CLF-C02 Cloud Technology and Services Practice Test 9 — 15 Questions

Question 1

A company runs a web application on Amazon EC2 instances that accepts user uploads. The uploads need to be processed by a backend service that performs virus scanning and thumbnail generation. The backend processing can take up to 30 seconds per upload. Users should not experience delays when submitting their files. The company wants to decouple the web tier from the processing tier so that the web application can immediately return a response to the user while the processing happens asynchronously. The solution must be fully managed, durable, and scale automatically with demand. Which AWS service should the company use?

Accepted Answer

Amazon Simple Queue Service (Amazon SQS). Amazon SQS is the correct choice because it provides a fully managed, durable, and scalable message queue that decouples the web tier from the processing tier. When a user uploads a file, the web application can immediately return a response after sending a message to an SQS queue, while the backend service polls the queue and processes the upload asynchronously, handling the up-to-30-second processing time without blocking the user.

Answer

Amazon Simple Notification Service (Amazon SNS)

Answer

Amazon Kinesis Data Streams

Answer

Amazon MQ

Question 2

A company runs a data-intensive workload in a colocation facility and wants to establish a dedicated, private network connection to its Amazon VPC. The connection must bypass the public internet to provide consistent high throughput and low latency. The company also wants to avoid data transfer costs associated with internet-based connections. Which AWS service should the company use?

Accepted Answer

AWS Direct Connect. AWS Direct Connect is the correct service because it provides a dedicated, private network connection from an on-premises or colocation facility directly to an Amazon VPC, bypassing the public internet entirely. This ensures consistent high throughput, low latency, and eliminates data transfer costs associated with internet-based connections, as traffic flows over a private physical link.

Answer

AWS Site-to-Site VPN

Answer

AWS VPN CloudHub

Answer

AWS Transit Gateway

Question 3

A company has an on-premises file server that stores large datasets. The company wants to reduce its on-premises storage footprint by moving cold data to AWS. However, users need low-latency access to frequently used files, and the applications must be able to access the data using the standard SMB protocol. The company wants to cache frequently accessed data locally on-premises for low latency, while securely storing all data in Amazon S3. Which AWS service should the company use?

Accepted Answer

AWS Storage Gateway File Gateway. AWS Storage Gateway File Gateway is the correct choice because it provides on-premises caching of frequently accessed files for low-latency access via the standard SMB protocol, while all data is stored durably in Amazon S3. This directly meets the requirement to reduce on-premises storage footprint by moving cold data to AWS, while keeping hot data cached locally for performance.

Answer

Amazon FSx for Windows File Server

Answer

AWS DataSync

Answer

Amazon S3 with AWS Direct Connect

Question 4

A financial services company runs a high-frequency trading application that must process transactions with sub-millisecond latency. The application must run in the company's own data center to meet strict latency requirements, but the company wants to use the same AWS management APIs, control plane, and tools (such as AWS CloudFormation and Amazon CloudWatch) for consistency across on-premises and cloud environments. The company also needs the ability to seamlessly run Amazon EBS-backed Amazon EC2 instances locally. Which AWS service should the company use to meet these requirements?

Accepted Answer

AWS Outposts. AWS Outposts is correct because it extends AWS infrastructure, services, APIs, and tools to on-premises data centers, enabling the company to run Amazon EBS-backed EC2 instances locally with sub-millisecond latency while using the same AWS management APIs, CloudFormation, and CloudWatch for consistency.

Answer

AWS Wavelength

Answer

AWS Local Zones

Answer

AWS Direct Connect

Question 5

A company hosts a static website on Amazon S3. Users in different geographic locations experience high latency when accessing the website. The company wants to reduce latency for all users and also minimize the number of direct requests to the S3 bucket. Which AWS service should the company use?

Accepted Answer

Amazon CloudFront. Amazon CloudFront is a content delivery network (CDN) that caches static content at edge locations worldwide, significantly reducing latency for users regardless of their geographic location. By serving content from the edge, CloudFront also offloads direct requests to the S3 bucket, reducing the load on the origin and potentially lowering costs.

Answer

AWS Global Accelerator

Answer

Amazon Route 53 latency-based routing

Answer

AWS Direct Connect

Question 6

A gaming company operates a mobile game with millions of active users. The game stores player profiles and session state in a key-value database. The database must provide single-digit millisecond latency for read and write operations at any scale. The company expects traffic to grow unpredictably, and the database must scale horizontally without downtime. The company wants a fully managed, highly available solution with built-in replication across multiple Availability Zones. Which AWS service should the company use?

