Practice Test Geeks(CLF-C02) AWS Certified Cloud Practitioner Practice Test
← All CLF-C02 Flashcard Decks

Networking Flashcards

7 cards from real CLF-C02 practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.

Read the first 7 Networking flashcards as text

  1. A company wants to connect their on-premises data center to AWS with a dedicated, private connection that bypasses the public internet. Which service should they use?

    Answer: AWS Direct Connect

    AWS Direct Connect establishes a dedicated private network connection between on-premises and AWS, bypassing the public internet for more consistent performance.

  2. Which AWS service allows you to logically isolate a section of the AWS Cloud where you can launch AWS resources in a virtual network you define?

    Answer: Amazon VPC

    Amazon VPC (Virtual Private Cloud) lets you provision a logically isolated section of AWS where you can launch resources in a virtual network you define.

  3. A company has multiple VPCs and needs to route traffic between them through a central hub. Which AWS service is designed for this purpose?

    Answer: AWS Transit Gateway

    AWS Transit Gateway acts as a network transit hub that connects multiple VPCs and on-premises networks through a central point, simplifying the network architecture.

  4. What is the purpose of a NAT Gateway in AWS networking?

    Answer: To enable instances in private subnets to access the internet without exposing their private IPs

    A NAT Gateway allows instances in private subnets to initiate outbound internet connections while preventing inbound connections from the internet.

  5. Which component of Amazon VPC controls inbound and outbound traffic at the subnet level and is stateless?

    Answer: Network ACL

    Network Access Control Lists (NACLs) are stateless firewalls that operate at the subnet level, requiring explicit rules for both inbound and outbound traffic.

  6. A developer needs to allow EC2 instances in a private subnet to download software updates from the internet. What combination of resources is required?

    Answer: NAT Gateway in a public subnet and a route in the private subnet's route table

    A NAT Gateway placed in a public subnet, combined with a route in the private subnet's route table pointing to the NAT Gateway, allows outbound internet access for private instances.

  7. What is VPC Peering?

    Answer: A networking connection between two VPCs that enables traffic routing using private IP addresses

    VPC Peering is a networking connection between two VPCs that allows traffic to be routed between them using private IPv4 or IPv6 addresses as if on the same network.