Amazon AWS Certified Cloud Practitioner CLF-C02 Practice Test 10
Question 90
Within the Cloud Technology and Services domain, which business example MOST clearly illustrates Amazon CloudFront, rather than a different AWS concept?
- A company is selecting a separate geographic AWS location for a workload with residency requirements
- Users worldwide download the same publicly available product images from an origin
- An internet-facing app has regional endpoints and needs stable global entry points for traffic routing
- A service must use separate isolated locations within one selected AWS Region
Explanation
Correct Answer
B:The decisive requirement is: Deliver cacheable content through Amazon CloudFront edge locations. This is the role of Amazon CloudFront. CloudFront is AWS's content delivery network and can reduce latency by caching copies near viewers.
Incorrect Answers
A:This describes a scenario for AWS Region: choose an AWS Region to select a geographic cloud infrastructure location. A Region is a geographically separate area containing multiple Availability Zones; customers select deployment Regions. It is not the most direct example of Amazon CloudFront.
C:This describes a scenario for AWS Global Accelerator: use AWS Global Accelerator for global network traffic entry and endpoint routing. Global Accelerator provides static anycast IP addresses and routes traffic over the AWS global network to healthy endpoints. It is not the most direct example of Amazon CloudFront.
D:This describes a scenario for Availability Zone: distribute components across Availability Zones for fault isolation. Availability Zones are distinct locations within a Region designed to reduce shared failure risks. It is not the most direct example of Amazon CloudFront.
Question 91
A project manager compares Refactoring migration with other AWS concepts while considering this need: a business is willing to redesign a tightly coupled application into cloud-native components. Which pairing assigns the responsibilities or benefits correctly?
- Refactoring migration: move compatible virtual machines or virtualized infrastructure with minimal change; Relocating a workload: make significant application changes to use cloud-native capabilities
- Refactoring migration: replace an existing application with a different product or SaaS solution; Repurchasing migration: make significant application changes to use cloud-native capabilities
- Refactoring migration: make significant application changes to use cloud-native capabilities; Repurchasing migration: replace an existing application with a different product or SaaS solution
- Refactoring migration: track application migration progress centrally; AWS Migration Hub: make significant application changes to use cloud-native capabilities
Explanation
Correct Answer
C:The first pairing identifies Refactoring migration with its actual role: make significant application changes to use cloud-native capabilities. Refactoring transforms the application architecture, rather than simply moving the existing runtime to the cloud. The comparison is valid because Repurchasing migration instead addresses replace an existing application with a different product or SaaS solution.
Incorrect Answers
A:The roles are swapped. Relocating a workload is associated with move compatible virtual machines or virtualized infrastructure with minimal change; Refactoring migration instead has the role: Make significant application changes to use cloud-native capabilities. Refactoring transforms the application architecture, rather than simply moving the existing runtime to the cloud.
B:The roles are swapped. Repurchasing migration is associated with replace an existing application with a different product or SaaS solution; Refactoring migration instead has the role: Make significant application changes to use cloud-native capabilities. Refactoring transforms the application architecture, rather than simply moving the existing runtime to the cloud.
D:The roles are swapped. AWS Migration Hub is associated with track application migration progress centrally; Refactoring migration instead has the role: Make significant application changes to use cloud-native capabilities. Refactoring transforms the application architecture, rather than simply moving the existing runtime to the cloud.
Question 92
A stakeholder is considering IAM roles because an EC2 application needs AWS API permissions without storing a permanent access key in the server. What is the MOST relevant capability or benefit?
- Meet this requirement: a company needs a document specifying allowed or denied AWS actions on selected resources
- Support application-user authentication and identity features
- Require MFA for eligible AWS sign-in identities
- Provide temporary credentials to the workload
Explanation
Correct Answer
D:Use an IAM role to provide temporary credentials to the workload. IAM roles can be assumed to obtain temporary security credentials and avoid embedding long-term keys in applications. The stated need is specifically an EC2 application needs AWS API permissions without storing a permanent access key in the server.
Incorrect Answers
A:This outcome fits IAM policies: An IAM policy expresses permissions; it is not itself a human identity or a network firewall. The stakeholder requires the more specific capability provided by IAM roles, not that separate benefit.
B:This outcome fits Amazon Cognito identity: Cognito focuses on end-user identity for web and mobile applications, not AWS workforce account administration. The stakeholder requires the more specific capability provided by IAM roles, not that separate benefit.
