CLF-C02 Free Practice Questions — Page 32 (2026)

Question 312

A company wants to estimate the cost for its AWS architecture solution before migration. Which AWS service or feature will meet this requirement?

A. Amazon Detective

B. AWS Budgets

C. AWS Resource Explorer

D. AWS Pricing Calculator

Show Answer

Correct Answer: D

Explanation:
The requirement is to estimate AWS costs before migrating. AWS Pricing Calculator is specifically designed for pre-deployment cost estimation by modeling planned architectures and usage. AWS Budgets works after resources exist, Amazon Detective is for security investigations, and AWS Resource Explorer is for resource discovery, not cost estimation.

Question 313

A new AWS user needs to interact with AWS Support by using API calls. Which AWS Support plan will meet this requirement MOST cost-effectively?

A. AWS Basic Support

B. AWS Developer Support

C. AWS Business Support

D. AWS Enterprise Support

Show Answer

Correct Answer: C

Explanation:
Interacting with AWS Support via API (programmatic case management / AWS Support API) is available only with Business, Enterprise On-Ramp, and Enterprise Support plans. Basic and Developer Support do not include Support API access. Therefore, the least expensive plan that meets the requirement is AWS Business Support.

Question 314

A company uses Amazon Aurora as its database service. The company wants to encrypt its databases and database backups. Which party manages the encryption of the database clusters and database snapshots, according to the AWS shared responsibility model?

A. AWS

B. The company

C. AWS Marketplace partners

D. Third-party partners

Show Answer

Correct Answer: A

Explanation:
Amazon Aurora is a fully managed database service. Under the AWS shared responsibility model, AWS manages the encryption mechanisms for Aurora database clusters, automated backups, and snapshots (security of the cloud). The customer is responsible for deciding to enable encryption and for key management and access controls, but not for operating the encryption itself.

Question 315

A company runs MySQL database workloads on self-managed servers in an on-premises data center. The company wants to migrate the database workloads to an AWS managed service. Which migration strategy should the company use?

A. Rehost

B. Repurchase

C. Refactor

D. Replatform

Show Answer

Correct Answer: D

Explanation:
Migrating MySQL workloads from self-managed on‑premises servers to an AWS managed database service (such as Amazon RDS or Aurora) involves keeping the same database engine and core functionality while making some adjustments to use a fully managed platform. This is not a pure lift‑and‑shift (rehost), nor a redesign (refactor), nor changing the product (repurchase). Therefore, the correct strategy is replatform (lift, tinker, and shift).

Question 316

Which AWS service or resource can a company use to deploy AWS WAF rules?

A. Amazon EC2

B. Application Load Balancer

C. AWS Trusted Advisor

D. Network Load Balancer

Show Answer

Correct Answer: B

Explanation:
AWS WAF rules are deployed by associating a web ACL with supported AWS resources. Among the options given, only the Application Load Balancer natively integrates with AWS WAF. EC2 instances cannot have WAF rules attached directly, Network Load Balancers operate at Layer 4 and do not support WAF, and AWS Trusted Advisor is only an advisory service.

Question 317

Which AWS service can migrate data between AWS storage services?

A. AWS DataSync

B. AWS Direct Connect

C. AWS Lake Formation

D. Amazon S3

Show Answer

Correct Answer: A

Explanation:
AWS DataSync is a managed service specifically designed to move and synchronize data between AWS storage services (such as Amazon S3, EFS, and FSx) as well as between on‑premises and AWS. The other options do not provide storage-to-storage data migration capabilities.

Question 318

A company uses a third-party identity provider (IdP). The company wants to provide its employees with access to AWS accounts and services without requiring another set of login credentials. Which AWS service will meet this requirement?

A. AWS Directory Service

B. Amazon Cognito

C. AWS IAM Identity Center

D. AWS Resource Access Manager (AWS RAM)

Show Answer

Correct Answer: C

Explanation:
The requirement is workforce access to AWS accounts and services using an existing third-party IdP without new credentials. AWS IAM Identity Center (formerly AWS SSO) provides federated SSO with external IdPs via SAML/OIDC and centrally manages employee access to multiple AWS accounts and services. Amazon Cognito is for application end users, Directory Service manages directories but doesn’t itself provide full AWS account SSO, and AWS RAM is for resource sharing, not identity access.

Question 319

Which cloud concept is demonstrated by using AWS Cost Explorer?

A. Rightsizing

B. Reliability

C. Resilience

D. Modernization

Show Answer

Correct Answer: A

Explanation:
AWS Cost Explorer provides visibility into cost and usage patterns and includes rightsizing recommendations. It helps identify underutilized or overprovisioned resources and optimize them to reduce cost, which directly demonstrates the cloud concept of rightsizing.

Question 320

Which AWS service or resource can identify and provide reports on IAM resources in one AWS account that is shared with another AWS account?

A. IAM credential report

B. AWS IAM Identity Center (AWS Single Sign-On)

C. AWS Identity and Access Management Access Analyzer

D. Amazon Cognito user pool

Show Answer

Correct Answer: C

Explanation:
AWS IAM Access Analyzer identifies resources in your AWS account that are accessible by principals from outside the account. It analyzes resource-based policies (such as on S3 buckets, IAM roles, KMS keys, and Lambda functions) and provides findings and reports for cross-account and public access. The other options do not analyze or report cross-account sharing of IAM-protected resources.

Question 321

A company has deployed a web application to Amazon EC2 instances. The EC2 instances have low usage. Which AWS service or feature should the company use to rightsize the EC2 instances?

A. AWS Config

B. AWS Cost Anomaly Detection

C. AWS Budgets

D. AWS Compute Optimizer

Show Answer

Correct Answer: D

Explanation:
AWS Compute Optimizer analyzes historical utilization metrics (CPU, memory, network, and disk) of EC2 instances and provides rightsizing recommendations to reduce cost and improve performance. The other options focus on compliance (AWS Config), anomaly detection (AWS Cost Anomaly Detection), or budget tracking (AWS Budgets), not instance rightsizing.