{"id":19051,"date":"2026-09-22T11:21:12","date_gmt":"2026-09-22T11:21:12","guid":{"rendered":"https:\/\/www.examlabs.com\/certification\/?p=19051"},"modified":"2026-09-22T11:21:12","modified_gmt":"2026-09-22T11:21:12","slug":"amazon-aws-certified-cloud-practitioner-clf-c02-practice-test-questions-and-exam-dumps-part18-q341-360","status":"publish","type":"post","link":"https:\/\/www.examlabs.com\/certification\/amazon-aws-certified-cloud-practitioner-clf-c02-practice-test-questions-and-exam-dumps-part18-q341-360\/","title":{"rendered":"Amazon AWS Certified Cloud Practitioner CLF-C02 Practice Test Questions and Exam Dumps Part18 Q341-360"},"content":{"rendered":"

View Full <\/b>Amazon AWS Certified Cloud Practitioner CLF-C02 Exam Dumps<\/b><\/a> and Practice Test Dumps.<\/b><\/h2>\n

 <\/p>\n

Question 341<\/b><\/h3>\n

Under the AWS Shared Responsibility Model, which task is generally the customer’s responsibility when using Amazon EC2?<\/b><\/p>\n

    \n
  1. Maintaining the physical data center<\/span><\/li>\n
  2. Replacing failed physical servers<\/span><\/li>\n
  3. Applying security patches to the guest operating system<\/span><\/li>\n
  4. Securing the AWS global infrastructure<\/span><\/li>\n<\/ol>\n

    Correct Answer: 3<\/b><\/p>\n

    Explanation<\/b><\/p>\n

    For Amazon EC2, AWS is responsible for security of the underlying cloud infrastructure, including physical facilities, networking, and hardware. The customer is responsible for security within the guest operating system and the applications running on the instance. This can include applying operating system patches, configuring host-based firewalls, and managing installed software. The exact responsibilities vary by service, but EC2 provides customers with more control than highly managed services. Understanding this distinction is essential for determining which security tasks AWS performs and which tasks remain with the customer.<\/span><\/p>\n

    Question 342<\/b><\/h3>\n

    A company wants to define how quickly systems must be restored after a major application failure. Which disaster recovery metric describes this requirement?<\/b><\/p>\n

      \n
    1. Recovery Time Objective (RTO)<\/span><\/li>\n
    2. Recovery Point Objective (RPO)<\/span><\/li>\n
    3. Mean Time To Failure (MTTF)<\/span><\/li>\n
    4. Service Level Agreement (SLA)<\/span><\/li>\n<\/ol>\n

      Correct Answer: 1<\/b><\/p>\n

      Explanation<\/b><\/p>\n

      Recovery Time Objective (RTO) defines the maximum acceptable amount of time that a workload can remain unavailable after a disruption. For example, an organization might establish an RTO of two hours, meaning the application should be restored within that period. Recovery Point Objective (RPO), by contrast, focuses on the amount of data loss that can be tolerated and is measured in time. RTO and RPO are important considerations when designing disaster recovery architectures because they help determine the appropriate backup, replication, and recovery strategy for a workload.<\/span><\/p>\n

      Question 343<\/b><\/h3>\n

      Which AWS service allows customers to share supported AWS resources across multiple AWS accounts within an organization?<\/b><\/p>\n

        \n
      1. AWS Organizations<\/span><\/li>\n
      2. AWS Resource Access Manager (AWS RAM)<\/span><\/li>\n
      3. AWS Control Tower<\/span><\/li>\n
      4. AWS Service Catalog<\/span><\/li>\n<\/ol>\n

        Correct Answer: 2<\/b><\/p>\n

        Explanation<\/b><\/p>\n

        AWS Resource Access Manager (AWS RAM) allows customers to share supported AWS resources across accounts, organizational units, or an entire AWS Organization. This can reduce duplication and simplify centralized resource management. Depending on the resource type, organizations can share resources such as certain network components and other supported services without creating separate copies in every account. AWS Organizations focuses primarily on managing accounts and applying policies, while AWS RAM focuses on resource sharing. AWS Control Tower provides broader governance capabilities for multi-account environments.<\/span><\/p>\n

        Question 344<\/b><\/h3>\n

        Which pricing concept allows AWS customers to benefit from lower prices when their usage increases?<\/b><\/p>\n

          \n
        1. Dedicated host pricing<\/span><\/li>\n
        2. Single-user licensing<\/span><\/li>\n
        3. Fixed monthly pricing<\/span><\/li>\n
        4. Volume-based pricing<\/span><\/li>\n<\/ol>\n