C:This outcome fits Multi-factor authentication: MFA requires another authentication factor beyond a password and reduces risks from compromised passwords. The stakeholder requires the more specific capability provided by IAM roles, not that separate benefit.
Question 93
Which AWS service or cloud principle is the BEST fit for this outcome or responsibility: explore and forecast AWS cost and usage?
- AWS Cost Explorer
- AWS Billing console
- AWS Pricing Calculator
- AWS Free Tier
Explanation
Correct Answer
A:AWS Cost Explorer directly addresses this outcome. Cost Explorer offers interactive cost analysis and forecasting over supported billing data. A common relevant example is: a finance analyst wants to see past AWS spending trends by service and forecast likely future cost.
Incorrect Answers
B:AWS Billing console instead focuses on a different requirement, such as an account administrator wants to inspect current billing information and payment-related account details. The billing console presents charges and payment information; budget alerts and granular reports are separate tools. It is not the primary match for the requirement described here: explore and forecast AWS cost and usage.
C:AWS Pricing Calculator instead focuses on a different requirement, such as a solutions advisor wants to estimate charges for a proposed AWS environment before it is created. Pricing Calculator models estimated charges from selected assumptions rather than reading an existing account's actual spending. It is not the primary match for the requirement described here: explore and forecast AWS cost and usage.
D:AWS Free Tier instead focuses on a different requirement, such as a new learner wants to understand eligible introductory usage offers and their limits. AWS Free Tier offers depend on account eligibility, service and current pricing terms; excess usage can still produce charges. It is not the primary match for the requirement described here: explore and forecast AWS cost and usage.
Question 94
A project manager compares AWS physical data center security with other AWS concepts while considering this need: an AWS customer asks who guards the buildings where AWS runs underlying server hardware. Which pairing assigns the responsibilities or benefits correctly?
- AWS physical data center security: the customer classifies its own data and defines appropriate access requirements; Customer data classification: aWS secures the physical facilities that host its cloud infrastructure
- AWS physical data center security: aWS secures the physical facilities that host its cloud infrastructure; AWS Lambda runtime infrastructure: aWS manages the underlying compute infrastructure for Lambda execution
- AWS physical data center security: aWS manages the underlying compute infrastructure for Lambda execution; AWS Lambda runtime infrastructure: aWS secures the physical facilities that host its cloud infrastructure
- AWS physical data center security: the customer configures database users and permissions for its application data; Customer RDS data permissions: aWS secures the physical facilities that host its cloud infrastructure
Explanation
Correct Answer
B:The first pairing identifies AWS physical data center security with its actual role: aWS secures the physical facilities that host its cloud infrastructure. Physical facility access controls and provider-owned hardware protection fall under AWS security of the cloud. The comparison is valid because AWS Lambda runtime infrastructure instead addresses aWS manages the underlying compute infrastructure for Lambda execution.
Incorrect Answers
A:The roles are swapped. Customer data classification is associated with the customer classifies its own data and defines appropriate access requirements; AWS physical data center security instead has the role: AWS secures the physical facilities that host its cloud infrastructure. Physical facility access controls and provider-owned hardware protection fall under AWS security of the cloud.
C:The roles are swapped. AWS Lambda runtime infrastructure is associated with aWS manages the underlying compute infrastructure for Lambda execution; AWS physical data center security instead has the role: AWS secures the physical facilities that host its cloud infrastructure. Physical facility access controls and provider-owned hardware protection fall under AWS security of the cloud.
D:The roles are swapped. Customer RDS data permissions is associated with the customer configures database users and permissions for its application data; AWS physical data center security instead has the role: AWS secures the physical facilities that host its cloud infrastructure. Physical facility access controls and provider-owned hardware protection fall under AWS security of the cloud.
Question 95
A company expects its cloud usage and business requirements to evolve frequently. Which AWS service or cloud concept is the MOST direct match for this need?
- Sustainability pillar
- Operational Excellence pillar
- Design for expected change
- Test recovery assumptions
Explanation
Correct Answer
C:Design for expected change fits the need because cloud design principles favor adaptability and continual evaluation over treating an early configuration as permanently optimal. The relevant capability or responsibility is: Revisit architecture decisions as requirements and capabilities change.
Incorrect Answers
A:Sustainability pillar is associated with a different use case: a company wants to reduce the environmental impact of its cloud workloads. The Sustainability pillar encourages efficient resource use and reduced environmental impact of running workloads. The question instead focuses on a company expects its cloud usage and business requirements to evolve frequently; Design for expected change is the more direct match.
