The AWS Certified Cloud Practitioner (CLF-C02) exam is designed for individuals who want to demonstrate their overall understanding of AWS Cloud. It covers basic AWS services and their benefits.
What happens when an EC2 instance reaches its limit of CPU credits?
APerformance degrades
BInstance terminates
CCPU usage is halved
DNo impact on performance
Explanation
When CPU credits are exhausted, performance throttles down; the instance continues running.
Q232
What is the main benefit of using AWS Elastic Load Balancing (ELB)?
AIncreased application availability
BReduced cost for storage
CFaster deployment process
DEnhanced monitoring capabilities
Explanation
ELB improves availability by distributing traffic across multiple instances, while other options are not the primary purpose of ELB.
Q233
A company needs to store sensitive customer information and be compliant with GDPR. Which AWS service is most appropriate?
AAmazon S3 with SSE
BAWS Lambda
CAmazon EC2
DAWS Glue
Explanation
Amazon S3 with Server-Side Encryption (SSE) provides compliant storage for sensitive data, unlike the other services mentioned.
Q234
You are configuring an AWS Identity and Access Management (IAM) role for an EC2 instance. What happens when you attach a policy that denies all actions?
AEC2 instance can perform all actions
BNo actions are permitted
CPermissions are overridden by roles
DInstance accesses only network resources
Explanation
Attaching a deny policy enforces no actions being permitted, while the other options are invalid interpretations of IAM policies.
Q235
Which service helps manage access to AWS resources?
AAWS Identity and Access Management
BAmazon EC2
CAWS Lambda
DAmazon S3
Explanation
AWS Identity and Access Management (IAM) manages user access to AWS resources; the other options serve different purposes.
Q236
A company needs to regularly back up their data with minimal operational overhead. Which AWS service should they use?
AAmazon S3
BAWS Backup
CAmazon EFS
DAWS EC2
Explanation
AWS Backup automates backup across AWS services, while S3 and EFS are storage options without the automation.
Q237
What happens when you set an S3 bucket policy but do not have public access blocked?
ABucket becomes publicly accessible
BAccess is limited to logged users
CBucket policy is ignored completely
DAccess denied to everyone
Explanation
Without public access blocking, the bucket becomes publicly accessible according to the policy; others misinterpret access as restricted.
Q238
Which service is best for scalable NoSQL databases?
AAmazon DynamoDB
BAmazon RDS
CAWS Lambda
DAmazon Aurora
Explanation
Amazon DynamoDB is specifically designed for scalable NoSQL storage, while RDS and Aurora are for relational databases.
Q239
A company needs to manage user access to resources. What AWS service should they use?
AAWS Identity and Access Management (IAM)
BAmazon CloudWatch
CAWS Direct Connect
DAmazon VPC
Explanation
AWS IAM is the best service to manage user access, while the others do not handle identity management.
Q240
You are configuring an EC2 instance to run a web application. What do you need to ensure it's publicly accessible?
AAssign a private IP address
BAttach a Security Group with inbound rules
CUse a NAT Gateway
DDisable all routing tables
Explanation
Attaching a Security Group with the appropriate inbound rules is necessary for public access, whereas the other options restrict access or are irrelevant.