AWS Certified Cloud Practitioner (CLF-C02) practice questions

A startup is unsure how many customers it will attract and does not want to buy a large fleet of servers before launch. Which benefit of the AWS Cloud most directly addresses this concern?

• AIt lets the firm trade a large upfront capital expense for a variable expense tied to usagecheck_circle Correct
• BIt guarantees that every workload will run faster than on the firm's own hardware
• CIt removes the need to apply any security controls because AWS handles all of them
• DIt provides a single fixed monthly price that never changes regardless of how much is used

Why A is correct: Paying only for the capacity actually used removes the need to buy servers in advance, which is exactly what a startup with uncertain demand wants.

Why B is wrong: AWS does not promise universally faster performance, and raw speed is not the concern here; the startup is worried about committing to hardware it may not need.

Why C is wrong: AWS uses a shared responsibility model and does not handle all security, so this misstates how the cloud works and does not address the hardware concern.

Why D is wrong: Cloud pricing usually scales with consumption rather than a flat fee, so the idea of an unchanging fixed bill is the opposite of the variable expense benefit.

A company runs its application on Amazon EC2 instances. Under the AWS shared responsibility model, which task is the responsibility of the customer rather than AWS?

• AMaintaining the physical security of the data centres that host the instances
• BInstalling operating system patches on the guest operating system of the instancescheck_circle Correct
• CPatching the firmware of the underlying host servers that run the hypervisor
• DReplacing failed physical disks in the storage racks that back the volumes

Why A is wrong: Physical security of the facilities is security OF the cloud, which AWS owns; the customer never sees the hardware, so this cannot be a customer task.

Why B is correct: On Amazon EC2 the customer controls the guest operating system, so patching, updating and hardening that OS is squarely a customer responsibility.

Why C is wrong: Host firmware and the hypervisor sit below the guest OS boundary, so AWS maintains them; a candidate may confuse host patching with guest patching.

Why D is wrong: Hardware replacement is part of the global infrastructure AWS operates; customers have no physical access, so this is never their duty.

An operations engineer wants to script the launch of dozens of identical Amazon EC2 instances from a terminal and re-run that script as part of a nightly job. Which way of interacting with AWS best supports this automated, repeatable approach?

• AThe AWS Command Line Interface, a tool that issues AWS service commands from a terminal and can be placed inside scriptscheck_circle Correct
• BThe AWS Management Console, a web interface where each instance is launched by pointing and clicking through the browser pages
• CAWS Trusted Advisor, a tool that inspects an account and recommends improvements for cost, security and fault tolerance
• DAmazon CloudWatch, a monitoring service that gathers metrics and alarms from resources once those resources are already running

Why A is correct: The AWS CLI sends commands from a terminal, so the launch can be written into a script and re-run automatically on a schedule as the engineer wants.

Why B is wrong: The console is a manual web interface, so it cannot be scripted into a nightly job and would force the engineer to click through every launch by hand.

Why C is wrong: Trusted Advisor only reviews an account and suggests improvements, so it does not launch instances or run scripted provisioning at all.

Why D is wrong: CloudWatch watches resources after they exist, so it reports on instances but cannot launch them from a scriptable terminal command.