          Correct Answer: 4<\/b><\/p>\n

          Explanation<\/b><\/p>\n

          AWS uses volume-based pricing for several services, meaning the price per unit can decrease as usage increases. This approach can provide cost advantages for workloads that consume significant amounts of AWS resources. Pricing structures differ between services, so customers should review the specific pricing model applicable to the service they use. AWS also provides other cost optimization mechanisms, such as Savings Plans and Reserved Instances for eligible services. Understanding pricing tiers and usage-based costs helps organizations estimate expenses and identify opportunities to reduce their overall cloud spending.<\/span><\/p>\n

          Question 345<\/b><\/h3>\n

          A company wants to automatically identify which AWS resources are responsible for its monthly spending by department. Which feature is most appropriate?<\/b><\/p>\n

            \n
          1. Cost allocation tags<\/span><\/li>\n
          2. Security groups<\/span><\/li>\n
          3. Route tables<\/span><\/li>\n
          4. IAM policies<\/span><\/li>\n<\/ol>\n

            Correct Answer: 1<\/b><\/p>\n

            Explanation<\/b><\/p>\n

            Cost allocation tags can be applied to supported AWS resources so that organizations can categorize and track spending according to business dimensions such as departments, projects, environments, or applications. After activation in AWS Billing and Cost Management, these tags can help organizations analyze costs and attribute expenses to specific categories. Security groups and route tables control networking, while IAM policies control permissions. Cost allocation tags are therefore particularly useful for financial visibility and chargeback or showback processes in organizations with multiple teams or workloads.<\/span><\/p>\n

            Question 346<\/b><\/h3>\n

            Which disaster recovery strategy maintains a scaled-down version of the production environment that can be expanded when a disaster occurs?<\/b><\/p>\n

              \n
            1. Backup and restore<\/span><\/li>\n
            2. Warm standby<\/span><\/li>\n
            3. Multi-site active-active<\/span><\/li>\n
            4. Manual recovery<\/span><\/li>\n<\/ol>\n

              Correct Answer: 2<\/b><\/p>\n

              Explanation<\/b><\/p>\n

              A warm standby disaster recovery strategy maintains a functioning but usually smaller version of the production environment. If the primary environment becomes unavailable, the standby environment can be scaled up to handle production traffic. This generally provides faster recovery than a backup-and-restore approach because infrastructure and core services are already running. A multi-site active-active architecture keeps production workloads operating across multiple locations simultaneously and can provide even faster continuity, but it typically requires greater complexity and cost. The appropriate strategy depends on business recovery requirements and budget.<\/span><\/p>\n

              Question 347<\/b><\/h3>\n

              Which AWS service provides a centralized location for managing sessions and performing operational tasks on AWS resources?<\/b><\/p>\n

                \n
              1. AWS Systems Manager<\/span><\/li>\n
              2. Amazon Inspector<\/span><\/li>\n
              3. AWS Artifact<\/span><\/li>\n
              4. AWS Trusted Advisor<\/span><\/li>\n<\/ol>\n

                Correct Answer: 1<\/b><\/p>\n

                Explanation<\/b><\/p>\n

                AWS Systems Manager provides tools for managing and operating AWS resources from a centralized service. It supports capabilities such as Session Manager, which can provide secure access to managed instances without requiring traditional inbound SSH or RDP access. Systems Manager can also assist with patch management, inventory collection, automation, and configuration tasks. This makes it useful for operational management across large environments. Amazon Inspector focuses on vulnerability assessment, AWS Artifact provides compliance documents, and Trusted Advisor provides recommendations across several AWS best-practice categories.<\/span><\/p>\n

                Question 348<\/b><\/h3>\n

                What is the primary purpose of the AWS Free Tier?<\/b><\/p>\n

                  \n
                1. To provide unlimited access to every AWS service<\/span><\/li>\n
                2. To eliminate all AWS charges permanently<\/span><\/li>\n
                3. To allow customers to use certain AWS services within specified limits at no charge<\/span><\/li>\n
                4. To provide free enterprise-level technical support<\/span><\/li>\n<\/ol>\n

                  Correct Answer: 3<\/b><\/p>\n

                  Explanation<\/b><\/p>\n

                  The AWS Free Tier allows customers to use certain AWS services without charge within defined usage limits and eligibility conditions. The specific offers, durations, quantities, and participating services can vary. Exceeding the applicable limits or using services outside the included offer can result in charges. The Free Tier is useful for learning, experimentation, and developing small workloads while controlling initial costs. It should not be interpreted as unlimited free usage or as a replacement for monitoring AWS spending. Customers should review current Free Tier terms before deploying workloads.<\/span><\/p>\n