B:Operational Excellence pillar is associated with a different use case: a team wants to improve routine operations through measurement, incident learning, and repeatable processes. The Operational Excellence pillar focuses on running and monitoring workloads effectively and improving operational processes. The question instead focuses on a company expects its cloud usage and business requirements to evolve frequently; Design for expected change is the more direct match.
D:Test recovery assumptions is associated with a different use case: a service owner has a written recovery plan but does not know whether it would work in practice. Regular recovery testing reveals gaps in backup, dependency, and restoration plans before a real disruption. The question instead focuses on a company expects its cloud usage and business requirements to evolve frequently; Design for expected change is the more direct match.
Question 96
A stakeholder is considering AWS Cost and Usage Report because an organization needs granular line-item records of AWS charges for internal analytics. What is the MOST relevant capability or benefit?
- Track spending or usage against defined budget thresholds
- Attribute cloud spending to business units through approved resource labels
- Explore and forecast AWS cost and usage
- Support detailed cost and consumption data
Explanation
Correct Answer
D:Use AWS Cost and Usage Reports for detailed cost and consumption data. Cost and Usage Reports provide detailed charge records suitable for custom analysis rather than just high-level charts. The stated need is specifically an organization needs granular line-item records of AWS charges for internal analytics.
Incorrect Answers
A:This outcome fits AWS Budgets: Budgets supports cost and usage alerts relative to planned thresholds; it is distinct from an invoice payment processor. The stakeholder requires the more specific capability provided by AWS Cost and Usage Report, not that separate benefit.
B:This outcome fits Cost allocation tags: Cost allocation tags help group eligible charges by tagged resources after activation and appropriate billing data collection. The stakeholder requires the more specific capability provided by AWS Cost and Usage Report, not that separate benefit.
C:This outcome fits AWS Cost Explorer: Cost Explorer offers interactive cost analysis and forecasting over supported billing data. The stakeholder requires the more specific capability provided by AWS Cost and Usage Report, not that separate benefit.
Question 97
A retailer needs a plan for resuming critical operations after a major disruption. Which AWS service or cloud concept is the MOST direct match for this need?
- Business continuity
- Resource pooling
- On-demand provisioning
- Elasticity
Explanation
Correct Answer
A:Business continuity fits the need because business continuity combines preparedness and recovery measures rather than assuming failures will never occur. The relevant capability or responsibility is: Plan for sustained essential operations and recovery after disruptive events.
Incorrect Answers
B:Resource pooling is associated with a different use case: several departments need separate virtual workloads without each purchasing dedicated physical machines. Cloud resource pooling supports multiple customers and workloads through provider-managed shared infrastructure with isolation controls. The question instead focuses on a retailer needs a plan for resuming critical operations after a major disruption; Business continuity is the more direct match.
C:On-demand provisioning is associated with a different use case: a testing team needs temporary computing capacity immediately for a newly approved project. AWS self-service resource provisioning reduces procurement lead time for many workloads. The question instead focuses on a retailer needs a plan for resuming critical operations after a major disruption; Business continuity is the more direct match.
D:Elasticity is associated with a different use case: an online store has unpredictable weekend traffic spikes followed by quiet weekdays. Elasticity aligns live capacity with changing workload demand so idle peak-sized resources do not remain continuously allocated. The question instead focuses on a retailer needs a plan for resuming critical operations after a major disruption; Business continuity is the more direct match.
Question 98
A project manager compares Official AWS security documentation with other AWS concepts while considering this need: a governance team asks where to review public AWS security documentation and service compliance information. Which pairing assigns the responsibilities or benefits correctly?
- Official AWS security documentation: filter supported web requests; AWS WAF application protection: find AWS-authored security and compliance guidance and assurance resources
- Official AWS security documentation: find AWS-authored security and compliance guidance and assurance resources; AWS WAF application protection: filter supported web requests
- Official AWS security documentation: meet this requirement: an organization needs general recommendations to harden AWS workloads; AWS security best practices: find AWS-authored security and compliance guidance and assurance resources
- Official AWS security documentation: enable supported cross-account resource sharing; AWS Resource Access Manager: find AWS-authored security and compliance guidance and assurance resources
Explanation
Correct Answer
B:The first pairing identifies Official AWS security documentation with its actual role: consult official AWS security documentation and compliance resources. AWS official security and compliance pages provide reference material; the customer's own compliance assessment remains necessary. The comparison is valid because AWS WAF application protection instead addresses use AWS WAF to filter supported web requests.
