Cloud technology and services — page 2
Objective 3 of AWS Certified Cloud Practitioner (CLF-C02), worth 34% of the exam. This is page 2 of 3 of its question list; page one carries the full objective summary.
- Share of the exam
- 34%
- Questions in a real sitting
- roughly 22 of 65
- Questions in this bank
- 44
- Signed for by a person
- 0
- Machine-checked only
- 44
Partly checked. None of the 44 questions here has been read against the cited source by a person. 44 questions have been checked against their cited clause by an automated pass — which is not the same thing, and is not a signature.
Only questions a person has signed for are used in mock exams here. That is the whole difference between the two kinds of checking above.
What this objective covers
The 44 questions written for this objective cite 8 AWS exam guide task statements (3.1, 3.2, 3.3, 3.4, 3.5, 3.6, 3.7, 3.8).
They break down as 39 single-answer questions and 5 choose-several questions.
Questions on this objective (page 2 of 3)
- A 2 TB Oracle database in a company data centre is being moved to Amazon Aurora PostgreSQL. The business will accept a cutover window of a few minutes and no more. Which approach meets that? machine-checked
- A single IP address is flooding a public web tier with junk requests. The security groups on the instances currently allow port 443 from anywhere, which is correct — the site is public. The team wants to block that one source address across every instance in the public subnets. What do they do? machine-checked
- Application servers sit in private subnets in a VPC. They must be able to download operating system patches from vendor repositories on the internet, but nothing on the internet may be able to open a connection to them. Which design does this? machine-checked
- A bank moves several terabytes a day between its own data centre and AWS. It needs bandwidth and latency that do not vary with internet conditions, and traffic that never traverses the public internet. It has accepted both the monthly cost and a lead time of several weeks. Which connectivity option is being described? machine-checked
- Instances in a private subnet write several terabytes a month to Amazon S3. That traffic currently leaves through a NAT gateway. Security wants it to stay on the AWS network, and finance has noticed the NAT gateway's data processing charges. What addresses both? machine-checked
- A company has deployed the same web application into two Regions and owns the domain example.com. Visitors should be sent to whichever Regional deployment answers them fastest, and away from one that has stopped responding. Which TWO components deliver that? machine-checked
- A regulator requires seven years of transaction logs to be retained. They are read at most twice a year during an audit, and the auditor is content to be told the files will be available the following working day. Which S3 storage class is cheapest while still meeting this? machine-checked
- A data science bucket holds 60 TB of large files. Some are read every day for a month and then never again; others are read at unpredictable intervals for years. Nobody can say in advance which is which, and the team does not want to own and maintain a set of lifecycle rules. Which storage class fits? machine-checked
- A pipeline generates preview images from master files that are stored elsewhere and backed up. The previews are read rarely, and if they were all lost they could be regenerated by rerunning the pipeline for about an hour. Which storage class is the right economic choice? machine-checked
- A team wants to cut storage costs by putting their self-managed database's data files in Amazon S3, so the database engine reads and writes them there in place. What should they be told? machine-checked
- A team is about to put customer documents into Amazon S3 for the first time. Which TWO statements are true and should shape the design? machine-checked
- Three EC2 instances running the same Linux content management system, spread across three Availability Zones, all need read and write access to one uploads directory with ordinary POSIX file permissions. Which storage service should they use? machine-checked
- A film studio's editors work on terabytes of footage from workstations in the building and need local disk speed while editing. The company wants the bulk of the archive to live in Amazon S3 and the on-premises storage array to shrink. Editing directly over the wide-area link has already been tested and is too slow. What fits? machine-checked
- An auditor asks to see one place that shows the backup schedule and retention period for EBS volumes, RDS databases, DynamoDB tables and EFS file systems, together with evidence that the policy was actually applied. Which service provides that? machine-checked
- A database runs on an EC2 instance with EBS volumes and is snapshotted nightly. The recovery plan says the database must be restorable in a second Region after an event that takes the primary Region out. Which step actually delivers that? machine-checked
- Compliance has asked a one-off question about a year of web server logs that are already sitting in Amazon S3 as compressed files. The answer is needed this week, the question is unlikely to be asked again, and nobody wants to stand up a cluster or load the data anywhere first. Which service answers it? machine-checked
- An insurer receives claim forms as scanned PDFs. It needs the printed values out of the form's fields — policy number, date, amount — as structured text it can put into a database. The team has no machine learning expertise and does not want to train anything. Which service should it start with? machine-checked
- Clickstream events arrive continuously from a busy website and must be captured and written into Amazon S3 within a minute or two of arriving, so that analysts can query them there. The team wants no cluster and no consumer application to build. Which service does this? machine-checked
- An online shop's checkout writes the order and then calls the fulfilment service directly, waiting for it to answer. When fulfilment is slow or restarting, checkouts fail and orders are lost. The team wants checkout to accept the order regardless, and fulfilment to work through the backlog at its own pace. What should they introduce? machine-checked
- When a build finishes, four separate things must happen: an email to the release manager, a Lambda function that updates a dashboard, a message into an SQS queue for the deployment worker, and an HTTPS callback to a partner system. The build job must not have to know about any of them, and a fifth destination will be added next month. What should the build publish to? machine-checked
Drill this objective
The trainer can run a practice set drawn from this objective alone, which is what the weight column above is for: revise the heavy objectives first.
Practise Cloud technology and services
The other objectives in AWS Certified Cloud Practitioner (CLF-C02)
- 1. Cloud concepts — 24% of the exam
- 2. Security and compliance — 30% of the exam
- 4. Billing, pricing and support — 12% of the exam