Identify AWS network services.
21 practice questions under this official exam objective (CLF-C02), each with the answer key, an option-by-option explanation and instant feedback.
Questions under this objective
21 total · page 1 of 2Which AWS Tool Acts as a Firewall for a VPC Subnet?
Network ACLs are the stateless, subnet-level firewall layer in Amazon VPC that evaluates numbered allow and deny rules for traffic entering and leavin
Which AWS Service Provides a Dedicated On-Premises Connection?
AWS Direct Connect is the AWS network service that establishes a dedicated, private connection between an on-premises data center and the AWS Cloud. T
AWS VPC Internet Gateway Purpose
An internet gateway is a core VPC component that enables bidirectional communication between instances in a VPC and the public internet. This page cla
How Do You Deliver Images and Videos Globally with Minimal Latency Cost-Effectively?
Amazon CloudFront is the AWS content delivery network that caches images and videos at edge locations worldwide, cutting latency for global users. Thi
Which AWS Services Connect an On-Premises Network to a VPC?
CLF-C02 tests whether you can distinguish hybrid connectivity services from internal AWS routing and traffic-distribution services. This page confirms
AWS Transit Gateway for Simplified VPC and On-Premises Connectivity
This page explains how AWS Transit Gateway acts as a cloud router to simplify connections between multiple VPCs and on-premises networks, reducing the
Which AWS Service Captures Inbound and Outbound VPC Traffic?
VPC Flow Logs capture IP traffic metadata for network interfaces in an Amazon VPC, giving visibility for troubleshooting, security analysis, and compl
Which AWS Service Distributes HTTP Traffic Across EC2 Instances?
An Application Load Balancer distributes incoming HTTP/HTTPS traffic evenly across running EC2 instances because it operates at Layer 7. This page con
Which AWS Service Provides More Consistent Bandwidth Than the Public Internet?
AWS Direct Connect is the service that gives a dedicated, private network path from on-premises to AWS, so it maintains bandwidth throughput and deliv
How to Connect AWS Services and VPCs Without Public Internet Exposure?
AWS PrivateLink enables private connectivity between VPCs, supported AWS services, and on-premises networks without routing traffic over the public in
Secure On-Premises to AWS Connection Within One Week?
A secure on-premises-to-AWS connection that must be ready within one week is best met by AWS Site-to-Site VPN, which uses IPsec tunnels over the publi
Triggering Lambda on EC2 State Changes
Amazon EventBridge is the correct AWS service for triggering a Lambda function when an EC2 instance enters a specific state like stopping. This page e
VPC Components: Internet Gateway and Subnet
This question identifies the core components that make up an Amazon Virtual Private Cloud (VPC), specifically focusing on subnets and internet gateway
Controlling EC2 Instance Traffic with Security Groups
Security groups act as instance-level virtual firewalls to control network traffic between specific EC2 instances within a VPC.
Which AWS Service Improves Performance for Apps Behind ALBs?
This question tests which AWS service improves the performance of public applications deployed behind Application Load Balancers. The answer is AWS Gl
Private S3 Access from EC2 Without Internet
This AWS Cloud Practitioner question tests how an Amazon EC2 instance reaches an Amazon S3 bucket without traversing the public internet. The page est
AWS Direct Connect for Private On-Premises to AWS Connections
This question identifies AWS Direct Connect as the service providing private network connections from on-premises to AWS. It clarifies why VPC and Rou
Which AWS Service Connects VPCs and On-Premises Networks to a Central Hub?
AWS Transit Gateway is the network service that acts as a central hub, letting you connect many VPCs, VPNs, and on-premises networks through a single
AWS Service for Global Website Latency Reduction
Amazon CloudFront is the optimal AWS service to reduce latency for a global audience by caching content at edge locations. This page explains why Clou
Limiting Network Access at Subnet Level in AWS
This page clarifies the distinction between Security Groups and Network ACLs, establishing that Network ACLs are the correct feature for controlling n