CLF-C02 Cloud Technology and Services Practice Test 21 — 15 Questions

Question 1

A company needs to process and analyze streaming log data from thousands of servers in near real-time, loading the results into Amazon Redshift for dashboards. Which AWS service is designed for this streaming ETL delivery use case?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Amazon Kinesis Data Firehose. Amazon Kinesis Data Firehose is the correct choice because it is a fully managed service designed specifically for streaming ETL (extract, transform, load) delivery. It can capture, transform (e.g., convert to Parquet/ORC, perform Lambda-based data transformation), and automatically load streaming data into Amazon Redshift, Amazon S3, or Amazon OpenSearch Service in near real-time, with no ongoing administration required.

Answer

Amazon Kinesis Data Streams

Answer

AWS Glue

Answer

Amazon MSK

Question 2

Which AWS service provides a simple way to deploy, manage, and scale containerized applications without requiring Kubernetes or deep container expertise?

Accepted Answer

AWS App Runner. AWS App Runner is the correct answer because it provides a fully managed service that automatically builds, deploys, and scales containerized web applications and APIs from source code or a container image, without requiring any knowledge of Kubernetes or container orchestration. It abstracts away the underlying infrastructure, making it ideal for developers who want to deploy containers quickly without managing clusters or control planes.

Answer

Amazon ECS

Answer

Amazon EKS

Answer

AWS Lambda

Question 3

A company uses AWS and wants to make their application fault tolerant against the failure of an entire AWS Region. Which approach achieves Region-level fault tolerance?

Accepted Answer

Deploy the application in multiple AWS Regions with Route 53 failover routing. Deploying the application in multiple AWS Regions and using Route 53 failover routing ensures that if an entire Region becomes unavailable, traffic is automatically redirected to a healthy Region. This is the only approach that provides fault tolerance against a complete Region failure, as Availability Zones within a single Region cannot protect against a Region-wide outage.

Answer

Deploy resources across multiple Availability Zones within a single Region

Answer

Use Reserved Instances in a single Region for guaranteed capacity

Answer

Enable S3 versioning in a single Region

Question 4

A company wants to improve the resilience of their Amazon RDS database by ensuring that read traffic is distributed across multiple copies of the database and that a replica can be promoted if the primary fails. Which RDS feature enables this?

Accepted Answer

RDS Read Replicas. Amazon RDS Read Replicas allow you to create one or more copies of your database instance that serve read traffic, offloading read queries from the primary DB instance. In the event of a primary failure, a Read Replica can be manually promoted to a standalone primary instance, providing resilience and continuity for read-heavy workloads. This directly matches the requirement to distribute read traffic and enable replica promotion.

Answer

RDS Multi-AZ deployment

Answer

RDS Automated Backups

Answer

RDS Performance Insights

Question 5

Which AWS service enables no-code integration between SaaS applications (like Salesforce, ServiceNow, Zendesk) and AWS services for automated data flows?

Accepted Answer

Amazon AppFlow. Amazon AppFlow is the correct service because it is specifically designed for no-code integration between SaaS applications (such as Salesforce, ServiceNow, and Zendesk) and AWS services, enabling automated data flows without writing any code. It supports bi-directional data transfer, transformation, and filtering, making it ideal for syncing customer records or support tickets directly into Amazon S3 or Redshift.

Answer

AWS DataSync

Answer

AWS Glue

Answer

Amazon EventBridge

Question 6

A company needs to verify the identity of users who call into their contact center by comparing their voice against a stored voiceprint. Which AWS service provides speaker identification from voice data?

Accepted Answer

Amazon Connect Voice ID. Amazon Connect Voice ID is the correct AWS service for real-time speaker identification and verification using voice biometrics. It compares a caller's live voice against a stored voiceprint to authenticate their identity, specifically designed for contact center use cases within Amazon Connect.

Answer

Amazon Transcribe

Answer

Amazon Rekognition

Answer

Amazon Lex

Question 7

Which AWS service provides quantum computing hardware as a cloud service, enabling researchers to run algorithms on actual quantum processors?

Accepted Answer

Amazon Braket. Amazon Braket is the correct answer because it is a fully managed AWS service that provides access to quantum computing hardware from multiple providers, including IonQ, Rigetti, and D-Wave, in a single environment. It allows researchers to design, test, and run quantum algorithms on actual quantum processors without managing the underlying infrastructure, making it the only option that directly offers quantum computing as a cloud service.

Answer

AWS Inferentia

Answer

AWS Wavelength

Answer

Amazon EC2 High Performance Computing

Question 8

Which Amazon RDS feature enables automatic scaling of database storage capacity without any downtime when storage is running low?

Accepted Answer

RDS Storage Auto Scaling. RDS Storage Auto Scaling is the correct answer because it automatically increases the allocated storage for an RDS database instance when free space drops below a configured threshold, without requiring any downtime or manual intervention. This feature uses a scaling policy that triggers a storage increase in predefined increments, ensuring the database remains available and performant during storage growth.

