Free Practice Questions for Amazon Web Services CLF-C02 Exam

AWS Fargate and Amazon S3 are both serverless services. Fargate allows users to run containers without managing the underlying infrastructure, while S3 provides object storage without the need for provisioning or managing servers. Amazon EC2, Amazon Managed Streaming for Apache Kafka, and Amazon EMR involve server management to varying degrees and are not serverless by nature.

Amazon S3 Glacier Flexible Retrieval is optimized for storing infrequently accessed data at a very low cost, making it suitable for data archiving and long-term backups. It provides flexible retrieval options for archived data. Other services like FSx for Lustre, EBS, and EFS are more suited for frequently accessed data and higher-performance use cases, not archival storage.

The AWS Cloud is cost-effective for dynamic workloads because of its elasticity, allowing resources to scale up or down based on demand, and its pay-as-you-go pricing, which enables companies to pay only for what they use. Reliability, security, and high availability are also benefits of AWS, but they do not specifically relate to cost-effectiveness in the context of dynamic workloads.

The customer is responsible for selecting and configuring the encryption options used for its Amazon RDS database. When creating an encrypted DB instance, the customer enables encryption and can select an AWS managed KMS key or an eligible customer managed KMS key. The customer must also manage permissions and policies for customer managed keys. Therefore, option A is correct. Amazon RDS is a managed database service, so AWS manages the underlying server hardware and the operating system used to run standard RDS DB instances. RDS also manages routine database software patching, including applicable minor-version maintenance according to the configured maintenance and upgrade settings. The exact division can differ for specialized products such as RDS Custom or engines enrolled in Extended Support, but the foundational-level question refers to standard Amazon RDS. AWS protects and maintains the managed infrastructure, while customers remain responsible for their data, database users, access controls, network configuration, encryption choices, application integration, and query tuning. The exam clue is that encryption is a customer security configuration decision, whereas physical hardware and underlying managed-platform patching are handled by AWS.

AWS CloudTrail is the service that provides the account activity records needed for governance, compliance, operational auditing, and risk auditing. CloudTrail records actions taken by users, IAM roles, AWS services, and other identities as events. These actions can originate from the AWS Management Console, AWS CLI, AWS SDKs, and AWS APIs. Administrators can review event history and configure trails or event data stores for longer-term collection, analysis, and retention. This directly matches the wording of the question, so option A is correct. VPC Flow Logs capture information about IP traffic to and from network interfaces in a VPC; they are valuable for network troubleshooting and security analysis but do not provide the broad AWS account API audit history described. Amazon CloudWatch monitors resources and applications through metrics, logs, alarms, and events, but it is not the primary account governance and risk-auditing record. AWS Trusted Advisor evaluates an AWS environment against best-practice checks and provides recommendations. It does not replace CloudTrail’s record of account activity. The key distinction is recommendations versus an auditable history of actions.

AWS Budgets allows organizations to set custom cost and usage budgets and receive notifications when they exceed predefined thresholds. This feature helps the finance department monitor spending and manage budget forecasts effectively. AWS Cost and Usage Reports and Cost Explorer provide detailed billing data but do not include budget notifications. Consolidated billing in AWS Organizations is useful for aggregating billing across accounts but does not provide budget alerts.

Amazon Aurora is a fully managed relational database engine that provides editions compatible with MySQL and PostgreSQL. This compatibility allows many existing applications, drivers, tools, and database skills associated with those open-source engines to be used with Aurora with limited or no modification. Therefore, option C is correct. Amazon Redshift is a managed cloud data warehouse designed primarily for analytics and large-scale SQL workloads. Although it uses SQL and is based on relational concepts, it is not the AWS database service described as MySQL- and PostgreSQL-compatible for transactional applications. Amazon DynamoDB is a serverless NoSQL key-value and document database and does not use the MySQL or PostgreSQL relational engines. Amazon Neptune is a managed graph database designed for highly connected datasets and supports graph query technologies rather than MySQL or PostgreSQL compatibility. The direct exam association is that Aurora is part of Amazon RDS and offers Aurora MySQL-Compatible Edition and Aurora PostgreSQL-Compatible Edition. It combines a managed cloud-native storage architecture with familiar relational database interfaces and compatibility.

AWS Direct Connect provides a dedicated, low-latency, and consistent network connection between on-premises data centers and AWS. This private connection minimizes latency and improves network stability compared to a public internet connection or VPN. AWS Direct Connect is ideal for applications requiring real-time data transfer with minimal latency.

AWS Elastic Beanstalk is a managed service that facilitates the deployment and management of applications in the AWS Cloud. It supports multiple programming languages and frameworks, allowing users to deploy web applications without managing the underlying infrastructure. Elastic Beanstalk automatically handles deployment, capacity provisioning, load balancing, and auto-scaling. The other services listed, like CodeGuru, Fargate, and CodeCommit, do not provide full application deployment and management capabilities.

AWS Budgets gives you the ability to set custom budgets that alert you when your costs or usage exceed (or are forecasted to exceed) your budgeted amount. You can also use AWS Budgets to set reservation utilization or coverage targets and receive alerts when your utilization drops below the threshold you define2.

 AWS Organizations is a service that enables you to consolidate multiple AWS accounts into an organization that you create and centrally manage. With AWS Organizations, you can create a single payment method for all the AWS accounts in your organization through consolidated billing. Consolidated billing enables you to see a combined view of AWS charges incurred by all accounts in your organization, as well as get a detailed cost report for each individual AWS account associated with your organization. AWS Artifact is a service that provides on-demand access to AWS’ security and compliance reports and select online agreements. AWS Budgets is a service that enables you to plan your service usage, service costs, and instance reservations. AWS Trusted Advisor is a servicethat provides real-time guidance to help you provision your resources following AWS best practices. None of these services or tools offer consolidated billing.

The company should use AWS WAF to safeguard the website from SQL injection or cross-site scripting. AWS WAF is a web application firewall that helps protect web applications from common web exploits that could affect availability, compromise security, or consume excessive resources. The company can use AWS WAF to create custom rules that block malicious requests that match certain patterns, such as SQL injection or cross-site scripting. AWS WAF can be applied to web applications that are behind an Application Load Balancer, Amazon CloudFront, or Amazon API Gateway. Amazon GuardDuty, AWS Trusted Advisor, and Amazon Inspector are not the best services to use for this purpose. Amazon GuardDuty is a threat detection service that monitors for malicious activity and unauthorized behavior across the AWS accounts and resources. AWS Trusted Advisor is a service that provides best practice recommendations for cost optimization, performance, security, and fault tolerance. Amazon Inspector is a service that assesses the security and compliance of applications running on Amazon EC2 instances12