Accepted Answer

Amazon DynamoDB. Amazon DynamoDB is the correct choice because it is a fully managed, serverless, NoSQL key-value database that delivers single-digit millisecond latency at any scale. It supports horizontal scaling via automatic partitioning and replication across multiple Availability Zones (AZs) for high availability, with no downtime required for scaling. This directly matches the gaming company's requirements for low-latency reads/writes, unpredictable traffic growth, and built-in multi-AZ replication.

Answer

Amazon RDS for PostgreSQL

Answer

Amazon Redshift

Answer

Amazon ElastiCache for Redis

Question 7

A company wants to build a serverless application that processes images uploaded to an Amazon S3 bucket. When a user uploads a new image, the application must automatically resize the image to multiple dimensions and store the resized versions in the same bucket under a different prefix. The company wants to minimize operational overhead and pay only for the compute time used. Which AWS service should be used to run the image processing code?

Accepted Answer

AWS Lambda. AWS Lambda is the correct choice because it is a serverless compute service that runs code in response to S3 events, such as object creation. It automatically scales with the number of uploads, charges only for the compute time consumed (per 100ms increments), and requires no infrastructure management, making it ideal for event-driven image processing tasks.

Answer

Amazon EC2 Auto Scaling group

Answer

Amazon ECS with Fargate

Answer

AWS Batch

Question 8

A company uses AWS Organizations to manage multiple accounts. The operations team runs hundreds of Amazon EC2 instances across these accounts for various applications. The security team requires that all EC2 instances be patched with the latest security updates within 7 days of release. Currently, the operations team manually applies patches by logging into each account and using Systems Manager Patch Manager individually. The team wants to centralize patch compliance management so that a single operations team can define patch baselines, schedule patching, and view compliance status across all accounts from a single pane of glass, without needing to switch between accounts. Which AWS service or feature should the team use to meet these requirements?

Accepted Answer

AWS Systems Manager Patch Manager. AWS Systems Manager Patch Manager is the correct choice because it allows the operations team to centrally define patch baselines, schedule patching across multiple AWS accounts, and view compliance status from a single pane of glass using AWS Systems Manager Quick Setup or multi-account management features. By integrating with AWS Organizations, Patch Manager can target EC2 instances across all accounts without requiring the team to switch between accounts, meeting the requirement for centralized patch compliance management.

Answer

AWS Config

Answer

Amazon Inspector

Answer

AWS Trusted Advisor

Question 9

A development team wants to deploy a containerized microservices application on AWS. The team wants to minimize operational overhead by not managing any servers or container orchestration control plane. They also want to pay only for the compute and memory resources their containers consume, without needing to provision or scale underlying infrastructure. Which AWS compute service should the team use?

Accepted Answer

Amazon ECS with the AWS Fargate launch type. Amazon ECS with the AWS Fargate launch type is the correct choice because Fargate is a serverless compute engine that removes the need to manage servers or the container orchestration control plane. With Fargate, you define your containerized microservices and pay only for the vCPU and memory resources consumed at the task level, without provisioning or scaling underlying EC2 instances. This directly meets the team's requirement for zero operational overhead and pay-per-consumption billing.

Answer

Amazon EC2 with Amazon ECS using the EC2 launch type

Answer

AWS Elastic Beanstalk with a Docker platform

Answer

AWS Lambda

Question 10

A company runs a globally distributed web application on Amazon EC2 instances behind Network Load Balancers in two AWS Regions: us-east-1 and eu-west-1. Users around the world access the application over the internet. The company wants to improve latency for all users by directing each user to the nearest healthy application endpoint. Additionally, the company requires two static IP addresses that clients can use for firewall whitelisting and that do not change even if the underlying infrastructure changes. Which AWS service should the company use?

Accepted Answer

AWS Global Accelerator. AWS Global Accelerator is the correct choice because it provides two static anycast IP addresses that serve as fixed entry points, and it directs user traffic to the nearest healthy application endpoint via the AWS global network, reducing latency. Unlike CloudFront, it does not cache content but optimizes TCP/UDP traffic, making it ideal for non-HTTP or dynamic applications behind Network Load Balancers.

Answer

Amazon CloudFront

Answer

Amazon Route 53 latency-based routing

Answer

AWS Direct Connect

Question 11

A company hosts its corporate website entirely as static content (HTML, CSS, JavaScript, images) in an Amazon S3 bucket. The website currently has no authentication requirements and is accessible to the public. The company wants to serve this content to users around the world with low latency. Additionally, the company wants to enforce HTTPS for all traffic using a custom domain name (www.example.com). The company does not want to manage SSL/TLS certificates on any servers. Which AWS service should the company use to meet these requirements?