                  Question 349<\/b><\/h3>\n

                  Which AWS disaster recovery approach generally provides the highest level of continuous availability by operating workloads simultaneously in multiple locations?<\/b><\/p>\n

                    \n
                  1. Backup and restore<\/span><\/li>\n
                  2. Pilot light<\/span><\/li>\n
                  3. Warm standby<\/span><\/li>\n
                  4. Multi-site active-active<\/span><\/li>\n<\/ol>\n

                    Correct Answer: 4<\/b><\/p>\n

                    Explanation<\/b><\/p>\n

                    A multi-site active-active strategy operates production workloads across multiple locations simultaneously. Traffic can be distributed between environments, allowing one location to continue serving users if another becomes unavailable. Because both environments are actively serving workloads, recovery can be extremely rapid compared with approaches that require starting or scaling a secondary environment. However, active-active architectures generally involve greater operational complexity and cost. Backup and restore, pilot light, and warm standby can provide disaster recovery with different recovery times and costs. Organizations should select an approach according to their RTO, RPO, availability requirements, and budget.<\/span><\/p>\n

                    Question 350<\/b><\/h3>\n

                    Which AWS account practice provides an additional layer of protection for the AWS account root user?<\/b><\/p>\n

                      \n
                    1. Creating an access key for everyday use<\/span><\/li>\n
                    2. Enabling multi-factor authentication (MFA)<\/span><\/li>\n
                    3. Sharing the root credentials with administrators<\/span><\/li>\n
                    4. Disabling CloudTrail<\/span><\/li>\n<\/ol>\n

                      Correct Answer: 2<\/b><\/p>\n

                      Explanation<\/b><\/p>\n

                      Enabling multi-factor authentication (MFA) for the AWS account root user adds an additional authentication factor beyond the password. AWS recommends protecting the root user carefully because it has extensive privileges and should not normally be used for everyday administrative tasks. Customers should instead create appropriate IAM identities for regular operations and follow least-privilege principles. Root credentials should never be shared, and unnecessary root access keys should not be maintained. MFA is therefore an important security control for reducing the risk associated with unauthorized access to highly privileged account credentials.<\/span><\/p>\n

                      Question 351<\/b><\/h3>\n

                      Which AWS service is designed to provide private connectivity between a VPC and supported AWS services without requiring internet access?<\/b><\/p>\n

                        \n
                      1. AWS PrivateLink<\/span><\/li>\n
                      2. Amazon Route 53<\/span><\/li>\n
                      3. AWS Global Accelerator<\/span><\/li>\n
                      4. Amazon CloudFront<\/span><\/li>\n<\/ol>\n

                        Correct Answer: 1<\/b><\/p>\n

                        Explanation<\/b><\/p>\n

                        AWS PrivateLink enables private connectivity between virtual private clouds and supported services without requiring traffic to traverse the public internet. It uses VPC endpoints to provide private access to services and can also support privately exposing applications to other VPCs or accounts. This can help organizations reduce public exposure and simplify network architectures. Route 53 provides DNS services, Global Accelerator improves application availability and performance through AWS’s global network, and CloudFront is a content delivery network. PrivateLink is specifically associated with private service connectivity.<\/span><\/p>\n

                        Question 352<\/b><\/h3>\n

                        A company needs to retain data for several years but rarely accesses it. Which Amazon S3 storage class is designed for very long-term archival at low storage cost?<\/b><\/p>\n

                          \n
                        1. S3 Standard<\/span><\/li>\n
                        2. S3 Standard-IA<\/span><\/li>\n
                        3. S3 Glacier Deep Archive<\/span><\/li>\n
                        4. S3 Intelligent-Tiering<\/span><\/li>\n<\/ol>\n

                          Correct Answer: 3<\/b><\/p>\n

                          Explanation<\/b><\/p>\n

                          Amazon S3 Glacier Deep Archive is designed for long-term retention of data that is rarely accessed. It is suitable for use cases such as regulatory records, historical archives, and long-term backups where minimizing storage cost is more important than immediate access. Retrieval generally takes longer than with frequently accessed S3 storage classes. S3 Standard is intended for frequently accessed data, while Standard-IA is designed for less frequently accessed information that still requires relatively quick access. Intelligent-Tiering automatically moves eligible objects between access tiers based on changing access patterns.<\/span><\/p>\n

                          Question 353<\/b><\/h3>\n

                          Which AWS concept describes the ability of a system to handle an increase in workload by adding or removing resources as needed?<\/b><\/p>\n

