CLF-C02 Cloud Concepts & AWS Core Services 4 — Questions and Answers
Question 1: Which AWS service would you use to monitor CPU utilization of your EC2 instances and set alarms when thresholds are breached?
- AWS CloudTrail
- Amazon CloudWatch (Correct answer)
- AWS Config
- AWS Trusted Advisor
Correct answer: Amazon CloudWatch
Amazon CloudWatch collects metrics like CPU utilization and lets you create alarms that trigger notifications or actions when thresholds are exceeded.
Question 2: A company needs to send transactional emails (order confirmations, password resets) at scale from their AWS-hosted application. Which service should they use?
- Amazon SNS
- Amazon SES (Correct answer)
- Amazon SQS
- Amazon Pinpoint
Correct answer: Amazon SES
Amazon SES (Simple Email Service) is designed for sending large volumes of transactional or marketing emails from applications.
Question 3: What is the primary purpose of an AWS Availability Zone (AZ)?
- To serve content to users with low latency globally
- To provide fault isolation so a failure in one AZ does not affect others (Correct answer)
- To separate development and production workloads
- To reduce data transfer costs between services
Correct answer: To provide fault isolation so a failure in one AZ does not affect others
Availability Zones are physically separate data centers within a Region, designed so failures (power, cooling, network) are isolated and do not cascade.
Question 4: Which AWS tool provides automated recommendations to help optimize your AWS environment for cost, performance, security, fault tolerance, and service limits?
- AWS Cost Explorer
- AWS Trusted Advisor (Correct answer)
- AWS Config
- AWS Inspector
Correct answer: AWS Trusted Advisor
AWS Trusted Advisor analyzes your AWS environment and provides real-time guidance across five categories: cost, performance, security, fault tolerance, and service limits.
Question 5: Which deployment model describes running workloads on infrastructure you own and operate in your own facilities, without using cloud services?
- Public cloud
- Private cloud (on-premises) (Correct answer)
- Hybrid cloud
- Community cloud
Correct answer: Private cloud (on-premises)
A private/on-premises deployment means infrastructure is owned and managed internally, not hosted by a cloud provider like AWS.
Question 6: A developer needs temporary AWS credentials to allow an EC2 instance to access an S3 bucket without storing long-term access keys. What should they use?
- IAM User access keys stored in environment variables
- IAM Role attached to the EC2 instance (Correct answer)
- Root account credentials
- AWS Secrets Manager with manual rotation
Correct answer: IAM Role attached to the EC2 instance
An IAM Role attached to an EC2 instance provides temporary, automatically rotated credentials without requiring hardcoded access keys.
Question 7: Which AWS service provides a managed Kubernetes container orchestration service?
- Amazon ECS
- Amazon EKS (Correct answer)
- AWS Fargate
- Amazon ECR
Correct answer: Amazon EKS
Amazon EKS (Elastic Kubernetes Service) is a managed Kubernetes service that runs the Kubernetes control plane across multiple AWS AZs.
CLF-C02 Cloud Concepts & AWS Core Services 4
Which AWS service would you use to monitor CPU utilization of your EC2 instances and set alarms when thresholds are breached?