CLF-C02 Cloud Concepts & AWS Core Services 5 — Questions and Answers
Question 1: Which AWS service enables you to provision a logically isolated section of the AWS Cloud where you can launch resources in a virtual network you define?
- AWS Direct Connect
- Amazon VPC (Correct answer)
- AWS Transit Gateway
- AWS PrivateLink
Correct answer: Amazon VPC
Amazon VPC (Virtual Private Cloud) lets you define your own isolated virtual network with custom IP ranges, subnets, route tables, and gateways.
Question 2: A company wants to migrate to AWS but is concerned about compliance with data residency laws that require data to stay within a specific country. How does AWS address this?
- AWS automatically replicates data globally for durability
- Customers choose which AWS Region to deploy in, keeping data within that geography (Correct answer)
- AWS guarantees data never leaves the country where the account was created
- Data residency is managed through AWS Shield
Correct answer: Customers choose which AWS Region to deploy in, keeping data within that geography
AWS Regions are isolated geographic areas, and data you store in a Region does not leave that Region unless you explicitly move it, supporting data residency compliance.
Question 3: Which AWS service provides a content delivery network (CDN) that caches content at edge locations worldwide to reduce latency?
- AWS Global Accelerator
- Amazon CloudFront (Correct answer)
- Amazon Route 53
- AWS Direct Connect
Correct answer: Amazon CloudFront
Amazon CloudFront is AWS's CDN that delivers content from a global network of edge locations closest to end users, reducing latency.
Question 4: Under the AWS Shared Responsibility Model, which of the following is AWS responsible for?
- Configuring security groups on customer EC2 instances
- Encrypting customer data in Amazon S3
- Maintaining physical security of data center facilities (Correct answer)
- Managing customer IAM policies
Correct answer: Maintaining physical security of data center facilities
AWS is responsible for the security 'of' the cloud, including physical infrastructure, hardware, and facilities — the data center itself.
Question 5: Which AWS Support plan is the minimum level that provides access to a dedicated Technical Account Manager (TAM)?
- Basic
- Developer
- Business
- Enterprise (Correct answer)
Correct answer: Enterprise
The Enterprise Support plan is the only plan that includes a dedicated Technical Account Manager (TAM) to provide proactive guidance.
Question 6: A company wants to use AWS services but needs connectivity with guaranteed bandwidth and lower latency than a VPN over the internet. Which service should they choose?
- AWS VPN
- Amazon CloudFront
- AWS Direct Connect (Correct answer)
- Amazon Route 53
Correct answer: AWS Direct Connect
AWS Direct Connect provides a dedicated private network connection between your premises and AWS, offering consistent performance and potentially lower data transfer costs.
Question 7: Which AWS service provides a global DNS service that can route users to the nearest healthy endpoint using latency-based routing?
- Amazon CloudFront
- AWS Global Accelerator
- Amazon Route 53 (Correct answer)
- Elastic Load Balancing
Correct answer: Amazon Route 53
Amazon Route 53 is AWS's highly available DNS service that supports routing policies including latency-based routing to direct users to the lowest-latency endpoint.
CLF-C02 Cloud Concepts & AWS Core Services 5
Which AWS service enables you to provision a logically isolated section of the AWS Cloud where you can launch resources in a virtual network you define?