The AWS Certified Cloud Practitioner (CLF-C02) exam is designed for individuals who want to demonstrate their overall understanding of AWS Cloud. It covers basic AWS services and their benefits.
A company needs to deliver low-latency content globally. Which service should they use?
AAWS CloudFront
BAWS Elastic Load Balancing
CAWS Snowball
DAWS S3
Explanation
AWS CloudFront is a CDN specifically built for low-latency global content delivery; the other services serve different purposes.
Q462
You are configuring VPC Peering between two VPCs in different regions. What happens?
APeering is automatically established.
BIt is not allowed across regions.
CThey must be in the same account.
DConnectivity is established with NAT.
Explanation
VPC Peering is not supported across different regions; other options are incorrect interpretations of VPC Peering limitations.
Q463
Which AWS service can help analyze application performance and troubleshoot issues in real-time?
AAWS CloudTrail
BAWS CodeDeploy
CAmazon CloudWatch
DAWS Lambda
Explanation
CloudWatch provides monitoring for AWS resources, while others offer different functionalities.
Q464
A company needs to securely store and retrieve sensitive data and require access control. What should they use?
AAmazon S3
BAmazon EFS
CAWS Secrets Manager
DAmazon Glacier
Explanation
AWS Secrets Manager is specifically designed for sensitive data storage with access control, unlike the others.
Q465
You are configuring a VPC with a public and private subnet. What best defines a public subnet?
AHas no route to the internet
BAllows SSH access only
CHas a route to the internet
DOnly contains NAT Gateways
Explanation
A public subnet must have an internet route, while the others are incorrect definitions.
Q466
Which service provides a scalable database solution in the cloud?
AAmazon RDS
BAWS Glue
CAmazon S3
DAWS Lambda
Explanation
Amazon RDS offers managed relational database services, while the others provide different functionalities.
Q467
A company needs to automate infrastructure deployment. Which tool should they use?
AAWS CloudFormation
BAmazon Elastic Beanstalk
CAWS CloudTrail
DAWS IAM
Explanation
AWS CloudFormation allows infrastructure as code, while others serve different purposes.
Q468
You are configuring a VPC. What happens when you add an inbound rule allowing all traffic?
AAll traffic is blocked.
BOnly HTTPS traffic is allowed.
CAll traffic is allowed.
DOnly SSH traffic is allowed.
Explanation
Allowing all traffic opens the security group to all types of inbound traffic, contrary to the other options.
Q469
Which service is primarily used for local file storage in the cloud?
AAmazon S3
BAmazon EBS
CAmazon Glacier
DAWS Lambda
Explanation
Amazon EBS provides block-level storage for EC2 instances, while S3 is for object storage and Glacier for archival storage. The other options do not offer local file storage.
Q470
A company needs to provide employees with temporary access to AWS resources that's automatically revoked after a short period. Which service should they use?
AAWS IAM users
BAWS IAM roles
CAmazon Cognito
DAWS Organizations
Explanation
AWS IAM roles allow for temporary, limited access to AWS resources, while users have permanent access unless otherwise configured. Cognito is mainly for user authentication and Organizations is for management.