Incorrect Answers
A:The roles are swapped. AWS WAF application protection is associated with use AWS WAF to filter supported web requests; Official AWS security documentation instead has the role: Consult official AWS security documentation and compliance resources. AWS official security and compliance pages provide reference material; the customer's own compliance assessment remains necessary.
C:The roles are swapped. AWS security best practices is associated with use AWS security best-practice resources and service-specific recommendations; Official AWS security documentation instead has the role: Consult official AWS security documentation and compliance resources. AWS official security and compliance pages provide reference material; the customer's own compliance assessment remains necessary.
D:The roles are swapped. AWS Resource Access Manager is associated with use AWS Resource Access Manager for supported cross-account resource sharing; Official AWS security documentation instead has the role: Consult official AWS security documentation and compliance resources. AWS official security and compliance pages provide reference material; the customer's own compliance assessment remains necessary.
Question 99
A project manager compares On-demand provisioning with other AWS concepts while considering this need: a testing team needs temporary computing capacity immediately for a newly approved project. Which pairing assigns the responsibilities or benefits correctly?
- On-demand provisioning: pay for consumed services instead of buying hardware for the annual peak; Pay-as-you-go consumption: provision capacity when requested rather than waiting for hardware ordering
- On-demand provisioning: plan for sustained essential operations and recovery after disruptive events; Business continuity: provision capacity when requested rather than waiting for hardware ordering
- On-demand provisioning: provision capacity when requested rather than waiting for hardware ordering; Pay-as-you-go consumption: pay for consumed services instead of buying hardware for the annual peak
- On-demand provisioning: increase a system's capacity to handle a larger ongoing workload; Scalability: provision capacity when requested rather than waiting for hardware ordering
Explanation
Correct Answer
C:The first pairing identifies On-demand provisioning with its actual role: provision capacity when requested rather than waiting for hardware ordering. AWS self-service resource provisioning reduces procurement lead time for many workloads. The comparison is valid because Pay-as-you-go consumption instead addresses pay for consumed services instead of buying hardware for the annual peak.
Incorrect Answers
A:The roles are swapped. Pay-as-you-go consumption is associated with pay for consumed services instead of buying hardware for the annual peak; On-demand provisioning instead has the role: Provision capacity when requested rather than waiting for hardware ordering. AWS self-service resource provisioning reduces procurement lead time for many workloads.
B:The roles are swapped. Business continuity is associated with plan for sustained essential operations and recovery after disruptive events; On-demand provisioning instead has the role: Provision capacity when requested rather than waiting for hardware ordering. AWS self-service resource provisioning reduces procurement lead time for many workloads.
D:The roles are swapped. Scalability is associated with increase a system's capacity to handle a larger ongoing workload; On-demand provisioning instead has the role: Provision capacity when requested rather than waiting for hardware ordering. AWS self-service resource provisioning reduces procurement lead time for many workloads.
Question 100
Which AWS service or cloud principle is the BEST fit for this outcome or responsibility: support eligible ephemeral EC2 local storage?
- Amazon EBS
- AWS Backup
- Amazon EFS
- EC2 instance store
Explanation
Correct Answer
D:EC2 instance store directly addresses this outcome. Instance store provides temporary local storage whose data does not have the durability properties of an EBS volume. A common relevant example is: a rendering workload needs high-performance temporary local scratch data that may be lost with its instance.
Incorrect Answers
A:Amazon EBS block volumes instead focuses on a different requirement, such as a database server on EC2 needs persistent block storage beyond the life of one specific host. EBS provides network-attached block volumes with persistence and snapshot capabilities subject to volume type and configuration. It is not the primary match for the requirement described here: support eligible ephemeral EC2 local storage.
B:AWS Backup instead focuses on a different requirement, such as a company needs centralized policies and visibility across supported AWS resource backups. AWS Backup centralizes backup administration across supported resources; it is separate from normal object lifecycle transitions. It is not the primary match for the requirement described here: support eligible ephemeral EC2 local storage.
C:Amazon EFS shared files instead focuses on a different requirement, such as multiple Linux EC2 instances require a shared elastic file system supporting common file semantics. EFS is a managed elastic network file system for supported Linux workloads, unlike S3 object API storage. It is not the primary match for the requirement described here: support eligible ephemeral EC2 local storage.