                            \n
                          1. Durability<\/span><\/li>\n
                          2. Elasticity<\/span><\/li>\n
                          3. Governance<\/span><\/li>\n
                          4. Compliance<\/span><\/li>\n<\/ol>\n

                            Correct Answer: 2<\/b><\/p>\n

                            Explanation<\/b><\/p>\n

                            Elasticity is the ability of a system to dynamically adjust resources in response to changing workload demand. For example, an application can add compute capacity during periods of high traffic and reduce capacity when demand falls. This helps organizations avoid maintaining excessive resources during periods of low utilization while still handling demand increases. Scalability is related but can describe the broader ability to accommodate growth, while elasticity emphasizes dynamic adjustment. AWS services such as Auto Scaling can help implement elastic architectures by automatically changing resource capacity according to defined conditions.<\/span><\/p>\n

                            Question 354<\/b><\/h3>\n

                            Which AWS service can help a company create and manage a private virtual network in the AWS Cloud?<\/b><\/p>\n

                              \n
                            1. Amazon S3<\/span><\/li>\n
                            2. AWS Lambda<\/span><\/li>\n
                            3. Amazon DynamoDB<\/span><\/li>\n
                            4. Amazon VPC<\/span><\/li>\n<\/ol>\n

                              Correct Answer: 4<\/b><\/p>\n

                              Explanation<\/b><\/p>\n

                              Amazon Virtual Private Cloud (Amazon VPC) allows customers to create a logically isolated network environment within AWS. Customers can define IP address ranges, subnets, route tables, and network security controls for workloads running in the VPC. A VPC can include public and private subnets and can connect to other networks through services such as VPN or Direct Connect. Amazon S3 provides object storage, Lambda provides serverless compute, and DynamoDB provides NoSQL database capabilities. VPC is therefore the AWS service specifically designed for creating isolated virtual networks.<\/span><\/p>\n

                              Question 355<\/b><\/h3>\n

                              A company wants to understand how AWS services are billed based on the amount of data transferred between regions and the internet. Which AWS resource should the company consult?<\/b><\/p>\n

                                \n
                              1. AWS pricing information<\/span><\/li>\n
                              2. IAM policy simulator<\/span><\/li>\n
                              3. AWS Security Hub<\/span><\/li>\n
                              4. Amazon Inspector<\/span><\/li>\n<\/ol>\n

                                Correct Answer: 1<\/b><\/p>\n

                                Explanation<\/b><\/p>\n

                                AWS pricing information provides details about the charges associated with AWS services, including applicable data transfer costs. Data transfer pricing can vary depending on factors such as whether data moves between Availability Zones, AWS Regions, or the internet. Understanding these charges is important when designing distributed applications and estimating total costs. IAM Policy Simulator is used to evaluate permissions, Security Hub provides a centralized security view, and Inspector assesses workloads for vulnerabilities. Reviewing service-specific pricing details helps organizations make informed architectural and financial decisions before deploying workloads.<\/span><\/p>\n

                                Question 356<\/b><\/h3>\n

                                Which AWS service allows organizations to create a central governance environment for managing multiple AWS accounts and applying standardized controls?<\/b><\/p>\n

                                  \n
                                1. Amazon Cognito<\/span><\/li>\n
                                2. AWS Control Tower<\/span><\/li>\n
                                3. Amazon CloudFront<\/span><\/li>\n
                                4. AWS DataSync<\/span><\/li>\n<\/ol>\n

                                  Correct Answer: 2<\/b><\/p>\n

                                  Explanation<\/b><\/p>\n

                                  AWS Control Tower helps organizations establish and govern a multi-account AWS environment using standardized configurations and controls. It can assist with account provisioning, governance guardrails, and centralized visibility across accounts. This is particularly useful for organizations adopting a structured multi-account strategy. AWS Organizations provides the underlying account-management capabilities, while Control Tower provides a more opinionated governance framework built around those capabilities. Cognito focuses on application identity, CloudFront provides content delivery, and DataSync supports data transfer. Control Tower is therefore the most appropriate choice for centralized multi-account governance.<\/span><\/p>\n

                                  Question 357<\/b><\/h3>\n

                                  Which AWS service provides a managed message queue that helps decouple application components?<\/b><\/p>\n

                                    \n
                                  1. Amazon SQS<\/span><\/li>\n
                                  2. Amazon QuickSight<\/span><\/li>\n
                                  3. Amazon Redshift<\/span><\/li>\n
                                  4. Amazon WorkSpaces<\/span><\/li>\n<\/ol>\n

