Amazon AWS Certified Cloud Practitioner CLF-C02 Practice Test 101
Question 1000
A technology leader compares the management obligations of EC2, RDS and Lambda. Which AWS service or cloud concept is the MOST direct match for this need?
- AWS S3 infrastructure durability
- Customer S3 bucket access
- AWS RDS database infrastructure
- Shared responsibility varies by service
Explanation
Correct Answer
D:Shared responsibility varies by service fits the need because responsibility depends on the service model: managing an EC2 guest OS differs from managing application code on Lambda. The relevant capability or responsibility is: Customer operational responsibilities generally decrease as more service layers become AWS-managed.
Incorrect Answers
A:AWS S3 infrastructure durability is associated with a different use case: a customer asks who maintains the physical storage systems used by Amazon S3. AWS handles service infrastructure, while customers still control object permissions, classifications and retention requirements. The question instead focuses on a technology leader compares the management obligations of EC2, RDS and Lambda; Shared responsibility varies by service is the more direct match.
B:Customer S3 bucket access is associated with a different use case: a team accidentally publishes an S3 bucket containing internal reports. AWS operates the S3 storage infrastructure, but customers configure authorized access to their buckets and objects. The question instead focuses on a technology leader compares the management obligations of EC2, RDS and Lambda; Shared responsibility varies by service is the more direct match.
C:AWS RDS database infrastructure is associated with a different use case: a developer chooses Amazon RDS instead of installing a database engine on an EC2 virtual machine. RDS reduces operational work compared with a self-managed database, but does not remove customer responsibilities for data and access. The question instead focuses on a technology leader compares the management obligations of EC2, RDS and Lambda; Shared responsibility varies by service is the more direct match.
Question 1001
A stakeholder is considering Amazon DocumentDB because an application uses a MongoDB-compatible document data model and wants a managed database. What is the MOST relevant capability or benefit?
- Enable supported MongoDB-compatible document workloads
- Support managed in-memory caching
- Enable supported relational engines
- Support cloud data warehousing
Explanation
Correct Answer
A:Use Amazon DocumentDB for supported MongoDB-compatible document workloads. DocumentDB is a managed document database, distinct from relational engines and caching services. The stated need is specifically an application uses a MongoDB-compatible document data model and wants a managed database.
Incorrect Answers
B:This outcome fits Amazon ElastiCache: ElastiCache reduces repeated backend reads by keeping appropriate data in memory for fast access. The stakeholder requires the more specific capability provided by Amazon DocumentDB, not that separate benefit.
C:This outcome fits Amazon RDS relational database: RDS manages selected database infrastructure work for relational workloads, while users still control database schema and access. The stakeholder requires the more specific capability provided by Amazon DocumentDB, not that separate benefit.
D:This outcome fits Amazon Redshift: Redshift is designed for analytics and data warehousing rather than being a low-latency transactional key-value store. The stakeholder requires the more specific capability provided by Amazon DocumentDB, not that separate benefit.
Question 1002
A global website wants cached content served closer to its end users. Which AWS service or cloud concept is the MOST direct match for this need?
- AWS Region
- AWS edge location
- Data sovereignty Region choice
- AWS Global Accelerator
Explanation
Correct Answer
B:AWS edge location fits the need because aWS edge locations support services such as CloudFront and reduce delivery distance for content or requests. The relevant capability or responsibility is: Use edge locations as points near users for supported edge services.
Incorrect Answers
A:AWS Region is associated with a different use case: a company is selecting a separate geographic AWS location for a workload with residency requirements. A Region is a geographically separate area containing multiple Availability Zones; customers select deployment Regions. The question instead focuses on a global website wants cached content served closer to its end users; AWS edge location is the more direct match.
C:Data sovereignty Region choice is associated with a different use case: a government customer requires that certain datasets be stored in a specified legal jurisdiction. Region choice is a customer decision for residency compliance, subject to service availability and contractual requirements. The question instead focuses on a global website wants cached content served closer to its end users; AWS edge location is the more direct match.
