CLF-C02 Cloud Technology and Services Practice Test 17 — 15 Questions

Question 1

Which type of Elastic Load Balancer routes HTTP/HTTPS traffic based on content such as URL path, hostname, and HTTP headers, enabling advanced request routing rules?

Accepted Answer

Application Load Balancer (ALB). The Application Load Balancer (ALB) operates at Layer 7 of the OSI model and can route HTTP/HTTPS traffic based on request-level attributes such as URL path, hostname, HTTP headers, and query strings. This enables advanced routing rules like path-based routing (e.g., /api to one target group, /images to another) and host-based routing (e.g., app1.example.com vs app2.example.com). ALB also supports features like WebSocket, HTTP/2, and AWS WAF integration, making it the correct choice for content-based routing.

Answer

Network Load Balancer (NLB)

Answer

Gateway Load Balancer (GWLB)

Answer

Classic Load Balancer

Question 2

A company wants to store frequently changing configuration data and feature flags that their applications need to read at runtime without hard-coding values. Which AWS service provides secure, centralized configuration storage with version history?

Accepted Answer

AWS Systems Manager Parameter Store. AWS Systems Manager Parameter Store is the correct choice because it provides a secure, centralized service for storing configuration data and feature flags, with built-in version history for each parameter. It allows applications to read configuration values at runtime via the AWS SDK or CLI without hard-coding, and supports encryption using AWS KMS for sensitive data.

Answer

Amazon S3

Answer

Amazon DynamoDB

Answer

AWS CloudFormation

Question 3

Which AWS service enables event-driven architectures by acting as a central event bus that routes events from AWS services, SaaS applications, and custom applications to configured targets?

Accepted Answer

Amazon EventBridge. Amazon EventBridge is a serverless event bus that ingests events from AWS services, SaaS partners, and custom applications, then routes them to targets like Lambda, Step Functions, or SQS based on configurable rules. It decouples event producers from consumers, enabling event-driven architectures without polling or custom middleware. This matches the question's description of a central event bus for cross-domain event routing.

Answer

Amazon SNS

Answer

Amazon SQS

Answer

AWS Step Functions

Question 4

A company needs to implement DevOps practices and wants a fully managed service to store their application source code with version control. Which AWS service provides managed Git repositories?

Accepted Answer

AWS CodeCommit. AWS CodeCommit is a fully managed source control service that hosts secure Git-based repositories. It eliminates the need to operate your own source control system by providing managed Git repositories that integrate with other AWS services, making it the correct choice for storing application source code with version control.

Answer

AWS CodeBuild

Answer

AWS CodeDeploy

Answer

AWS CodeArtifact

Question 5

Which AWS service provides a continuous integration/continuous deployment (CI/CD) pipeline that automates the build, test, and deploy phases of application release?

Accepted Answer

AWS CodePipeline. AWS CodePipeline is a fully managed CI/CD service that orchestrates the build, test, and deploy phases of a release process. It integrates with services like AWS CodeBuild for building and testing, and AWS CodeDeploy for deployment, providing a single pipeline to automate the entire workflow.

Answer

AWS CodeBuild

Answer

AWS CodeDeploy

Answer

AWS CodeCommit

Question 6

A company wants to implement a hub-and-spoke network architecture where multiple VPCs can communicate with a shared services VPC (containing DNS, monitoring, and security tools) but not with each other. Which AWS networking feature enables this?

Accepted Answer

AWS Transit Gateway with route tables. AWS Transit Gateway with route tables is the correct choice because it acts as a central hub that connects multiple VPCs (spokes) to a shared services VPC, while using separate route tables to prevent inter-spoke communication. This allows the shared services VPC to be reachable from all other VPCs, but the route tables can be configured to not propagate routes between the spoke VPCs, enforcing the desired isolation.

Answer

VPC Peering with route table customization

Answer

Internet Gateway with security groups

Answer

VPC Endpoints

Question 7

Which AWS service provides private connectivity between VPCs and supported AWS services without requiring internet gateway, NAT device, VPN, or Direct Connect?

Accepted Answer

VPC Endpoints. VPC Endpoints (specifically Gateway Endpoints for S3/DynamoDB and Interface Endpoints for other services) enable private connectivity between a VPC and supported AWS services using the AWS network, without requiring an internet gateway, NAT device, VPN, or Direct Connect. Traffic stays within the AWS backbone and never traverses the public internet, leveraging AWS PrivateLink for interface endpoints or route table entries for gateway endpoints.

Answer

Internet Gateway

Answer

NAT Gateway

Answer

VPC Peering

Question 8

A company's application needs to process streaming data from IoT sensors in real time and store processed results in S3. Which AWS service is designed for ingesting and processing real-time streaming data?

