CLF-C02 Free Practice Questions — Page 20 (2026)

Question 192

A company is building a web application using AWS. Which AWS service will help prevent network layer DDoS attacks against the web application?

A. AWS WAF

B. AWS Firewall Manager

C. Amazon GuardDuty

D. AWS Shield

Show Answer

Correct Answer: D

Explanation:
AWS Shield is specifically designed to protect AWS resources from Distributed Denial of Service (DDoS) attacks, including network and transport layer attacks (Layer 3 and Layer 4). AWS WAF focuses on application-layer (Layer 7) attacks, Firewall Manager is for centralized policy management, and GuardDuty is a threat detection service rather than a DDoS prevention service.

Question 193

A company needs to provide customer service by using voice calls and web chat features. Which AWS service should the company use to meet these requirements?

A. Amazon Aurora

B. Amazon Connect

C. Amazon WorkSpaces

D. AWS Organizations

Show Answer

Correct Answer: B

Explanation:
Amazon Connect is a fully managed cloud contact center service that supports voice calls and web chat, making it ideal for customer service use cases. The other options do not provide contact center or customer interaction capabilities.

Question 194

Which of the following are economic benefits of using the AWS Cloud? (Choose two.)

A. Consumption-based pricing

B. Perpetual licenses

C. Economies of scale

D. AWS Enterprise Support at no additional cost

E. Bring-your-own-hardware model

Show Answer

Correct Answer: A, C

Explanation:
Consumption-based pricing lets customers pay only for what they use, reducing upfront capital expenses. Economies of scale allow AWS to operate infrastructure more efficiently and pass cost savings on to customers. The other options do not represent economic benefits of the AWS Cloud.

Question 195

A cloud engineer wants to store data in Amazon S3. The engineer will access some of the data yearly and some of the data daily. Which S3 storage class will meet these requirements MOST cost-effectively?

A. S3 Standard

B. S3 Glacier Deep Archive

C. S3 One Zone-Infrequent Access (S3 One Zone-IA)

D. S3 Intelligent-Tiering

Show Answer

Correct Answer: D

Explanation:
The data has mixed and changing access patterns (some accessed daily, some yearly). S3 Intelligent-Tiering is designed for unknown or variable access patterns and automatically moves objects between frequent and infrequent access tiers to minimize cost without performance impact. Other classes are optimized for a single, predictable access pattern and would be less cost-effective overall.

Question 196

A company wants to run CPU-intensive workload across multiple Amazon EC2 instances. Which EC2 instance type should the company use to meet this requirement?

A. General purpose instances

B. Compute optimized instances

C. Memory optimized instances

D. Storage optimized instances

Show Answer

Correct Answer: B

Explanation:
CPU-intensive workloads benefit from high CPU core counts and performance. Compute optimized EC2 instances are specifically designed for compute-bound applications, making them the best fit for this requirement.

Question 197

A company needs to identify who accessed an AWS service and what action was performed for a given time period. Which AWS service should the company use to meet this requirement?

A. Amazon CloudWatch

B. AWS CloudTrail

C. AWS Security Hub

D. Amazon Inspector

Show Answer

Correct Answer: B

Explanation:
AWS CloudTrail records and logs AWS API calls and user activity, allowing the company to see who accessed an AWS service and what actions were performed during a specific time period.

Question 198

A company is running a reporting web server application on Amazon EC2 instances. The application runs once every week and once again at the end of the month. The EC2 instances can be shut down when they are not in use. What is the MOST cost-effective billing model for this use case?

A. Standard Reserved Instances

B. Convertible Reserved Instances

C. On-Demand Capacity Reservations

D. On-Demand Instances

Show Answer

Correct Answer: D

Explanation:
The workload runs only intermittently (weekly and monthly) and the EC2 instances can be stopped when not in use. On-Demand Instances are the most cost-effective option because there is no long-term commitment and the company pays only for the compute time actually used. Reserved Instances (Standard or Convertible) require a 1- or 3-year commitment and would be underutilized, while On-Demand Capacity Reservations ensure capacity availability but do not reduce cost and therefore are unnecessary for this use case.

Question 199

Which pillar of the AWS Well-Architected Framework aligns with the ability to make frequent, small, and reversible changes to AWS Cloud architecture?

A. Security

B. Cost optimization

C. Operational excellence

D. Performance efficiency

Show Answer

Correct Answer: C

Explanation:
The Operational Excellence pillar focuses on running and monitoring systems effectively and continuously improving processes and procedures. A key design principle of this pillar is the ability to make frequent, small, and reversible changes to cloud architecture, enabling safer experimentation and faster innovation.

Question 200

A company wants to use a managed service to identify and protect sensitive data that is stored in Amazon S3. Which AWS service will meet these requirements?

A. AWS IAM Access Analyzer

B. Amazon GuardDuty

C. Amazon Inspector

D. Amazon Macie

Show Answer

Correct Answer: D

Explanation:
Amazon Macie is a fully managed data security and data privacy service that uses machine learning to automatically discover, classify, and help protect sensitive data stored in Amazon S3, such as PII. The other services focus on access analysis (IAM Access Analyzer), threat detection (GuardDuty), or vulnerability assessment of compute resources (Inspector), not sensitive data discovery in S3.

Question 201

A company wants to deploy an application that stores data in a relational database. The company wants database tasks, such as automated backups and database snapshots, to be managed by AWS. Which AWS service will meet these requirements?

A. Amazon DocumentDB

B. Amazon RDS

C. Amazon Elastic Block Store (Amazon EBS)

D. Amazon S3

Show Answer

Correct Answer: B

Explanation:
The application requires a relational database with AWS-managed operational tasks such as automated backups and snapshots. Amazon RDS is a fully managed relational database service that provides these features out of the box. Amazon DocumentDB is non-relational, Amazon EBS is block storage (not a database service), and Amazon S3 is object storage.