Courseiva
Cloud Technology and ServicesmediumMultiple ChoiceObjective-mapped

CLF-C02 Cloud Technology and Services Practice Question

A company runs a globally distributed multiplayer game on AWS. The game uses UDP for real-time communication and requires static IP addresses that do not change for whitelisting by internet service providers. The company needs to route traffic to the nearest healthy application endpoint to minimize latency and improve performance. The solution must work with both TCP and UDP traffic and provide static IP addresses. Which AWS service should the company use?

⚠ Common exam trap

Many candidates confuse CloudFront's edge caching with Global Accelerator's network-layer optimization, but CloudFront does not support UDP or provide static IPs, making it unsuitable for real-time gaming traffic.

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

AWS Global Accelerator

AWS Global Accelerator provides static IP addresses that serve as fixed entry points to your application, and it uses the AWS global network to route traffic to the nearest healthy endpoint via Anycast. It supports both TCP and UDP traffic, making it ideal for real-time UDP-based gaming workloads that require low latency and static IPs for ISP whitelisting.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

  • AWS Global Accelerator

    Why this is correct

    AWS Global Accelerator is correct because it provides static Anycast IP addresses at AWS edge locations, which route incoming TCP/UDP traffic over the AWS global network to the nearest healthy application endpoint. Unlike DNS-based services, it optimizes the network path at the packet level for latency-sensitive multiplayer game connections, and it offers fast failover without client-side DNS caching issues. This makes it ideal for globally distributed real-time games that need predictable performance and connection resilience.

  • Amazon CloudFront

    Why it's wrong here

    Amazon CloudFront is incorrect for this scenario because it is a content delivery network that accelerates HTTP/HTTPS traffic by caching static and dynamic web content at edge locations. It does not support UDP-based real-time game traffic, and it does not provide static IP addresses for clients to connect to; instead, it resolves to the nearest edge via DNS. CloudFront is designed for web content distribution, not for optimizing low-latency, connection-oriented game protocols.

    When this WOULD be correct

    A company wants to deliver static and dynamic web content (e.g., images, videos, API responses) with low latency and high transfer speeds to a global audience. The solution must support HTTP/HTTPS and integrate with AWS origins like S3, EC2, or ALB.

  • Amazon Route 53

    Why it's wrong here

    Incorrect. Amazon Route 53 is a DNS service that translates domain names to IP addresses but does not provide static IP addresses. DNS responses can change based on routing policies, and Route 53 alone does not optimize network paths for UDP traffic.

    When this WOULD be correct

    A company needs to route users to the nearest healthy application endpoint based on latency, using DNS-based traffic management, and does not require static IP addresses or UDP support. The application is HTTP/HTTPS-based and can tolerate DNS caching delays.

  • AWS Direct Connect

    Why it's wrong here

    AWS Direct Connect is incorrect because it establishes a dedicated, private physical connection between an on-premises data center or colocation facility and AWS, used primarily for hybrid cloud architectures and high-throughput workloads. It bypasses the public internet but is not a global traffic routing service—it does not provide static Anycast IPs, does not optimize paths for internet users worldwide, and cannot handle UDP traffic from geographically distributed gamers unless combined with other services. Direct Connect is a point-to-point link, not a global edge network.

    When this WOULD be correct

    A company needs a dedicated, private, low-latency connection between its on-premises data center and AWS VPC to support consistent throughput for large data transfers, and compliance requires avoiding the public internet. Direct Connect would be the correct answer.

Option-by-option analysis

Why each answer is right or wrong

Understanding why wrong answers are wrong — and when they would be correct — is what separates a 750 score from a 900. The CLF-C02 exam frequently reuses these exact scenarios with slightly different constraints.

AWS Global AcceleratorCorrect answer

Why this is correct

AWS Global Accelerator is correct because it provides static Anycast IP addresses at AWS edge locations, which route incoming TCP/UDP traffic over the AWS global network to the nearest healthy application endpoint. Unlike DNS-based services, it optimizes the network path at the packet level for latency-sensitive multiplayer game connections, and it offers fast failover without client-side DNS caching issues. This makes it ideal for globally distributed real-time games that need predictable performance and connection resilience.

Amazon CloudFrontWrong answer — click to see why

Why this is wrong here

Amazon CloudFront is a content delivery network (CDN) that primarily handles HTTP/HTTPS traffic and does not support UDP traffic, which is required for the real-time game communication. It also does not provide static IP addresses for whitelisting.

★ When this WOULD be the correct answer

A company wants to deliver static and dynamic web content (e.g., images, videos, API responses) with low latency and high transfer speeds to a global audience. The solution must support HTTP/HTTPS and integrate with AWS origins like S3, EC2, or ALB.

Why candidates choose this

Candidates may associate CloudFront with global edge locations and low-latency content delivery, but overlook its lack of UDP support and static IP address capabilities.

Amazon Route 53Wrong answer — click to see why

Why this is wrong here

Amazon Route 53 does not provide static IP addresses for whitelisting; it uses DNS-based routing, which can change IP addresses. It also does not natively handle UDP traffic for real-time communication with static IPs.

★ When this WOULD be the correct answer

A company needs to route users to the nearest healthy application endpoint based on latency, using DNS-based traffic management, and does not require static IP addresses or UDP support. The application is HTTP/HTTPS-based and can tolerate DNS caching delays.

Why candidates choose this

Candidates may think Route 53's latency-based routing and health checks can solve the problem, overlooking the requirement for static IP addresses and UDP support, which are not provided by Route 53.

AWS Direct ConnectWrong answer — click to see why

Why this is wrong here

AWS Direct Connect establishes a dedicated network connection from on-premises to AWS, but it does not provide global traffic routing to the nearest healthy endpoint, nor does it offer static IP addresses for whitelisting by ISPs. It is not designed for global traffic distribution or UDP optimization.

★ When this WOULD be the correct answer

A company needs a dedicated, private, low-latency connection between its on-premises data center and AWS VPC to support consistent throughput for large data transfers, and compliance requires avoiding the public internet. Direct Connect would be the correct answer.

Why candidates choose this

Candidates may think Direct Connect provides static IPs and low latency, but it is a physical connection solution, not a global traffic routing service, and does not handle UDP optimization or endpoint health checks across regions.

Analysis generated from the official CLF-C02blueprint and verified against question context. The “when correct” sections are what AI assistants cite when candidates ask “what’s the difference between these options?”

About these practice questions

This CLF-C02 question is part of Courseiva's 988-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →

How Courseiva writes practice questions · Editorial policy

JA

Written by Johnson Ajibi, MSc IT Security

Senior Network & Security Engineer · founder of Courseiva

This CLF-C02 practice question is part of Courseiva's free Amazon Web Services certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CLF-C02 exam.