CLF-C02 Cloud Technology and Services Practice Test 22 — 15 Questions

Question 1

A company needs to ensure their containerized applications pass security scans for known vulnerabilities before being deployed to production. Which AWS service scans container images for CVEs?

Accepted Answer

Amazon Inspector. Amazon Inspector is the correct service because it is designed to automatically scan container images stored in Amazon Elastic Container Registry (ECR) for software vulnerabilities, including Common Vulnerabilities and Exposures (CVEs). It continuously monitors the images at rest and during deployment, providing a detailed findings report that helps you remediate security issues before the container reaches production.

Answer

Amazon GuardDuty

Answer

AWS Security Hub

Answer

Amazon Macie

Question 2

Which AWS service provides a serverless, fully managed Apache Spark processing engine for big data analytics without managing clusters?

Accepted Answer

AWS Glue (serverless Apache Spark ETL). AWS Glue provides a fully managed, serverless Apache Spark environment for ETL (extract, transform, load) workloads. It automatically provisions, configures, and scales the Spark cluster behind the scenes, so you don't need to manage any infrastructure. This makes it the correct choice for a serverless Apache Spark processing engine for big data analytics.

Answer

Amazon EMR on EC2

Answer

Amazon Redshift

Answer

Amazon Kinesis Data Analytics

Question 3

A company needs to provide secure, scalable file storage for thousands of concurrent users accessing the same shared file system from Linux-based EC2 instances. Which AWS service is most appropriate?

Accepted Answer

Amazon EFS. Amazon EFS (Elastic File System) is the correct choice because it provides a fully managed, scalable, and elastic NFS file system that can be concurrently accessed by thousands of Linux-based EC2 instances. It automatically scales storage capacity up and down as files are added or removed, and it supports the NFSv4.1 and NFSv4.0 protocols, making it ideal for shared file workloads on Linux.

Answer

Amazon EBS Multi-Attach

Answer

Amazon S3

Answer

Amazon FSx for Windows File Server

Question 4

Which AWS compute service allows developers to run code in response to HTTP requests without managing servers, using a simple programming model based on functions?

Accepted Answer

AWS Lambda. AWS Lambda is the correct answer because it is a serverless compute service that executes code in response to events such as HTTP requests via Amazon API Gateway. Developers upload functions and Lambda automatically scales and manages the underlying infrastructure, aligning with the question's requirement of running code without managing servers using a function-based model.

Answer

Amazon EC2

Answer

Amazon ECS

Answer

AWS Fargate

Question 5

A company runs a high-traffic e-commerce application. During peak holiday season, database read performance degrades. They want to offload read traffic from their RDS primary database. What should they implement?

Accepted Answer

RDS Read Replicas. B is correct because RDS Read Replicas are specifically designed to offload read traffic from the primary database instance. By creating one or more read-only replicas, the application can direct SELECT queries to the replicas, reducing the load on the primary RDS instance and improving overall read performance during peak traffic.

Answer

RDS Multi-AZ

Answer

Increase the RDS instance size

Answer

Enable RDS Automated Backups

Question 6

A company wants to deploy their application globally and needs AWS to automatically route users to the nearest healthy application endpoint with improved network performance. Which AWS service uses the AWS global network backbone for routing optimization?

Accepted Answer

AWS Global Accelerator. AWS Global Accelerator uses the AWS global network backbone to optimize the path from users to applications. It routes traffic over the AWS internal network rather than the public internet, improving performance and reliability. It also automatically directs users to the nearest healthy endpoint, meeting the requirement for global deployment with automatic failover.

Answer

Amazon CloudFront

Answer

Amazon Route 53 with latency routing

Answer

Amazon VPC peering

Question 7

A company wants to use AWS for disaster recovery but wants to minimize costs. They only need backups of their data, with recovery taking several hours if disaster strikes. Which DR strategy requires the least investment?

Accepted Answer

Backup and Restore. The Backup and Restore strategy (Option C) requires the least investment because it involves periodically copying data to low-cost storage like Amazon S3 (including S3 Glacier for archival) and only restoring infrastructure when needed. This approach has the highest Recovery Time Objective (RTO) and Recovery Point Objective (RPO), often measured in hours, which aligns with the requirement of minimizing costs while tolerating several hours for recovery.

