CLF-C02 Cloud Technology and Services Practice Question
A solutions architect needs to isolate an application in its own virtual network within AWS, with full control over IP address ranges, subnet definitions, route tables, and internet gateway configuration. Which AWS service provides this capability?
⚠ Common exam trap
Candidates often confuse AWS Direct Connect (a physical or virtual private network connection) with the ability to create and control a virtual network, when Direct Connect merely extends an existing VPC and does not provide the foundational network isolation and control that VPC does.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Amazon VPC
Amazon VPC (Virtual Private Cloud) enables you to provision a logically isolated section of the AWS cloud where you can define your own IP address range (using CIDR notation, e.g., 10.0.0.0/16), create subnets, configure route tables, and attach an Internet Gateway for public internet access. This gives you full control over the virtual networking environment, exactly matching the requirement.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Amazon Route 53
Why it's wrong here
Amazon Route 53 is a managed DNS service that translates human-friendly domain names into IP addresses and routes end-user requests to AWS resources or on-premises endpoints. It operates entirely at the DNS layer and has no concept of virtual network boundaries, IP CIDR blocks, or subnets. While it can direct traffic to resources inside a VPC, it does not create or isolate any network space.
- ✗
Amazon CloudFront
Why it's wrong here
Amazon CloudFront is a global content delivery network (CDN) that caches copies of content at edge locations to reduce latency and offload origin servers. It is designed for fast, secure content delivery over HTTP(S), not for defining private IP address ranges or segmenting workloads. CloudFront can use a VPC origin, but it cannot provide the logically isolated network environment that the question asks for.
- ✗
AWS Direct Connect
Why it's wrong here
AWS Direct Connect is a network service that establishes a dedicated physical connection from an on-premises data center to AWS, bypassing the public internet for increased bandwidth and lower latency. This connection is attached to an existing VPC via a virtual private interface, but Direct Connect does not build or define the virtual network itself. Without a VPC, Direct Connect has no isolated network to connect to, so it is a complementary service rather than the source of network isolation.
- ✓
Amazon VPC
Why this is correct
Amazon VPC is the AWS networking service that provides a logically isolated virtual network. Customers define IP CIDR blocks, create public and private subnets, configure route tables, and attach internet gateways to control traffic flow.
Visual reference
Go deeper
Related to this question
About these practice questions
Courseiva writes every CLF-C02 question from scratch — 988 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This CLF-C02 practice question is part of Courseiva's free Amazon Web Services certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CLF-C02 exam.