AWS CLF-C02 Network Services Exam
Questions 2026–2027 | VPC, Route 53,
CloudFront & Hybrid Connectivity Prep
1. Which AWS service provides a logically isolated virtual network that you
can define in your AWS account?
A. Amazon Route 53
B. Amazon VPC
C. AWS Direct Connect
D. Amazon CloudFront
Answer: Amazon VPC
Rationale: Amazon Virtual Private Cloud (Amazon VPC) lets you create an
isolated virtual network with configurable IP ranges, subnets, route tables, and
network security controls.
2. Which component of an Amazon VPC determines how traffic is directed
between subnets and other network destinations?
,A. Security group
B. Network ACL
C. Route table
D. Internet gateway
Answer: Route table
Rationale: A route table contains routes that determine where network traffic is
sent based on destination IP addresses.
3. A company wants resources in a public subnet to communicate directly
with the internet. Which VPC component is required?
A. NAT gateway
B. Internet gateway
C. VPC endpoint
D. Transit gateway
Answer: Internet gateway
Rationale: An internet gateway provides a path between a VPC and the public
internet when appropriate routing and public IP addressing are configured.
4. What is the primary purpose of a NAT gateway?
A. Allow inbound internet traffic to private instances
B. Provide private resources with outbound internet connectivity
C. Encrypt all VPC traffic
D. Replace security groups
Answer: Provide private resources with outbound internet connectivity
,Rationale: A NAT gateway allows resources in private subnets to initiate
connections to external destinations without allowing unsolicited inbound
internet connections to those resources.
5. Which VPC subnet is considered public when its route table contains a
route to an internet gateway?
A. A subnet with no route table
B. A subnet with an internet gateway route
C. A subnet containing only databases
D. A subnet using a network ACL
Answer: A subnet with an internet gateway route
Rationale: A subnet is considered public when its associated route table provides
a route to an internet gateway. Resources also need suitable public addressing
to communicate directly with the internet.
6. Which AWS service provides DNS registration and DNS resolution for
domain names?
A. Amazon Route 53
B. Amazon VPC
C. AWS WAF
D. Amazon CloudFront
Answer: Amazon Route 53
Rationale: Amazon Route 53 is a highly available and scalable DNS service that
supports domain registration, DNS routing, and health checking.
, 7. Which Route 53 routing policy directs users to resources based on
geographic location?
A. Simple routing
B. Weighted routing
C. Geolocation routing
D. Failover routing
Answer: Geolocation routing
Rationale: Geolocation routing routes traffic based on the geographic location
from which DNS queries originate.
8. Which Route 53 routing policy is designed to distribute traffic among
resources according to assigned percentages?
A. Weighted routing
B. Latency routing
C. Failover routing
D. Geolocation routing
Answer: Weighted routing
Rationale: Weighted routing assigns weights to records, allowing traffic to be
distributed according to configured proportions.
9. A global application should direct users to the AWS Region expected to
provide the lowest network latency. Which Route 53 routing policy should
be considered?
A. Simple routing
B. Latency-based routing
C. Multivalue answer routing
D. Geolocation routing
Questions 2026–2027 | VPC, Route 53,
CloudFront & Hybrid Connectivity Prep
1. Which AWS service provides a logically isolated virtual network that you
can define in your AWS account?
A. Amazon Route 53
B. Amazon VPC
C. AWS Direct Connect
D. Amazon CloudFront
Answer: Amazon VPC
Rationale: Amazon Virtual Private Cloud (Amazon VPC) lets you create an
isolated virtual network with configurable IP ranges, subnets, route tables, and
network security controls.
2. Which component of an Amazon VPC determines how traffic is directed
between subnets and other network destinations?
,A. Security group
B. Network ACL
C. Route table
D. Internet gateway
Answer: Route table
Rationale: A route table contains routes that determine where network traffic is
sent based on destination IP addresses.
3. A company wants resources in a public subnet to communicate directly
with the internet. Which VPC component is required?
A. NAT gateway
B. Internet gateway
C. VPC endpoint
D. Transit gateway
Answer: Internet gateway
Rationale: An internet gateway provides a path between a VPC and the public
internet when appropriate routing and public IP addressing are configured.
4. What is the primary purpose of a NAT gateway?
A. Allow inbound internet traffic to private instances
B. Provide private resources with outbound internet connectivity
C. Encrypt all VPC traffic
D. Replace security groups
Answer: Provide private resources with outbound internet connectivity
,Rationale: A NAT gateway allows resources in private subnets to initiate
connections to external destinations without allowing unsolicited inbound
internet connections to those resources.
5. Which VPC subnet is considered public when its route table contains a
route to an internet gateway?
A. A subnet with no route table
B. A subnet with an internet gateway route
C. A subnet containing only databases
D. A subnet using a network ACL
Answer: A subnet with an internet gateway route
Rationale: A subnet is considered public when its associated route table provides
a route to an internet gateway. Resources also need suitable public addressing
to communicate directly with the internet.
6. Which AWS service provides DNS registration and DNS resolution for
domain names?
A. Amazon Route 53
B. Amazon VPC
C. AWS WAF
D. Amazon CloudFront
Answer: Amazon Route 53
Rationale: Amazon Route 53 is a highly available and scalable DNS service that
supports domain registration, DNS routing, and health checking.
, 7. Which Route 53 routing policy directs users to resources based on
geographic location?
A. Simple routing
B. Weighted routing
C. Geolocation routing
D. Failover routing
Answer: Geolocation routing
Rationale: Geolocation routing routes traffic based on the geographic location
from which DNS queries originate.
8. Which Route 53 routing policy is designed to distribute traffic among
resources according to assigned percentages?
A. Weighted routing
B. Latency routing
C. Failover routing
D. Geolocation routing
Answer: Weighted routing
Rationale: Weighted routing assigns weights to records, allowing traffic to be
distributed according to configured proportions.
9. A global application should direct users to the AWS Region expected to
provide the lowest network latency. Which Route 53 routing policy should
be considered?
A. Simple routing
B. Latency-based routing
C. Multivalue answer routing
D. Geolocation routing
