CLF-C02 Cloud Technology and Services Practice Test 20 — 15 Questions

Question 1

Which AWS service makes it easy for developers to create, publish, and manage APIs that act as the front door for applications to access backend services?

Accepted Answer

Amazon API Gateway. Amazon API Gateway is a fully managed service that enables developers to create, publish, maintain, monitor, and secure APIs at any scale. It acts as a front door for applications to access backend services such as AWS Lambda, Amazon EC2, or any publicly accessible web endpoint, handling all the tasks involved in accepting and processing up to hundreds of thousands of concurrent API calls.

Answer

Amazon CloudFront

Answer

Elastic Load Balancing

Answer

AWS App Runner

Question 2

A startup wants to deploy their web application to AWS with minimal configuration. They want AWS to handle provisioning, load balancing, scaling, and health monitoring automatically. Which service is most appropriate?

Accepted Answer

AWS Elastic Beanstalk. AWS Elastic Beanstalk is the correct choice because it is a Platform-as-a-Service (PaaS) offering that automatically handles provisioning, load balancing, auto scaling, and health monitoring with minimal configuration. The startup simply uploads their web application code, and Elastic Beanstalk manages the underlying infrastructure, including the EC2 instances, Elastic Load Balancer, and CloudWatch health checks, without requiring manual setup.

Answer

Amazon EC2 with Auto Scaling

Answer

Amazon EKS

Answer

AWS CloudFormation

Question 3

Which AWS service provides a managed blockchain network using open-source frameworks like Hyperledger Fabric and Ethereum?

Accepted Answer

Amazon Managed Blockchain. Amazon Managed Blockchain is the correct AWS service because it is specifically designed to create and manage blockchain networks using popular open-source frameworks like Hyperledger Fabric and Ethereum. It handles the heavy lifting of setting up the blockchain infrastructure, including peer nodes, ordering service, and certificate authorities, allowing developers to focus on building decentralized applications.

Answer

Amazon DynamoDB

Answer

AWS Quantum Ledger Database (QLDB)

Answer

Amazon Neptune

Question 4

Which AWS service provides an immutable, cryptographically verifiable transaction log for tracking the complete history of changes to application data?

Accepted Answer

Amazon QLDB (Quantum Ledger Database). Amazon QLDB (Quantum Ledger Database) provides an immutable, append-only journal that records every change to application data. It uses cryptographic hashing to chain entries together, creating a verifiable history that cannot be altered or deleted, which is exactly what the question describes.

Answer

Amazon Managed Blockchain

Answer

Amazon RDS with point-in-time recovery

Answer

AWS CloudTrail

Question 5

A company needs a managed service to forecast product demand using machine learning, helping them optimize inventory levels without building a custom ML model. Which AWS AI service provides ready-to-use time-series forecasting?

Accepted Answer

Amazon Forecast. Amazon Forecast is a fully managed service that uses machine learning to deliver highly accurate time-series forecasts based on historical data, without requiring any custom model building. It is specifically designed for use cases like product demand forecasting, inventory planning, and resource allocation, making it the correct choice for this scenario.

Answer

Amazon SageMaker

Answer

Amazon Comprehend

Answer

Amazon Rekognition

Question 6

Which AWS service is used to register domain names and route DNS queries for domain names like 'example.com'?

Accepted Answer

Amazon Route 53. Amazon Route 53 is a scalable Domain Name System (DNS) web service that provides both domain name registration and DNS resolution. It translates human-readable domain names like 'example.com' into IP addresses and can also register new domains or transfer existing ones. This dual functionality makes it the correct choice for the question.

Answer

Amazon CloudFront

Answer

AWS Global Accelerator

Answer

AWS Certificate Manager

Question 7

A company wants to provision and manage SSL/TLS certificates for their AWS resources without paying for certificates or manually handling renewals. Which AWS service provides this?

Accepted Answer

AWS Certificate Manager (ACM). AWS Certificate Manager (ACM) provisions, manages, and deploys public and private SSL/TLS certificates for use with AWS services (e.g., Elastic Load Balancing, CloudFront, API Gateway) at no additional cost. ACM automatically handles certificate renewals, eliminating the need for manual intervention.

Answer

AWS KMS

Answer

AWS CloudHSM

Answer

AWS IAM

Question 8

A company stores large amounts of data in Amazon S3 and wants to query it using standard SQL without loading it into a database. They need queries to complete in seconds. Which query optimization technique should they apply?

Accepted Answer

Convert data to columnar Parquet format and implement partitioning. B is correct because converting data to columnar Parquet format reduces the amount of data scanned by only reading the columns needed for the query, and partitioning further limits the data scanned by filtering on partition keys. This combination enables queries to complete in seconds on Amazon S3 using services like Amazon Athena or Amazon Redshift Spectrum, without loading data into a database.