D:AWS Global Accelerator is associated with a different use case: an internet-facing app has regional endpoints and needs stable global entry points for traffic routing. Global Accelerator provides static anycast IP addresses and routes traffic over the AWS global network to healthy endpoints. The question instead focuses on a global website wants cached content served closer to its end users; AWS edge location is the more direct match.
Question 1003
A project manager compares Operating expenditure with other AWS concepts while considering this need: a business pays recurring usage charges for AWS resources it uses this month. Which pairing assigns the responsibilities or benefits correctly?
- Operating expenditure: reduce repetitive administrative work through consistent automation; Automation savings: classify cloud usage-based service payments as operating spending
- Operating expenditure: include facilities, hardware, operations, and staffing in a long-term cost comparison; Total cost of ownership: classify cloud usage-based service payments as operating spending
- Operating expenditure: classify cloud usage-based service payments as operating spending; Variable costs: let eligible costs rise and fall with actual resource consumption
- Operating expenditure: let eligible costs rise and fall with actual resource consumption; Variable costs: classify cloud usage-based service payments as operating spending
Explanation
Correct Answer
C:The first pairing identifies Operating expenditure with its actual role: classify cloud usage-based service payments as operating spending. Variable cloud charges generally align with operating expense rather than a customer buying provider hardware. The comparison is valid because Variable costs instead addresses let eligible costs rise and fall with actual resource consumption.
Incorrect Answers
A:The roles are swapped. Automation savings is associated with reduce repetitive administrative work through consistent automation; Operating expenditure instead has the role: Classify cloud usage-based service payments as operating spending. Variable cloud charges generally align with operating expense rather than a customer buying provider hardware.
B:The roles are swapped. Total cost of ownership is associated with include facilities, hardware, operations, and staffing in a long-term cost comparison; Operating expenditure instead has the role: Classify cloud usage-based service payments as operating spending. Variable cloud charges generally align with operating expense rather than a customer buying provider hardware.
D:The roles are swapped. Variable costs is associated with let eligible costs rise and fall with actual resource consumption; Operating expenditure instead has the role: Classify cloud usage-based service payments as operating spending. Variable cloud charges generally align with operating expense rather than a customer buying provider hardware.
Question 1004
Which AWS service or cloud principle is the BEST fit for this outcome or responsibility: optimize eligible data with changing access patterns?
- AWS Backup
- S3 Standard
- Amazon EBS
- S3 Intelligent-Tiering
Explanation
Correct Answer
D:S3 Intelligent-Tiering directly addresses this outcome. Intelligent-Tiering moves eligible objects among access tiers based on usage, with monitoring and other class terms. A common relevant example is: an organization cannot accurately predict which stored objects will be accessed often next month.
Incorrect Answers
A:AWS Backup instead focuses on a different requirement, such as a company needs centralized policies and visibility across supported AWS resource backups. AWS Backup centralizes backup administration across supported resources; it is separate from normal object lifecycle transitions. It is not the primary match for the requirement described here: optimize eligible data with changing access patterns.
B:S3 Standard storage instead focuses on a different requirement, such as an application frequently reads newly uploaded customer content with unpredictable access. S3 Standard is a general-purpose storage class suitable for frequently accessed objects requiring high availability. It is not the primary match for the requirement described here: optimize eligible data with changing access patterns.
C:Amazon EBS block volumes instead focuses on a different requirement, such as a database server on EC2 needs persistent block storage beyond the life of one specific host. EBS provides network-attached block volumes with persistence and snapshot capabilities subject to volume type and configuration. It is not the primary match for the requirement described here: optimize eligible data with changing access patterns.
Question 1005
A stakeholder is considering AWS Step Functions because a business process needs a coordinated sequence of several AWS service tasks with branching states. What is the MOST relevant capability or benefit?