                                    Correct Answer: 1<\/b><\/p>\n

                                    Explanation<\/b><\/p>\n

                                    Amazon Simple Queue Service (Amazon SQS) is a managed message queuing service that allows application components to communicate asynchronously. Instead of requiring one component to wait for another to finish processing, messages can be placed into a queue and processed later by consumers. This decoupling can improve application resilience and scalability because components can operate independently. SQS removes the need for customers to operate queue infrastructure themselves. QuickSight is used for business intelligence, Redshift is a data warehouse service, and WorkSpaces provides managed virtual desktops.<\/span><\/p>\n

                                    Question 358<\/b><\/h3>\n

                                    Which AWS service is primarily used to store and retrieve sensitive application secrets such as database credentials and API keys?<\/b><\/p>\n

                                      \n
                                    1. AWS Config<\/span><\/li>\n
                                    2. Amazon GuardDuty<\/span><\/li>\n
                                    3. AWS Secrets Manager<\/span><\/li>\n
                                    4. Amazon CloudWatch<\/span><\/li>\n<\/ol>\n

                                      Correct Answer: 3<\/b><\/p>\n

                                      Explanation<\/b><\/p>\n

                                      AWS Secrets Manager is designed to securely store, manage, and retrieve sensitive information such as database credentials, API keys, and other application secrets. Applications can retrieve secrets when needed instead of embedding sensitive values directly in source code or configuration files. Secrets Manager can also support automated secret rotation for supported use cases. AWS Config records resource configuration information, GuardDuty focuses on threat detection, and CloudWatch provides monitoring and observability capabilities. Separating secrets from application code improves security and makes credential management easier across environments.<\/span><\/p>\n

                                      Question 359<\/b><\/h3>\n

                                      A company wants to estimate the AWS cost of a planned architecture before deploying its resources. Which tool should it use?<\/b><\/p>\n

                                        \n
                                      1. AWS Budgets<\/span><\/li>\n
                                      2. AWS Pricing Calculator<\/span><\/li>\n
                                      3. AWS Cost Explorer<\/span><\/li>\n
                                      4. AWS Health Dashboard<\/span><\/li>\n<\/ol>\n

                                        Correct Answer: 2<\/b><\/p>\n

                                        Explanation<\/b><\/p>\n

                                        AWS Pricing Calculator helps customers estimate the expected cost of planned AWS workloads before deployment. Users can specify services, configurations, usage assumptions, and other parameters to produce an estimated monthly cost. This is particularly useful during architecture planning because teams can compare potential designs and identify major cost drivers before committing resources. AWS Budgets is used to create spending thresholds and alerts, while Cost Explorer analyzes existing AWS spending. The AWS Health Dashboard provides information about service health and account-specific events rather than calculating architecture costs.<\/span><\/p>\n

                                        Question 360<\/b><\/h3>\n

                                        Which AWS Well-Architected Framework pillar focuses on the ability of a workload to recover from failures and continue operating as intended?<\/b><\/p>\n

                                          \n
                                        1. Cost Optimization<\/span><\/li>\n
                                        2. Operational Excellence<\/span><\/li>\n
                                        3. Reliability<\/span><\/li>\n
                                        4. Performance Efficiency<\/span><\/li>\n<\/ol>\n

                                          Correct Answer: 3<\/b><\/p>\n

                                          Explanation<\/b><\/p>\n

                                          The Reliability pillar of the AWS Well-Architected Framework focuses on ensuring that workloads perform their intended functions correctly and can recover from failures. Reliability includes designing systems to withstand disruptions, automatically recover when possible, and meet demand consistently. Techniques can include redundancy, monitoring, automated recovery, backups, and appropriate scaling. Operational Excellence focuses on running and improving workloads, Cost Optimization addresses financial efficiency, and Performance Efficiency focuses on using computing resources efficiently. Reliability is therefore the pillar most directly associated with resilience and recovery from infrastructure or application failures.<\/span><\/p>\n

                                           <\/p>\n","protected":false},"excerpt":{"rendered":"

                                          View Full Amazon AWS Certified Cloud Practitioner CLF-C02 Exam Dumps and Practice Test Dumps.   Question 341 Under the AWS Shared Responsibility Model, which task is generally the customer’s responsibility when using Amazon EC2? Maintaining the physical data center Replacing failed physical servers Applying security patches to the guest operating system Securing the AWS global […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":[],"categories":[1648,1647],"tags":[],"_links":{"self":[{"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/posts\/19051"}],"collection":[{"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/comments?post=19051"}],"version-history":[{"count":1,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/posts\/19051\/revisions"}],"predecessor-version":[{"id":19052,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/posts\/19051\/revisions\/19052"}],"wp:attachment":[{"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/media?parent=19051"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/categories?post=19051"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/tags?post=19051"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}