A company has a monolithic application where a web front-end directly invokes a backend processing service. During traffic spikes, the backend becomes overwhelmed and the entire application slows down. The company wants to decouple the components to improve fault tolerance. What should the company do?

Place the front-end and backend on the same larger EC2 instance.

Move the backend to a different AWS Region.

Increase the timeout on the front-end's API calls to the backend.

Use an Amazon Simple Queue Service (SQS) queue between the front-end and the backend.

How does elasticity primarily contribute to cost optimization in the AWS Cloud?

By automatically scaling resources to match demand, reducing waste during low usage

By guaranteeing the lowest possible price for all services

By providing unlimited storage at no cost

By eliminating the need for monitoring

A company wants to ensure that its security group rules are consistent across all environments (development, test, production). Currently, the rules are configured manually, and there have been discrepancies. What is the best way to ensure consistency?

Define the security groups in an AWS CloudFormation template and deploy it to all environments.

Use AWS Config rules to detect and automatically remediate non-compliant security groups.

Grant all administrators full access to modify security groups.

Create a standard operating procedure document and have administrators follow it.

A company is designing a new application on AWS. The security team requires that developers only have the permissions necessary to perform their job functions. Which design principle should the company apply?

Grant all developers full access to all AWS services to avoid delays.

Grant permissions based on the team's manager's role.

Implement least privilege by granting only the required permissions to each IAM user or role.

Use a single IAM user for the entire development team.

A company is designing a new microservices-based application. The security team wants to ensure that if one microservice is compromised, the attacker cannot easily move laterally to other parts of the system. Which design principle should be applied?

Grant each microservice the minimum permissions it needs to function.

Run all microservices on the same EC2 instance.

Place all microservices in the same security group.

Use a shared IAM role for all microservices to simplify management.

AWSCertified Cloud Practitioner

Domain 1Objective 2

Task Statement 1.2: Identify Design Principles of the AWS Cloud. CLF-C02 Practice Questions (Page 3)

Part of the Cloud Concepts domain, which makes up ~23% of our current practice bank. AWS does not publish an official question count, but from its 90-minute exam (~35–60 total, ~8–14 in this domain), expect 2–4 from this objective — we provide 32 practice questions to prepare you well beyond it. (estimate)

32questions here

7free pages

8concepts

Questions 11–15

11application · medium
A company has a monolithic application where a web front-end directly invokes a backend processing service. During traffic spikes, the backend becomes overwhelmed and the entire application slows down. The company wants to decouple the components to improve fault tolerance. What should the company do?
Select an answer first
12foundation · easy
How does elasticity primarily contribute to cost optimization in the AWS Cloud?
Select an answer first
13application · medium
A company wants to ensure that its security group rules are consistent across all environments (development, test, production). Currently, the rules are configured manually, and there have been discrepancies. What is the best way to ensure consistency?
Select an answer first
14application · medium
A company is designing a new application on AWS. The security team requires that developers only have the permissions necessary to perform their job functions. Which design principle should the company apply?
Select an answer first
15application · medium
A company is designing a new microservices-based application. The security team wants to ensure that if one microservice is compromised, the attacker cannot easily move laterally to other parts of the system. Which design principle should be applied?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CLF-C02

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by AWS. “CLF-C02” is a trademark of its owner, used for identification only.