- Support managed workflow orchestration
- Decouple components with durable message queues
- Enable supported Internet of Things device connectivity
- Support event bus routing and integration
Explanation
Correct Answer
A:Use AWS Step Functions for managed workflow orchestration. Step Functions models stateful application workflows and service coordination rather than storing the business records. The stated need is specifically a business process needs a coordinated sequence of several AWS service tasks with branching states.
Incorrect Answers
B:This outcome fits Amazon SQS: SQS buffers work items for asynchronous consumption, unlike a publish-subscribe notification fan-out service. The stakeholder requires the more specific capability provided by AWS Step Functions, not that separate benefit.
C:This outcome fits AWS IoT Core: IoT Core helps connect and manage communications with devices, not an end-user email service. The stakeholder requires the more specific capability provided by AWS Step Functions, not that separate benefit.
D:This outcome fits Amazon EventBridge: EventBridge matches events against rules and directs them to supported targets. The stakeholder requires the more specific capability provided by AWS Step Functions, not that separate benefit.
Question 1006
A stakeholder is considering Identity federation because a company wants staff to authenticate to AWS using its existing corporate identity provider. What is the MOST relevant capability or benefit?
- Manage shared user permissions
- Federate existing enterprise identities instead of issuing separate permanent credentials
- Protect and rotate long-term programmatic API credentials
- Meet this requirement: an application needs controlled storage and rotation of a database password
Explanation
Correct Answer
B:Federate existing enterprise identities instead of issuing separate permanent credentials. Federation integrates identity-provider authentication with AWS access, supporting centralized workforce identity management. The stated need is specifically a company wants staff to authenticate to AWS using its existing corporate identity provider.
Incorrect Answers
A:This outcome fits IAM groups: IAM groups collect IAM users for permissions management; they are not assumed identities like IAM roles. The stakeholder requires the more specific capability provided by Identity federation, not that separate benefit.
C:This outcome fits Access keys: AWS access keys enable programmatic authentication and must not be committed to public repositories. The stakeholder requires the more specific capability provided by Identity federation, not that separate benefit.
D:This outcome fits AWS Secrets Manager: Secrets Manager manages sensitive credentials and supports rotation workflows; IAM policies determine who may retrieve a secret. The stakeholder requires the more specific capability provided by Identity federation, not that separate benefit.
Question 1007
A stakeholder is considering Cost allocation tags because a company wants to attribute AWS spending to department owners using approved resource labels. What is the MOST relevant capability or benefit?
- Support account billing views
- Track spending or usage against defined budget thresholds
- Attribute cloud spending to business units through approved resource labels
- Support planned service cost estimates
Explanation
Correct Answer
C:Use enabled cost allocation tags for supported billing attribution. Cost allocation tags help group eligible charges by tagged resources after activation and appropriate billing data collection. The stated need is specifically a company wants to attribute AWS spending to department owners using approved resource labels.
Incorrect Answers
A:This outcome fits AWS Billing console: The billing console presents charges and payment information; budget alerts and granular reports are separate tools. The stakeholder requires the more specific capability provided by Cost allocation tags, not that separate benefit.
B:This outcome fits AWS Budgets: Budgets supports cost and usage alerts relative to planned thresholds; it is distinct from an invoice payment processor. The stakeholder requires the more specific capability provided by Cost allocation tags, not that separate benefit.
D:This outcome fits AWS Pricing Calculator: Pricing Calculator models estimated charges from selected assumptions rather than reading an existing account's actual spending. The stakeholder requires the more specific capability provided by Cost allocation tags, not that separate benefit.
Question 1008
A project manager compares IAM roles with other AWS concepts while considering this need: an EC2 application needs AWS API permissions without storing a permanent access key in the server. Which pairing assigns the responsibilities or benefits correctly?