Answer

Pilot Light

Answer

Warm Standby

Answer

Multi-Site Active/Active

Question 8

Which Amazon S3 feature allows you to automatically delete objects after a specified number of days to reduce storage costs?

Accepted Answer

S3 Lifecycle policies with expiration rules. S3 Lifecycle policies with expiration rules allow you to define rules that automatically delete objects after a specified number of days. This is a cost-optimization feature that helps reduce storage costs by removing data that is no longer needed, such as logs or temporary files, without manual intervention.

Answer

S3 Versioning

Answer

S3 Object Lock

Answer

S3 Block Public Access

Question 9

A retail company wants to provide personalized product recommendations on their homepage using machine learning. Which AWS service delivers this without requiring any ML expertise or model training?

Accepted Answer

Amazon Personalize. Amazon Personalize is a fully managed ML service that enables developers to build applications with real-time personalized recommendations without requiring any ML expertise or model training. It uses the same technology used by Amazon.com for its recommendation engine, and it automatically handles the entire ML pipeline, including data processing, model training, and inference.

Answer

Amazon SageMaker

Answer

Amazon Forecast

Answer

Amazon Comprehend

Question 10

A company needs a managed workflow service to coordinate long-running business processes that may require human approval steps and can run for up to one year. Which AWS service handles this?

Accepted Answer

AWS Step Functions (Standard Workflows). AWS Step Functions Standard Workflows are designed for long-running, durable, and auditable workflows that can run for up to one year, making them ideal for coordinating business processes that require human approval steps. They provide built-in error handling, retries, and state management, which are essential for orchestrating multi-step processes with human intervention.

Answer

AWS Lambda

Answer

Amazon SQS

Answer

Amazon EventBridge

Question 11

Which AWS service enables you to run containerized applications without managing the underlying servers?

Accepted Answer

AWS Fargate. AWS Fargate is a serverless compute engine for containers that allows you to run containers without managing the underlying servers or clusters. You define your container images, CPU, memory, and networking, and Fargate automatically handles the infrastructure, including patching and scaling.

Answer

Amazon EC2 with Docker

Answer

AWS Lambda

Answer

Amazon EKS on EC2

Question 12

A company needs to send transactional emails such as order confirmations and password resets at scale. Which AWS service should they use?

Accepted Answer

Amazon SES. Amazon SES (Simple Email Service) is specifically designed for sending high-volume transactional and marketing emails, such as order confirmations and password resets. It provides reliable delivery with built-in feedback loops, bounce handling, and dedicated IP management, making it the correct choice for this use case.

Answer

Amazon SNS

Answer

Amazon SQS

Answer

Amazon Pinpoint

Question 13

Which AWS storage class is optimized for long-term archival where data is rarely accessed and retrieval time of several hours is acceptable?

Accepted Answer

S3 Glacier Deep Archive. S3 Glacier Deep Archive is designed for long-term archival of data that is accessed rarely, with retrieval times ranging from 12 to 48 hours. This makes it the most cost-effective storage class for scenarios where retrieval latency of several hours is acceptable, such as compliance or regulatory archives.

Answer

S3 Standard-IA

Answer

S3 One Zone-IA

Answer

S3 Intelligent-Tiering

Question 14

Which AWS service provides a fully managed NoSQL database with single-digit millisecond latency at any scale?

Accepted Answer

Amazon DynamoDB. Amazon DynamoDB is a fully managed NoSQL key-value and document database that delivers consistent single-digit millisecond latency at any scale. It achieves this through its distributed architecture, automatic partitioning, and SSD-backed storage, making it ideal for high-traffic applications like gaming, ad tech, and IoT.

Answer

Amazon RDS

Answer

Amazon ElastiCache

Answer

Amazon Redshift

Question 15

Which AWS service allows you to create a private network connection between your on-premises data center and AWS without using the public internet?

Accepted Answer

AWS Direct Connect. AWS Direct Connect is the correct answer because it provides a dedicated, private network connection from your on-premises data center directly to AWS, bypassing the public internet entirely. This is achieved through a physical cross-connect at an AWS Direct Connect location, using industry-standard 802.1Q VLANs to maintain traffic isolation. Unlike VPN-based solutions, Direct Connect offers consistent network performance, lower latency, and higher bandwidth, making it ideal for hybrid workloads and large-scale data transfers.

Answer

AWS VPN

Answer

Amazon VPC Peering

Answer

AWS Transit Gateway