second with no long-term commitments. You pay only for what you use.

Answer: c) 72%

Explanation: Reserved Instances can provide up to 72% discount compared to On-Demand pricing, depending on the instance type, region, and commitment term (1 or 3 years).

Answer: d) Enterprise

Explanation: Enterprise Support provides 15-minute response time for production system down cases. Business Support provides 1-hour response, Developer Support provides 12-hour response for general guidance.

Answer: a) A tool for visualizing and analyzing AWS costs

Explanation: AWS Cost Explorer is a tool that allows you to visualize, understand, and manage your AWS costs and usage over time. It provides reports, forecasts, and recommendations.

Answer: b) AWS Budgets

Explanation: AWS Budgets allows you to set custom budgets and receive alerts when your costs or usage exceed (or are forecasted to exceed) your budgeted amount.

Answer: b) A tool that provides best practice recommendations

Explanation: AWS Trusted Advisor provides real-time guidance to help you provision resources following AWS best practices in cost optimization, security, fault tolerance, performance, and service limits.

Answer: c) Spot Instances

Explanation: Spot Instances offer the highest discount (up to 90% off On-Demand) but can be interrupted by AWS with a 2-minute warning when capacity is needed. Best for fault-tolerant, flexible workloads.

Answer: a) An API for creating support cases programmatically

Explanation: The AWS Support API allows you to create and manage support cases programmatically. It's available for Business and Enterprise Support plans.

Answer: c) Technical support via chat or phone

Explanation: Basic Support includes 24x7 access to customer service, AWS Trusted Advisor (7 core checks), and AWS Personal Health Dashboard. Technical support via chat or phone requires Developer Support or higher.

Answer: a) A flexible pricing model offering lower prices based on usage commitment

Explanation: AWS Savings Plans offer significant savings (up to 72%) in exchange for a commitment to a consistent amount of usage (measured in $/hour) for a 1 or 3-year term. More flexible than Reserved Instances.

Answer: b) AWS TCO Calculator

Explanation: AWS TCO (Total Cost of Ownership) calculators help estimate costs and compare on-premises infrastructure to AWS. Cost Explorer analyzes existing costs, while TCO Calculator estimates future costs.

Answer: b) 15 minutes

Explanation: Enterprise Support provides 15-minute response time for production system impairment (critical cases). Business Support provides 1-hour response for the same severity level.