CLF-C02 Networking 5

Question 1

Which Route 53 feature would a company use to route a percentage of traffic to a new application version for A/B testing?

Accepted Answer

Weighted routing

Answer

Weighted routing allows you to assign proportional weights to different resource record sets, enabling gradual traffic shifts like sending 10% to a new version during testing.

Question 2

A company wants to privately access Amazon S3 from their VPC without sending traffic over the internet. Which type of VPC Endpoint should they use?

Accepted Answer

Gateway Endpoint

Answer

Gateway Endpoints are available for Amazon S3 and DynamoDB, allowing private access from a VPC by adding an entry to the route table that directs traffic to the endpoint.

Question 3

What is the primary benefit of deploying resources across multiple Availability Zones within a VPC?

Accepted Answer

It improves fault tolerance by protecting against single AZ failures

Answer

Deploying across multiple Availability Zones ensures that if one AZ experiences an outage, resources in other AZs continue to serve traffic, improving application availability.

Question 4

Which AWS service provides DDoS protection and is automatically included at no extra charge for all AWS customers?

Accepted Answer

AWS Shield Standard

Answer

AWS Shield Standard is automatically enabled for all AWS customers at no additional cost and provides protection against common, most frequently occurring DDoS attacks.

Question 5

A company's EC2 instances in a private subnet need to access AWS services like S3 and DynamoDB. Which solution keeps this traffic within the AWS network?

Accepted Answer

Use VPC Endpoints for S3 and DynamoDB

Answer

VPC Endpoints (Gateway Endpoints for S3 and DynamoDB, Interface Endpoints for other services) allow private connectivity to AWS services without traversing the public internet.

(CLF-C02) AWS Certified Cloud Practitioner Practice Test

(CLF-C02) AWS Certified Cloud Practitioner Practice Test

CLF-C02 Networking 5