Accepted Answer

Amazon CloudFront. Amazon CloudFront is a content delivery network (CDN) that caches static content at edge locations worldwide, reducing latency for global users. It supports custom domain names and can enforce HTTPS by using AWS Certificate Manager (ACM) to provision and renew SSL/TLS certificates automatically, eliminating the need for server-side certificate management. CloudFront integrates directly with an S3 bucket as the origin, allowing the bucket to remain private while serving content securely via HTTPS.

Answer

AWS Global Accelerator

Answer

Amazon S3 Transfer Acceleration

Answer

AWS Lambda@Edge

Question 12

A company is refactoring its monolithic e-commerce application into multiple microservices. The order-processing service must send messages to the inventory service to reserve stock. The company needs a fully managed service that can durably store these messages, handle high throughput, and allow the inventory service to poll for messages at its own pace. The company wants to avoid any message loss. Which AWS service should the company use?

Accepted Answer

Amazon Simple Queue Service (SQS). Amazon SQS is the correct choice because it is a fully managed message queuing service that durably stores messages across multiple Availability Zones, ensuring no message loss. It supports high throughput and allows the inventory service to poll for messages at its own pace using long or short polling, decoupling the order-processing and inventory services.

Answer

Amazon Simple Notification Service (SNS)

Answer

Amazon Kinesis Data Streams

Answer

Amazon MQ

Question 13

A company operates multiple Amazon VPCs across several AWS accounts for different business units. The company also has an on-premises data center connected to AWS via AWS Direct Connect. The network team wants to simplify the connectivity between all VPCs and the on-premises network. Currently, they manage individual VPC peering connections, which is becoming complex as more VPCs are added. They need a single network hub that can scale to connect hundreds of VPCs and the on-premises network, with centralized routing management. Which AWS service should the network team use?

Accepted Answer

AWS Transit Gateway. AWS Transit Gateway acts as a single, scalable network hub that connects multiple VPCs and on-premises networks via Direct Connect, using a centralized routing table. This eliminates the need for complex, meshed VPC peering connections and provides transitive routing across all attached networks, which directly addresses the requirement for a hub that scales to hundreds of VPCs.

Answer

Amazon VPC peering

Answer

AWS PrivateLink

Answer

AWS Site-to-Site VPN

Question 14

A company operates an e-commerce website that sends transactional emails such as order confirmations, password reset links, and shipping updates to customers. The company expects email volume to grow significantly during promotional events. The development team wants a fully managed AWS service that can reliably send high volumes of transactional emails, provide real-time tracking of bounces and complaints, and allow integration through a simple API. The team does not want to manage any email servers. Which AWS service should the team use?

Accepted Answer

Amazon Simple Email Service (Amazon SES). Amazon Simple Email Service (Amazon SES) is a fully managed, cloud-based email sending service designed specifically for sending transactional and marketing emails at high volume. It provides a simple API for integration, real-time tracking of bounces, complaints, and deliveries via Amazon CloudWatch and Amazon SNS notifications, and eliminates the need to manage any email servers. This makes it the ideal choice for the e-commerce company's requirements.

Answer

Amazon Simple Notification Service (Amazon SNS)

Answer

Amazon Simple Queue Service (Amazon SQS)

Answer

Amazon Pinpoint

Question 15

A company runs a web application on a fleet of Amazon EC2 instances behind an Application Load Balancer (ALB). The application serves dynamic content that changes frequently, but also serves static assets (CSS, JavaScript, images) that change rarely. The company wants to improve the overall performance and reduce the load on the EC2 instances by caching the static assets at edge locations while still routing dynamic requests to the ALB. Which combination of AWS services should the company use?

Accepted Answer

Use Amazon CloudFront with the ALB as the origin, and configure CloudFront to cache the static assets while forwarding dynamic requests to the ALB.. Amazon CloudFront can be configured with the ALB as the origin, allowing it to cache static assets (CSS, JavaScript, images) at edge locations while forwarding dynamic requests to the ALB. This reduces latency for users by serving cached content from the nearest edge location and offloads the EC2 instances from handling repeated requests for static files. CloudFront supports path-based caching behaviors, so you can define specific URL patterns (e.g., /static/*) to cache and others to forward directly to the ALB.

Answer

Use Amazon Route 53 with latency-based routing to direct users to the closest ALB endpoint.

Answer

Use Amazon S3 to host the entire application, and use the ALB to route traffic to the S3 bucket.

Answer

Use AWS Global Accelerator to distribute traffic across multiple ALBs in different AWS Regions.