Answer

RDS Multi-AZ

Answer

RDS Read Replicas

Answer

RDS Automated Backups

Question 9

A company stores genomics data (several petabytes) on Amazon S3. They need to run complex analytics on this data using standard bioinformatics tools that require a POSIX file system interface. Which AWS solution provides this?

Accepted Answer

Amazon FSx for Lustre linked to S3. Amazon FSx for Lustre is a high-performance file system that provides a POSIX-compliant interface and can be linked directly to an S3 bucket, allowing you to run standard bioinformatics tools on genomics data stored in S3 without needing to copy it. This solution delivers the low-latency, high-throughput file access required for complex analytics on petabyte-scale datasets, while seamlessly integrating with S3 for durable storage.

Answer

Amazon EFS mounted on EC2

Answer

Amazon EBS io2 volumes on EC2

Answer

Amazon S3 with S3 Select

Question 10

A company wants to allow their on-premises employees to access S3 objects using Windows file system operations (drive mapping) without migrating their workflows. Which AWS service provides this capability?

Accepted Answer

AWS Storage Gateway File Gateway (SMB). AWS Storage Gateway File Gateway with SMB (Server Message Block) support allows on-premises employees to mount S3 buckets as Windows file shares using standard drive mapping. This enables access to S3 objects via Windows file system operations without migrating existing workflows, as the gateway caches frequently accessed data locally while storing the primary data in S3.

Answer

Amazon S3 with AWS Direct Connect

Answer

Amazon FSx for Windows File Server

Answer

Amazon EFS with SMB protocol

Question 11

A company is deploying a multi-tier application on AWS. Which AWS service provides layer 4 (TCP/UDP) load balancing with ultra-high performance and static IP addresses?

Accepted Answer

Network Load Balancer (NLB). Network Load Balancer (NLB) operates at Layer 4 (TCP/UDP) and is designed to handle millions of requests per second with ultra-low latency. It provides static IP addresses per Availability Zone, which is essential for applications requiring fixed endpoints for whitelisting or DNS stability.

Answer

Application Load Balancer (ALB)

Answer

Gateway Load Balancer (GWLB)

Answer

Classic Load Balancer

Question 12

A company's data scientists want a managed environment for collaborative Jupyter notebooks connected to their AWS data sources and compute without managing infrastructure. Which AWS service provides this?

Accepted Answer

Amazon SageMaker Studio. Amazon SageMaker Studio is a fully managed, web-based visual interface for data scientists to build, train, debug, deploy, and monitor machine learning models. It provides collaborative Jupyter notebooks that can connect directly to AWS data sources (e.g., S3, Athena, Redshift) and compute resources (e.g., SageMaker training instances, endpoints) without requiring any infrastructure management by the user.

Answer

AWS Cloud9

Answer

Amazon EMR Studio

Answer

AWS Lambda with Jupyter

Question 13

A company wants to provide their data analysts with a way to run SQL queries on their S3 data lake using familiar BI tools like Tableau or Power BI. Which AWS service provides an ODBC/JDBC connection to S3 data?

Accepted Answer

Amazon Athena with JDBC/ODBC drivers. Amazon Athena is a serverless interactive query service that allows you to run standard SQL directly against data stored in Amazon S3. It provides JDBC and ODBC drivers that enable BI tools like Tableau and Power BI to connect to Athena and query the S3 data lake without needing to move or transform the data.

Answer

Amazon QuickSight

Answer

Amazon EMR with Hive

Answer

AWS Glue Data Catalog only

Question 14

Which AWS service enables you to create a private, isolated network within the AWS Cloud where you can define your own IP address range, subnets, and routing?

Accepted Answer

Amazon VPC. Amazon VPC (Virtual Private Cloud) enables you to provision a logically isolated section of the AWS Cloud where you can define your own IP address range using CIDR notation (e.g., 10.0.0.0/16), create subnets across Availability Zones, and configure custom route tables to control traffic flow. This service gives you full control over your virtual networking environment, including the selection of private and public IP addresses, network gateways, and security settings.

Answer

AWS Direct Connect

Answer

Amazon Route 53

Answer

AWS Transit Gateway

Question 15

A company wants to protect their web application from common Layer 7 attacks and also implement rate limiting to prevent API abuse. Which AWS service provides both capabilities?

Accepted Answer

AWS WAF. AWS WAF is a web application firewall that helps protect web applications from common Layer 7 attacks such as SQL injection and cross-site scripting (XSS). It also supports rate-based rules that automatically block requests from a client IP when the request rate exceeds a defined threshold, enabling API abuse prevention. This makes AWS WAF the correct choice for both capabilities.

Answer

AWS Shield Standard

Answer

Security Groups

Answer

Amazon GuardDuty