CCP (CLF-C01) 3 — Questions and Answers
Question 1: Which AWS service is used to distribute incoming application traffic across multiple Amazon EC2 instances?
- Amazon Route 53
- AWS Global Accelerator
- Elastic Load Balancing (Correct answer)
- Amazon CloudFront
Correct answer: Elastic Load Balancing
Elastic Load Balancing automatically distributes incoming traffic across multiple EC2 instances to improve availability and fault tolerance.
Question 2: What AWS concept refers to the ability to acquire resources as you need them and release them when you don't?
- Economies of scale
- Elasticity (Correct answer)
- High availability
- Fault tolerance
Correct answer: Elasticity
Elasticity in the cloud means you can scale resources up or down dynamically to match actual demand.
Question 3: Which S3 storage class is designed for data that is accessed less than once a month but requires rapid access when needed?
- S3 Standard
- S3 Intelligent-Tiering
- S3 Glacier Instant Retrieval (Correct answer)
- S3 One Zone-IA
Correct answer: S3 Glacier Instant Retrieval
S3 Glacier Instant Retrieval offers low-cost archival storage for rarely accessed data with millisecond retrieval times.
Question 4: Which IAM best practice helps prevent unauthorized access if AWS credentials are compromised?
- Using root account credentials for daily tasks
- Enabling Multi-Factor Authentication (MFA) (Correct answer)
- Creating a single shared IAM user for all developers
- Storing credentials in application code
Correct answer: Enabling Multi-Factor Authentication (MFA)
Enabling MFA adds a second layer of authentication, making compromised credentials alone insufficient for unauthorized access.
Question 5: A startup wants to estimate costs before migrating to AWS. Which tool should they use?
- AWS Cost Explorer
- AWS Billing Dashboard
- AWS Pricing Calculator (Correct answer)
- AWS Trusted Advisor
Correct answer: AWS Pricing Calculator
The AWS Pricing Calculator lets you model your AWS architecture and estimate costs before deploying any resources.
Question 6: Which AWS service provides a dedicated private connection from an on-premises data center to AWS?
- AWS VPN
- AWS Direct Connect (Correct answer)
- Amazon VPC Peering
- AWS Transit Gateway
Correct answer: AWS Direct Connect
AWS Direct Connect establishes a dedicated physical network connection between an on-premises facility and AWS, bypassing the public internet.
Question 7: Which AWS support plan provides access to a Technical Account Manager (TAM)?
- Basic
- Developer
- Business
- Enterprise (Correct answer)
Correct answer: Enterprise
AWS Enterprise support plan includes a designated Technical Account Manager (TAM) who provides proactive guidance and advocacy.
CCP (CLF-C01) 3
Which AWS service is used to distribute incoming application traffic across multiple Amazon EC2 instances?