CLF-C02 Free Practice Questions — Page 22 (2026)

Question 212

A company wants to visualize and manage AWS Cloud costs and usage for a specific period of time. Which AWS service or feature will meet these requirements?

A. Cost Explorer

B. Consolidated billing

C. AWS Organizations

D. AWS Budgets

Show Answer

Correct Answer: A

Explanation:
AWS Cost Explorer is specifically designed to visualize, analyze, and manage AWS costs and usage over selectable time periods with charts, reports, and forecasts. The other options focus on account management or budgeting, not detailed cost visualization.

Question 213

A company wants to transfer a virtual Windows Server 2022 that is currently running in its own data center to AWS. The company wants to automatically convert the existing server to run directly on AWS infrastructure instead of visualized hardware. Which AWS service will meet these requirements?

A. AWS DataSync

B. AWS Database Migration Service (AWS DMS)

C. AWS Application Discovery Service

D. AWS Application Migration Service

Show Answer

Correct Answer: D

Explanation:
AWS Application Migration Service (MGN) is designed to lift and shift existing physical or virtual servers into AWS by automatically converting them to run natively on AWS infrastructure (Amazon EC2). The other options focus on data transfer, database migration, or discovery rather than full server conversion.

Question 214

A company hosts a web application on AWS. The company has improved the availability of its application by provisioning multiple Amazon EC2 instances. The company wants to distribute its traffic across the EC2 instances while providing a single point of contact to the web clients. Which AWS service can distribute the traffic to multiple EC2 instances as targets?

A. VPC endpoints

B. Application Load Balancer

C. NAT gateway

D. Internet gateway

Show Answer

Correct Answer: B

Explanation:
An Application Load Balancer distributes incoming web traffic across multiple EC2 instances and provides a single DNS endpoint for clients. The other options do not perform traffic distribution: VPC endpoints provide private connectivity, a NAT gateway enables outbound internet access, and an internet gateway connects a VPC to the internet.

Question 215

An administrator observed that multiple AWS resources were deleted yesterday. Which AWS service will help identify the cause and determine which user deleted the resources?

A. AWS CloudTrail

B. Amazon Inspector

C. Amazon GuardDuty

D. AWS Trusted Advisor

Show Answer

Correct Answer: A

Explanation:
AWS CloudTrail records and retains a history of API calls and events in an AWS account, including which user or role performed an action, what action was taken, and when it occurred. This allows administrators to identify who deleted resources and determine the cause. The other services focus on vulnerabilities, threats, or best-practice recommendations rather than audit logging.

Question 216

A company wants to continuously improve processes and procedures to deliver business value. Which pillar of the AWS Well-Architected Framework does this goal represent?

A. Performance efficiency

B. Operational excellence

C. Reliability

D. Sustainability

Show Answer

Correct Answer: B

Explanation:
The goal of continuously improving processes and procedures to deliver business value aligns with the Operational Excellence pillar, which focuses on running and monitoring systems, refining processes, and continually improving operations to support business outcomes.

Question 217

Which component must be attached to a VPC to enable inbound internet access?

A. NAT gateway

B. VPC endpoint

C. VPN connection

D. Internet gateway

Show Answer

Correct Answer: D

Explanation:
Inbound internet access to resources in a VPC requires an Internet Gateway to be attached to the VPC. An Internet Gateway provides a target in route tables for internet-routable traffic and enables communication between the VPC and the public internet. NAT gateways only support outbound traffic, VPC endpoints are for private service access, and VPN connections are for private network connectivity.

Question 218

An independent software vendor wants to deliver and share its custom Amazon Machine Images (AMIs) to prospective customers. Which AWS service will meet these requirements?

A. AWS Marketplace

B. AWS Data Exchange

C. Amazon EC2

D. AWS Organizations

Show Answer

Correct Answer: A

Explanation:
AWS Marketplace is designed for independent software vendors to package, deliver, and share software products—including custom Amazon Machine Images (AMIs)—with prospective customers. It provides distribution, licensing, and billing capabilities, which the other options do not.

Question 219

A company wants an Amazon S3 solution that provides access to object storage within single-digit milliseconds. Which solution will meet these requirements?

A. S3 Express One Zone

B. S3 Standard

C. S3 Glacier Flexible Retrieval

D. S3 Glacier Instant Retrieval

Show Answer

Correct Answer: A

Explanation:
The key requirement is *single-digit millisecond* access to object storage. Amazon S3 Express One Zone is explicitly designed and marketed to deliver consistent single-digit millisecond latency for latency-sensitive and high-performance workloads. While S3 Standard offers low-latency access, it does not guarantee or emphasize consistent single-digit millisecond performance. Glacier options are archival and do not meet the requirement.

Question 220

A company needs to convert video files and audio files to a format that will play on smartphones. Which AWS service will meet this requirement?

A. Amazon Comprehend

B. Amazon Rekognition

C. Amazon Elastic Transcoder

D. Amazon Polly

Show Answer

Correct Answer: C

Explanation:
Amazon Elastic Transcoder is designed to convert (transcode) video and audio files stored in Amazon S3 into formats optimized for playback on devices such as smartphones, tablets, and PCs. The other services focus on NLP (Comprehend), image/video analysis (Rekognition), and text-to-speech (Polly), not media format conversion.

Question 221

A company wants to set up a secure network connection from on premises to the AWS Cloud within 1 week. Which solution will meet these requirements?

A. AWS Direct Connect

B. Amazon VPC

C. AWS Site-to-Site VPN

D. Edge location

Show Answer

Correct Answer: C

Explanation:
AWS Site-to-Site VPN can be set up quickly—often within hours or days—using internet-based IPSec tunnels, making it suitable for a 1-week timeline. AWS Direct Connect requires longer provisioning times, Amazon VPC alone does not establish an on-premises connection, and edge locations are for content delivery, not private network connectivity.