Amazon CLF-C02 Exam Prep
AWS Certified Cloud Practitioner CLF-C02 (Page 24 )

Updated On: 8-Oct-2026

A company needs to set up billing alarms to monitor estimated charges for an AWS account.
Which AWS service or tool will meet this requirement?

  1. AWS CloudTrail
  2. Amazon CloudWatch
  3. AWS Organizations
  4. AWS Cost Explorer

Answer(s): B

Explanation:

Amazon CloudWatch can create billing alarms based on estimated AWS charges. These alarms can notify the company when estimated costs exceed configured thresholds.



A company is designing AWS architecture that will add compute resources when the company needs them.
The architecture also includes a disaster recovery plan with automatic failover.
Which pillar of the AWS Well-Architected Framework does this architecture represent?

  1. Reliability
  2. Operational excellence
  3. Security
  4. Performance efficiency

Answer(s): A

Explanation:

The reliability pillar focuses on a workload’s ability to perform its intended function correctly and consistently,
recover from failures, and dynamically acquire resources to meet demand. Automatic failover and scaling compute capacity are key reliability practices.



A company is running a globally-accessible application on AWS. The company wants to optimize the application's network traffic.
Which AWS service will meet this requirement?

  1. AWS Auto Scaling
  2. AWS CloudFormation
  3. Amazon Connect
  4. AWS Global Accelerator

Answer(s): D

Explanation:

AWS Global Accelerator improves the performance and availability of globally distributed applications by directing user traffic to the optimal AWS endpoint using the AWS global network. This optimizes network traffic and reduces latency for users worldwide.



Which tasks are responsibilities of the customer, according to the AWS shared responsibility model? (Choose two.)

  1. Secure the virtualization layer.
  2. Encrypt data and maintain data integrity.
  3. Patch the Amazon RDS operating system.
  4. Maintain identity and access management controls.
  5. Secure Availability Zones.

Answer(s): B,D

Explanation:


Reference:

https://aws.amazon.com/compliance/shared-responsibility-model/



A company needs to automatically protect its Amazon EC2 instances from distributed denial of service (DDoS)
attacks.
Which AWS service or tool will provide this protection?

  1. Network access control list (ACL)
  2. AWS Shield
  3. Security group
  4. Amazon GuardDuty

Answer(s): B

Explanation:

AWS Shield is a managed DDoS protection service that automatically safeguards applications running on
AWS, including EC2 instances, from common and large-scale DDoS attacks.
Network ACL provides basic traffic filtering but does not protect against DDoS.
Security group acts as a virtual firewall for EC2, but it does not offer DDoS mitigation.
Amazon GuardDuty is a threat detection service that analyzes logs for suspicious activity, but it does not actively block DDoS attacks.



Viewing page 24 of 201
Viewing questions 116 - 120 out of 999 questions


Post your Comments and Discuss Amazon CLF-C02 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!