Accepted Answer

Amazon Kinesis Data Streams. Amazon Kinesis Data Streams is purpose-built for ingesting and processing real-time streaming data at scale. It can continuously capture gigabytes of data per second from hundreds of thousands of sources, such as IoT sensors, and integrate with downstream consumers like AWS Lambda or Kinesis Data Analytics for real-time processing before storing results in Amazon S3.

Answer

Amazon SQS

Answer

AWS Batch

Answer

Amazon EMR

Question 9

Which AWS service provides a fully managed content delivery network (CDN) that caches content at global edge locations to reduce latency for end users?

Accepted Answer

Amazon CloudFront. Amazon CloudFront is a fully managed content delivery network (CDN) that caches static and dynamic content at global edge locations. By serving cached content from the edge closest to the user, CloudFront significantly reduces latency and improves data transfer speeds for end users.

Answer

AWS Global Accelerator

Answer

Amazon Route 53

Answer

AWS Transfer Acceleration

Question 10

A company needs a relational database that automatically scales storage, replicates data across multiple AZs, and can failover automatically without manual intervention. Which AWS service provides these capabilities?

Accepted Answer

Amazon RDS with Multi-AZ deployment. Amazon RDS with Multi-AZ deployment automatically provisions and maintains a synchronous standby replica in a different Availability Zone. This setup provides automatic failover to the standby without manual intervention, and storage scaling can be handled via Amazon EBS or Aurora storage auto-scaling, meeting all stated requirements.

Answer

Amazon DynamoDB

Answer

Amazon Redshift

Answer

Amazon ElastiCache for Redis

Question 11

A company wants to implement a serverless web application with no server management. They need a database that scales automatically without managing cluster capacity. Which combination best supports this?

Accepted Answer

AWS Lambda + API Gateway + Amazon DynamoDB on-demand. AWS Lambda + API Gateway + Amazon DynamoDB on-demand provides a fully serverless architecture where Lambda handles compute without server management, API Gateway serves as the HTTP endpoint, and DynamoDB on-demand scales automatically based on traffic without requiring capacity planning or cluster management. This combination meets the requirement for zero server management and automatic scaling of the database.

Answer

Amazon EC2 + RDS MySQL

Answer

AWS Fargate + Amazon Aurora Serverless

Answer

Amazon EC2 + DynamoDB on-demand

Question 12

Which AWS service provides a managed Apache Kafka streaming service without requiring customers to provision, configure, or manage Kafka clusters?

Accepted Answer

Amazon MSK Serverless. Amazon MSK Serverless is a fully managed Apache Kafka service that automatically provisions, scales, and manages Kafka clusters, eliminating the need for customers to handle cluster infrastructure. It supports the same Kafka producer and consumer APIs, making it ideal for streaming workloads without operational overhead.

Answer

Amazon Kinesis Data Streams

Answer

Amazon SQS FIFO queues

Answer

AWS Glue Streaming ETL

Question 13

A company is building a data lake on AWS. Which AWS service provides a serverless interactive query service that allows analysts to query data stored in Amazon S3 using standard SQL?

Accepted Answer

Amazon Athena. Amazon Athena is a serverless interactive query service that enables analysts to query data stored in Amazon S3 using standard SQL. It requires no infrastructure management, as Athena automatically scales and executes queries directly against data in S3, making it the ideal choice for ad-hoc analysis on a data lake.

Answer

Amazon Redshift

Answer

Amazon EMR

Answer

AWS Glue

Question 14

Which AWS compute service is best suited for running batch processing jobs that require specific compute resources and can run for hours or days without user interaction?

Accepted Answer

AWS Batch. AWS Batch is purpose-built for running batch computing workloads that can run for extended durations without user interaction. It dynamically provisions the optimal quantity and type of compute resources (e.g., EC2 instances or Spot Instances) based on the volume and specific resource requirements of the submitted jobs, making it ideal for hours- or days-long batch processing.

Answer

AWS Lambda

Answer

Amazon EC2 with manual provisioning

Answer

Amazon ECS with Fargate

Question 15

A company wants to ensure their containerized microservices can discover each other by name without hard-coding IP addresses. Which AWS service provides DNS-based service discovery for ECS and EKS?

Accepted Answer

AWS Cloud Map. AWS Cloud Map is a cloud resource discovery service that enables microservices to dynamically discover each other by name using DNS queries or API calls. It integrates directly with Amazon ECS and EKS, allowing containers to register and resolve service endpoints without hard-coded IP addresses, making it the correct choice for DNS-based service discovery.

Answer

Amazon Route 53

Answer

Elastic Load Balancing

Answer

Amazon VPC