Answer

Store data in CSV format for maximum compatibility

Answer

Enable S3 Transfer Acceleration on the bucket

Answer

Move all data to Amazon RDS for faster SQL queries

Question 9

Which AWS service provides a desktop development environment in the cloud with a browser-based code editor and computing resources, requiring no local installation?

Accepted Answer

AWS Cloud9. AWS Cloud9 is a cloud-based integrated development environment (IDE) that provides a browser-based code editor, terminal, and pre-configured computing resources (e.g., EC2 instances or SSH servers). It requires no local installation, making it ideal for developing applications directly from a web browser.

Answer

AWS CloudShell

Answer

AWS CodeCommit

Answer

AWS CodeBuild

Question 10

A company wants to use Amazon S3 as their data lake but needs a way to track, search, and govern all datasets across multiple S3 buckets. Which AWS service provides centralized data catalog management?

Accepted Answer

AWS Glue Data Catalog. AWS Glue Data Catalog is a fully managed, centralized metadata repository that stores table definitions, schema information, and partition details for datasets across multiple S3 buckets. It integrates with AWS Glue ETL, Amazon Athena, and Amazon Redshift Spectrum to provide a unified view for tracking, searching, and governing data lake assets, making it the correct choice for centralized data catalog management.

Answer

Amazon Macie

Answer

Amazon S3 Inventory

Answer

AWS Lake Formation

Question 11

A company is adopting microservices and wants to enable their services to communicate securely and track network traffic between them. Which AWS service provides service mesh capabilities with mutual TLS and observability?

Accepted Answer

AWS App Mesh. AWS App Mesh is a service mesh that provides application-level networking, enabling microservices to communicate securely with mutual TLS (mTLS) and offering observability through metrics, logs, and traces. It integrates with AWS services like AWS X-Ray and Amazon CloudWatch to track network traffic between services, making it the correct choice for this requirement.

Answer

Amazon VPC with security groups

Answer

Amazon API Gateway

Answer

AWS Transit Gateway

Question 12

Which Amazon EC2 Auto Scaling feature ensures a minimum number of healthy instances are always running, replacing terminated instances automatically?

Accepted Answer

Auto Scaling self-healing / instance replacement. Amazon EC2 Auto Scaling's self-healing (instance replacement) feature automatically detects and replaces unhealthy instances to maintain a minimum number of healthy instances. When an instance fails a health check, Auto Scaling terminates it and launches a new one to keep the desired capacity, ensuring high availability without manual intervention.

Answer

Auto Scaling scheduled scaling

Answer

EC2 Auto Recovery

Answer

Predictive scaling

Question 13

A financial services company needs to maintain a tamper-proof audit log of all financial transactions for regulatory compliance. Which AWS service is most appropriate?

Accepted Answer

Amazon QLDB. Amazon QLDB (Quantum Ledger Database) is purpose-built to provide a cryptographically verifiable, immutable, and tamper-proof transaction log. It uses a journal that stores every change as a series of entries, and each entry is chained using a hash, making it impossible to alter or delete past records without detection. This aligns directly with the financial services requirement for an audit log that must be tamper-proof for regulatory compliance.

Answer

Amazon RDS with transaction logging

Answer

Amazon DynamoDB with global tables

Answer

AWS CloudTrail with log file integrity validation

Question 14

A company needs to manage multiple Kubernetes clusters across different AWS Regions and on-premises environments from a single control plane. Which AWS service provides this?

Accepted Answer

Amazon EKS with EKS Connector. Amazon EKS with EKS Connector allows you to register and connect any Kubernetes cluster—whether running in AWS, on-premises, or in other clouds—to the AWS EKS console. This provides a single control plane view for managing multiple clusters across different AWS Regions and on-premises environments, fulfilling the requirement exactly.

Answer

Amazon ECS

Answer

AWS Fargate

Answer

Amazon EC2 with self-managed Kubernetes

Question 15

A company wants to accelerate their machine learning workflows by using pre-trained foundation models for tasks like text generation and image creation without training models from scratch. Which AWS service provides access to pre-trained foundation models via API?

Accepted Answer

Amazon Bedrock. Amazon Bedrock is a fully managed service that provides access to pre-trained foundation models (FMs) from leading AI providers like AI21 Labs, Anthropic, Cohere, Meta, Stability AI, and Amazon via a single API. It enables you to build generative AI applications for tasks such as text generation and image creation without managing underlying infrastructure or training models from scratch.

Answer

Amazon SageMaker

Answer

Amazon Rekognition

Answer

AWS DeepComposer