Amazon CLF-C02 Exam Prep
AWS Certified Cloud Practitioner CLF-C02 (Page 23 )

Updated On: 8-Oct-2026

A company's information security manager is supervising a move to AWS and wants to ensure that AWS best practices are followed. The manager has concerns about the potential misuse of AWS account root user credentials.
Which of the following is an AWS best practice for using the AWS account root user credentials?

  1. Allow only the manager to use the account root user credentials for normal activities.
  2. Use the account root user credentials only for Amazon EC2 instances from the AWS Free Tier.
  3. Use the account root user credentials only when they alone must be used to perform a required function.
  4. Use the account root user credentials only for the creation of private VPC subnets.

Answer(s): C

Explanation:

AWS best practice is to avoid using the root user for everyday tasks. The root user should only be used for specific account-level functions that require it, such as closing the account or changing root credentials. All other tasks should be performed using IAM users or roles with least privilege access.



What is the scope of a VPC within the AWS network?

  1. A VPC can span all Availability Zones globally.
  2. A VPC must span at least two subnets in each AWS Region.
  3. A VPC must span at least two edge locations in each AWS Region.
  4. A VPC can span all Availability Zones within an AWS Region.

Answer(s): D

Explanation:

A Virtual Private Cloud (VPC) is region-specific and can span all the Availability Zones within a single AWS
Region. Subnets within the VPC are created in individual Availability Zones, enabling isolation and fault tolerance within the region.



A company needs to collect and assess on-premises server and application inventory data before moving its infrastructure to AWS.
Which AWS service provides this functionality?

  1. Amazon AppFlow
  2. AWS Migration Hub
  3. Amazon QuickSight
  4. AWS Step Functions

Answer(s): B

Explanation:

AWS Migration Hub helps companies collect and assess on-premises server and application inventory data. It provides a centralized location to track and plan migrations to AWS, enabling a smooth and efficient migration process by analyzing application dependencies and performance.



A company runs a legacy workload in an on-premises data center. The company wants to migrate the workload to AWS. The company does not want to make any changes to the workload.
Which migration strategy should the company use?

  1. Repurchase
  2. Replatform
  3. Rehost
  4. Refactor

Answer(s): C

Explanation:


Reference:

https://docs.aws.amazon.com/prescriptive-guidance/latest/large-migration-guide/migration-strategies.html



A company wants an integrated development environment (IDE) to deploy a machine learning (ML) model.
Which AWS service will meet this requirement?

  1. AWS CodeBuild
  2. Amazon CodeGuru
  3. Amazon Athena
  4. Amazon SageMaker Studio

Answer(s): D

Explanation:

Amazon SageMaker Studio is an integrated development environment (IDE) specifically designed for machine learning. It provides a comprehensive suite of tools for building, training, and deploying machine learning models, making it an ideal solution for deploying ML models within a unified environment.



Viewing page 23 of 201
Viewing questions 111 - 115 out of 999 questions


Post your Comments and Discuss Amazon CLF-C02 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!