AWS Certified Cloud Practitioner CLF-C02 Lecture Notes Flashcards

Comprehensive vocabulary flashcards covering AWS CLF-C02 exam domains including Cloud Concepts, Security, Technology, and Billing.

Region

A geographic area, such as us-west-2 (Oregon), that is isolated from other areas and contains at least three Availability Zones.

Availability Zone (AZ)

One or more discrete data centers within a Region, featuring independent power, cooling, and networking infrastructure.

Edge Location

Small points of presence (POPs) used by CloudFront and Route 53 to deliver content globally; there are over 400+ distinct locations.

Trade capital expense for variable expense

An AWS value proposition where users avoid upfront hardware costs and instead pay only for the resources they consumed.

Operational Excellence

The AWS Well-Architected Framework pillar that focuses on running and monitoring systems to deliver business value and continually improving processes.

Sustainability

The newest AWS Well-Architected Framework pillar, which focuses on minimizing the environmental impact of running cloud workloads.

Shared Responsibility Model

A security framework where AWS is responsible for security 'of' the cloud (physical infrastructure) and the customer is responsible for security 'in' the cloud (data, IAM, and guest OS).

IAM Role

An assumable identity for services or cross-account access that provides short-term credentials via AWS Security Token Service (STS).

Principle of Least Privilege

An IAM best practice of granting only the minimum permissions necessary for a user or service to perform its task.

CloudTrail

A detective security service that logs all API calls made within an AWS account, recording who did what and when.

GuardDuty

An intelligent threat detection service that uses machine learning to monitor CloudTrail, VPC Flow Logs, and DNS logs.

AWS Artifact

A self-service portal where customers can download AWS security and compliance reports such as SOC, ISO, and PCI documentation.

EC2 On-Demand Instances

A compute purchase option where users pay for capacity by the second or hour with no long-term commitment; it is the most flexible but highest cost option.

Spot Instances

An EC2 purchase option offering up to a $90\%$ discount by utilizing unused AWS capacity, subject to termination with a 2-minute warning.

Lambda

A serverless compute service that runs code in response to events and charges based on the number of requests and execution duration in milliseconds.

S3 Standard

A high-durability object storage class designed for frequently accessed data, offering $99.999999999\%$ (11 9's) of durability.

EBS (Elastic Block Store)

Network-attached block storage used as a persistent disk for EC2 instances.

Aurora

A cloud-native relational database engine that is MySQL and PostgreSQL compatible, offering significantly higher performance than standard engines.

DynamoDB

A fully managed NoSQL key-value and document database that provides single-digit millisecond performance at any scale.

VPC (Virtual Private Cloud)

A logically isolated section of the AWS Cloud where users can launch resources in a defined virtual network.

Security Groups

Stateful firewalls that control inbound and outbound traffic at the individual instance level.

NACLs (Network Access Control Lists)

Stateless firewalls that control traffic at the subnet level within a VPC.

CloudFront

A Content Delivery Network (CDN) service that speeds up the distribution of static and dynamic web content by caching it at edge locations.

Route 53

A highly available and scalable cloud Domain Name System (DNS) web service that supports various routing policies like weighted and latency-based. - not available in China

SQS (Simple Queue Service)

A fully managed message queuing service used to decouple and scale microservices and distributed systems via a pull-based model.

Infrastructure as Code (IaC)

A method of managing and provisioning infrastructure through machine-readable definition files, such as AWS CloudFormation templates.

Enterprise Support Plan

The highest AWS support tier, featuring a 15-minute response time for business-critical system failures and a designated Technical Account Manager (TAM).

AWS Trusted Advisor

An online tool that provides real-time guidance to help provision resources following AWS best practices across cost, performance, security, and fault tolerance.

AWS Cost Explorer

A tool that allows users to visualize, understand, and manage their AWS costs and usage over time, including forecasting future spend.

AWS Organizations

An account management service that enables consolidated billing and the use of Service Control Policies (SCPs) across multiple AWS accounts.

Q1. A company wants to deploy an application to users in three continents with the lowest possible latency for cached static content. Which AWS component is designed for this?

A) Availability Zones

B) Regions

C) Edge Locations

D) Local Zones

C) Edge Locations

Q2. Which two of the following are AWS’s responsibility under the Shared Responsibility Model when using EC2? (Select TWO)

A) Patching the guest operating system

B) Patching the hypervisor

C) Physical security of data centers

D) Configuring security Groups

E) Encrypting data at rest in the application

B) Patching the Hypervisor & C) Physical security of data centers.

Q3. A startup wants to run a batch processing job that can tolerate interruption and wants the lowest possible EC2 cost. Which purchase option fits?

A) On-Demand

B) Reserved Instances

C) Dedicated Hosts

D) Spot Instances

Spot Instances are unused EC2 capacity available for less than the On-Demand price, ideal for cost-saving in interruptible workloads.

Q4. Which AWS service logs API calls made in an AWS account for audit purposes?

A) CloudWatch

B) CloudTrail

C) AWS Config

D) GuardDuty

AWS CloudTrail records API calls made within an AWS account for auditing and monitoring purposes, helping users track changes and usage. Any question about audit logs / api call history = Cloudtrail

Q5. A company must store data in the European Union to comply with GDPR. What is the correct action?

A) Enable S3 Object Lock

B) Choose an AWS Region located in the EU

C) Use CloudFront edge locations in Europe

D) Enable cross-region replication to the EU

B) Choose an AWS Region located in the EU. Data residency = pick the right region.

Q6. Which of the following describes an Availability Zone?

A) A geographic area containing multiple data centers, isolated from other geographic areas

B) One or more discrete data centers within a Region, with independent power, cooling, and networking

C) A cache endpoint used to deliver content to end users with low latency

D) A physical AWS server installed in a customer’s own data center

B) One or more discrete data centers within a region with independent power, cooling, and networking

Q7. Which pillar of the AWS Well-Architected Framework focuses on the ability to recover from failures and meet business demand?

A) Operational Excellence

B) Performance Efficiency

C) Reliability

D) Cost Optimization

C) Reliability

Q8. A developer needs to give an EC2 instance permission to read from an S3 bucket. What is the AWS best practice?

A) Store AWS access keys on the EC2 instance in a config file

B) Attach an IAM role to the EC2 instance with a policy allowing S3 read access

C) Share the root user credentials with the instance

D) Create an IAM user, generate access keys, and hardcode them in the application

B) Attach an IAM role

Q9. Which AWS service provides DDoS protection at no additional cost and is automatically enabled for all AWS customers?

A) AWS WAF

B) AWS Shield Standard

C) AWS Shield Advanced

D) AWS Firewall Manager

B) AWS Shield Standard = Free automatic

Q10. A company wants to enforce that no account in their AWS Organization can create resources outside of the us-west-2 region. What should they use?

A) IAM policy attached to every user

B) Service Control Policy (SCP) at the Organization level

C) NACL restricting traffic

D) Security group rule

B) Service Control Policy (SCP)at the Organization level.