- IAM roles: meet this requirement: a company needs a document specifying allowed or denied AWS actions on selected resources; IAM policies: provide temporary credentials to the workload
- IAM roles: require MFA for eligible AWS sign-in identities; Multi-factor authentication: provide temporary credentials to the workload
- IAM roles: federate existing enterprise identities instead of issuing separate permanent credentials; Identity federation: provide temporary credentials to the workload
- IAM roles: provide temporary credentials to the workload; Multi-factor authentication: require MFA for eligible AWS sign-in identities
Explanation
Correct Answer
D:The first pairing identifies IAM roles with its actual role: use an IAM role to provide temporary credentials to the workload. IAM roles can be assumed to obtain temporary security credentials and avoid embedding long-term keys in applications. The comparison is valid because Multi-factor authentication instead addresses require MFA for eligible AWS sign-in identities.
Incorrect Answers
A:The roles are swapped. IAM policies is associated with use IAM policy statements that define access permissions; IAM roles instead has the role: Use an IAM role to provide temporary credentials to the workload. IAM roles can be assumed to obtain temporary security credentials and avoid embedding long-term keys in applications.
B:The roles are swapped. Multi-factor authentication is associated with require MFA for eligible AWS sign-in identities; IAM roles instead has the role: Use an IAM role to provide temporary credentials to the workload. IAM roles can be assumed to obtain temporary security credentials and avoid embedding long-term keys in applications.
C:The roles are swapped. Identity federation is associated with federate existing enterprise identities instead of issuing separate permanent credentials; IAM roles instead has the role: Use an IAM role to provide temporary credentials to the workload. IAM roles can be assumed to obtain temporary security credentials and avoid embedding long-term keys in applications.
Question 1009
A mobile application needs sign-up and authentication for its end users. Which AWS service or cloud concept is the MOST direct match for this need?
- Amazon Cognito
- IAM users
- Cross-account role access
- AWS IAM Identity Center
Explanation
Correct Answer
A:Amazon Cognito fits the need because cognito focuses on end-user identity for web and mobile applications, not AWS workforce account administration. The relevant capability or responsibility is: Use Amazon Cognito for application-user authentication and identity features.
Incorrect Answers
B:IAM users is associated with a different use case: an organization must represent an individual with long-term credentials in one AWS account. IAM users are identities within an account; organizations generally favor federation and short-lived credentials where suitable. The question instead focuses on a mobile application needs sign-up and authentication for its end users; Amazon Cognito is the more direct match.
C:Cross-account role access is associated with a different use case: an auditor from a separate AWS account needs time-limited access to approved audit resources. Cross-account role trust enables authorized temporary access without copying long-term keys to the external account. The question instead focuses on a mobile application needs sign-up and authentication for its end users; Amazon Cognito is the more direct match.
D:AWS IAM Identity Center is associated with a different use case: employees need centralized workforce access to multiple AWS accounts using corporate identities. IAM Identity Center connects workforce identities and assigns access across AWS accounts and compatible applications. The question instead focuses on a mobile application needs sign-up and authentication for its end users; Amazon Cognito is the more direct match.
Question 1010
Within the Cloud Technology and Services domain, which business example MOST clearly illustrates Amazon Quick, rather than a different AWS concept?
- A data team needs managed data integration and metadata catalog features for analytics workloads
- A business wants dashboards and business intelligence over curated organizational data
- A company wants a conversational bot that interprets user requests in a customer service channel
- An analyst needs to query data already stored in S3 using SQL without provisioning a database server
Explanation
Correct Answer
B:The decisive requirement is: Use Amazon Quick for supported business intelligence and analytics experiences. This is the role of Amazon Quick. Amazon Quick is the current AWS branding for business intelligence capabilities previously associated with QuickSight.
Incorrect Answers
A:This describes a scenario for AWS Glue: use AWS Glue for data integration, ETL and catalog features. Glue supports preparing and cataloging data; it is not the primary object storage service. It is not the most direct example of Amazon Quick.
C:This describes a scenario for Amazon Lex: use Amazon Lex for building conversational interfaces. Lex provides conversational AI for chatbots and voice-enabled applications. It is not the most direct example of Amazon Quick.
D:This describes a scenario for Amazon Athena: use Amazon Athena for interactive SQL analysis over data in S3. Athena is a serverless interactive query service for supported data sources such as S3. It is not the most direct example of Amazon Quick.