AWS Certified Cloud Practitioner (CLF-C02) Practice Exam Questions and Answers – Part 14/16

Answer: B. AWS Trusted Advisor

AWS Trusted Advisor is an account-level best practices tool that specifically checks for and flags underutilized Amazon EBS volumes to help optimize costs. While CloudWatch monitors performance metrics, it lacks the native account-wide cost analysis required to automatically identify these idle resources.

Answer: A. AWS Pricing Calculator

The AWS Pricing Calculator is designed to estimate potential cloud costs and model solutions before migration, helping compare on-premises infrastructure to AWS. Remember that Cost Explorer and Budgets are only used to track and monitor existing active account spending, not future estimates.

Answer: A,D. When you don't turn on user activity logging (AWS CloudTrail) || When you allow public access to Amazon S3 buckets

Trusted Advisor automatically checks for common security gaps like public S3 buckets and disabled CloudTrail logging. Sharing IAM credentials is an operational policy issue that the service cannot technically detect, whereas Glacier encrypts data by default.

Answer: A. Amazon S3 Transfer Acceleration (S3TA)

Amazon S3 Transfer Acceleration leverages CloudFront edge locations to speed up long-distance file uploads directly into a bucket. CloudFront only accelerates downloads to users, whereas Direct Connect requires physical setup.

Answer: A,C. Use Spot Instances for ad-hoc jobs that can be interrupted || Use Reserved Instances (RI) to run applications with a predictable usage over the next one year

Spot Instances provide the steepest discounts for stateless workloads that tolerate interruptions, while Reserved Instances offer billing discounts for predictable usage. On-Demand Instances offer no long-term savings, making them less cost-optimal.

Answer: A,B. AWS Global Accelerator provides static IP addresses that act as a fixed entry point to your applications || AWS Global Accelerator is a good fit for non-HTTP use cases

AWS Global Accelerator provides static IP addresses acting as fixed entry points and is specifically excellent for non-HTTP use cases like gaming or VoIP. Remember that it complements Elastic Load Balancing by routing traffic over the AWS global network.

Answer: A,E. AWS Lambda || AWS Fargate

AWS Lambda and AWS Fargate are the correct choices because both let you run applications without provisioning or managing underlying servers. For the exam, remember that EC2 and Elastic Beanstalk require server management, making them non-serverless options.

Answer: C. Amazon EC2 instance user data

Amazon EC2 user data is correct because it lets you pass bootstrap scripts to automate configuration tasks when launching an instance. Do not confuse this with instance metadata, which simply provides read-only information about the currently running instance.

Answer: A. Deploying the application across two AWS Regions improves availability

Deploying workloads across multiple geographic Regions directly increases fault tolerance and availability by isolating failures. For the exam, associate Regions with disaster recovery and global availability, whereas scaling capacity horizontally is handled within Availability Zones using Auto Scaling.

Answer: B,C. Sell Software as a Service (SaaS) solutions to AWS customers || AWS customer can buy software that has been bundled into customized Amazon Machine Image (AMIs) by the AWS Marketplace sellers

AWS Marketplace is a digital catalog where independent software vendors can sell pre-configured AMIs or Software as a Service solutions to AWS customers. Think of Marketplace as an app store for buying and selling deployable software, completely distinct from requesting dedicated network connections or buying compliance reports via Artifact.

Answer: A. AWS Fargate

AWS Fargate is a serverless compute engine specifically designed to run containers without managing underlying servers. Use this as an exam cue to link Fargate directly with container workloads, whereas Elastic Beanstalk is for broader application platform management.

Answer: D,E. Set up an IAM user with administrator permissions and do not use AWS account root user for administrative tasks || Enable multi-factor authentication (MFA) for the AWS account root user

Securing the root user involves enabling multi-factor authentication and delegating daily administrative duties to an IAM user instead. Remember that root access keys should never be created or shared, and the root account should be locked away for only a few highly specific tasks.

Answer: B. Massive economies of scale

Aggregating usage from hundreds of thousands of customers enables providers like AWS to achieve massive economies of scale, resulting in lower pay-as-you-go prices. For the exam, associate this specific phrasing directly with economies of scale, rather than general agility or capital expense reduction.

Answer: D. Amazon CloudWatch

Amazon CloudWatch is used to create actual billing alarms that trigger when your account costs exceed a defined monetary threshold. On the exam, distinguish this from AWS Budgets, which provides more flexible alerts based on your specific cost or usage forecasts.

Answer: A. Build loosely coupled components

Building loosely coupled components allows individual microservices to operate independently, which improves both system scalability and overall resilience. For the exam, always avoid monolithic or tightly coupled designs, and favor decoupling via queues or pub/sub messaging.