CLF-C02 Cloud Concepts & AWS Core Services 2 — Questions and Answers
Question 1: A company wants to avoid upfront capital expenses for IT infrastructure and instead pay only for what they use. Which cloud benefit does this represent?
- Economies of scale
- Trade capital expense for variable expense (Correct answer)
- Increased speed and agility
- Stop guessing capacity
Correct answer: Trade capital expense for variable expense
Trading capital expense (CapEx) for variable expense (OpEx) is a key cloud benefit that lets companies pay only for what they consume.
Question 2: Which AWS service provides a managed relational database that automates backups, patching, and failover?
- Amazon DynamoDB
- Amazon Redshift
- Amazon RDS (Correct answer)
- Amazon ElastiCache
Correct answer: Amazon RDS
Amazon RDS (Relational Database Service) automates common DBA tasks like backups, software patching, and multi-AZ failover.
Question 3: What does the AWS concept of 'elasticity' primarily refer to?
- The ability to recover from failures automatically
- Automatically scaling resources up or down to match demand (Correct answer)
- Distributing traffic across multiple servers
- Encrypting data at rest and in transit
Correct answer: Automatically scaling resources up or down to match demand
Elasticity means automatically acquiring or releasing resources to match current demand, avoiding over- or under-provisioning.
Question 4: A startup needs a simple way to host a static website with low latency globally. Which AWS combination is most cost-effective?
- EC2 + EBS
- S3 + CloudFront (Correct answer)
- Elastic Beanstalk + RDS
- Lambda + API Gateway
Correct answer: S3 + CloudFront
Amazon S3 can host static website files, and CloudFront serves them from edge locations worldwide with low latency at minimal cost.
Question 5: Which AWS service allows you to run code without provisioning or managing servers?
- Amazon EC2
- AWS Elastic Beanstalk
- AWS Lambda (Correct answer)
- Amazon ECS
Correct answer: AWS Lambda
AWS Lambda is a serverless compute service that runs your code in response to events without requiring server management.
Question 6: Under the AWS Shared Responsibility Model, which task is the CUSTOMER's responsibility?
- Physical security of data centers
- Patching hypervisor software
- Managing IAM user permissions (Correct answer)
- Maintaining network infrastructure hardware
Correct answer: Managing IAM user permissions
Customers are responsible for security 'in' the cloud, which includes managing IAM users, roles, and access policies.
Question 7: Which AWS service provides a virtual private network connection between an on-premises network and a VPC using the public internet?
- AWS Direct Connect
- AWS VPN (Correct answer)
- Amazon VPC Peering
- AWS Transit Gateway
Correct answer: AWS VPN
AWS VPN creates an encrypted IPsec tunnel over the public internet connecting your on-premises network to your VPC.
A company wants to avoid upfront capital expenses for IT infrastructure and instead pay only for what they use.
Which cloud benefit does this represent?