Practice questions › Cloud Computing › AWS Certified Cloud Practitioner (CLF-C02)
Cloud Basics, EC2, S3 & Shared Responsibility MCQs
AWS Certified Cloud Practitioner (CLF-C02) · Cloud Computing · 18 practice questions
- EC2 Storage Options
- Cloud Computing Basics - CapEx vs Cloud
- Security Groups
- IAM Roles vs Access Keys
- Load Balancer Types
- EC2 Purchasing Options
- Auto Scaling Group Strategies
- IAM Policies
1. A batch-processing workload can tolerate sudden interruptions and the team wants to minimize cost above all else, with no need for guaranteed availability. Which EC2 purchasing option best fits?
- ASpot Instances
- BReserved Instances
- COn-Demand Instances
- DDedicated Hosts
Show answer
A. Spot Instances Spot Instances use spare AWS capacity, are very cheap with the most discount, but can be interrupted, making them ideal for interruption-tolerant, cost-sensitive workloads.
2. A DevOps engineer is deciding how to grant an EC2-hosted application access to an S3 bucket. To avoid embedding long-term credentials in the application, which approach aligns with IAM best practices described in the text?
- AShare the root user's credentials with the application
- BAttach an IAM role to the EC2 instance that provides temporary permissions
- CUse the AWS CLI with a hardcoded Access Key ID
- DStore the Secret Access Key directly in the application code
Show answer
B. Attach an IAM role to the EC2 instance that provides temporary permissions IAM roles provide temporary permissions to AWS services; the example given is giving an EC2 instance a role for S3 access instead of using long-term credentials.
3. A security administrator wants to identify which permissions a particular IAM user was granted and when each associated service was last actually used, in order to remove rarely-used permissions. Which IAM tool should they use?
- AIAM Password Policy
- BIAM Access Advisor
- CIAM Credential Report
- DIAM MFA
Show answer
B. IAM Access Advisor IAM Access Advisor shows permissions of services granted and when those services were last accessed, at the user level, enabling removal of rarely used permissions.
Practise all 18 questions free
Every answer is marked the moment you tap it, with the reason. Your weak topics come back until you get them right.
Start free, no card needed