Amazon AWS Certified Cloud Practitioner CLF-C02 Practice Test 109
Question 1080
A project manager compares AWS CloudTrail with other AWS concepts while considering this need: a security analyst needs to see which principal made an AWS control-plane API call. Which pairing assigns the responsibilities or benefits correctly?
- AWS CloudTrail: aggregate and prioritize findings from different security detection tools; AWS Security Hub: record account API activity and identify the calling principal
- AWS CloudTrail: evaluate customer controls and obligations alongside AWS's assurance documentation; AWS compliance shared model: record account API activity and identify the calling principal
- AWS CloudTrail: use supported encrypted network connections such as TLS; Encryption in transit: record account API activity and identify the calling principal
- AWS CloudTrail: record account API activity and identify the calling principal; Encryption in transit: use supported encrypted network connections such as TLS
Explanation
Correct Answer
D:The first pairing identifies AWS CloudTrail with its actual role: record account API activity with AWS CloudTrail. CloudTrail helps audit actions performed through the console, SDK and API; it differs from performance metrics. The comparison is valid because Encryption in transit instead addresses use supported encrypted network connections such as TLS.
Incorrect Answers
A:The roles are swapped. AWS Security Hub is associated with aggregate and prioritize security findings with AWS Security Hub; AWS CloudTrail instead has the role: Record account API activity with AWS CloudTrail. CloudTrail helps audit actions performed through the console, SDK and API; it differs from performance metrics.
B:The roles are swapped. AWS compliance shared model is associated with evaluate customer controls and obligations alongside AWS's assurance documentation; AWS CloudTrail instead has the role: Record account API activity with AWS CloudTrail. CloudTrail helps audit actions performed through the console, SDK and API; it differs from performance metrics.
C:The roles are swapped. Encryption in transit is associated with use supported encrypted network connections such as TLS; AWS CloudTrail instead has the role: Record account API activity with AWS CloudTrail. CloudTrail helps audit actions performed through the console, SDK and API; it differs from performance metrics.
Question 1081
An organization cannot accurately predict which stored objects will be accessed often next month. Which AWS service or cloud concept is the MOST direct match for this need?
- S3 Intelligent-Tiering
- Amazon S3
- S3 Standard
- AWS Backup
Explanation
Correct Answer
A:S3 Intelligent-Tiering fits the need because intelligent-Tiering moves eligible objects among access tiers based on usage, with monitoring and other class terms. The relevant capability or responsibility is: Use S3 Intelligent-Tiering to optimize eligible data with changing access patterns.
Incorrect Answers
B:Amazon S3 object storage is associated with a different use case: a business stores images and documents as objects accessed using service APIs. S3 stores data as objects in buckets; it is not an attachable EC2 block device or shared POSIX file system. The question instead focuses on an organization cannot accurately predict which stored objects will be accessed often next month; S3 Intelligent-Tiering is the more direct match.
C:S3 Standard storage is associated with a different use case: an application frequently reads newly uploaded customer content with unpredictable access. S3 Standard is a general-purpose storage class suitable for frequently accessed objects requiring high availability. The question instead focuses on an organization cannot accurately predict which stored objects will be accessed often next month; S3 Intelligent-Tiering is the more direct match.
D:AWS Backup is associated with a different use case: a company needs centralized policies and visibility across supported AWS resource backups. AWS Backup centralizes backup administration across supported resources; it is separate from normal object lifecycle transitions. The question instead focuses on an organization cannot accurately predict which stored objects will be accessed often next month; S3 Intelligent-Tiering is the more direct match.
Question 1082
Which AWS service or cloud principle is the BEST fit for this outcome or responsibility: choose resource sizes appropriate for actual workload utilization?
- Capital expenditure
- Rightsizing
- Economies of scale
- Operating expenditure
Explanation
Correct Answer
B:Rightsizing directly addresses this outcome. Rightsizing replaces persistently oversized resources with suitable capacities to improve cost efficiency. A common relevant example is: a monthly review finds development servers consume little of their allocated CPU and memory.
Incorrect Answers
A:Capital expenditure instead focuses on a different requirement, such as a company buys servers and pays the purchase cost before those servers are used. Owning servers typically requires an upfront capital investment, unlike metered cloud resource consumption. It is not the primary match for the requirement described here: choose resource sizes appropriate for actual workload utilization.
C:Economies of scale instead focuses on a different requirement, such as a small organization benefits from AWS data-center purchasing power even though it cannot operate a massive facility itself. Large cloud providers spread infrastructure costs across many customers and workloads. It is not the primary match for the requirement described here: choose resource sizes appropriate for actual workload utilization.
D:Operating expenditure instead focuses on a different requirement, such as a business pays recurring usage charges for AWS resources it uses this month. Variable cloud charges generally align with operating expense rather than a customer buying provider hardware. It is not the primary match for the requirement described here: choose resource sizes appropriate for actual workload utilization.
Question 1083
Which AWS service or cloud principle is the BEST fit for this outcome or responsibility: support event-driven serverless function execution?
- EC2 Auto Scaling
- Compute-optimized EC2
- AWS Lambda
- Amazon EC2
Explanation
Correct Answer
C:AWS Lambda directly addresses this outcome. Lambda executes event-triggered code without the customer managing underlying servers, subject to service limits. A common relevant example is: an online form should run short application code only when events occur without managing servers.
Incorrect Answers
A:EC2 Auto Scaling instead focuses on a different requirement, such as a retail site needs more EC2 instances during traffic spikes and fewer when usage falls. EC2 Auto Scaling can add or remove instances based on policies to help meet capacity and availability needs. It is not the primary match for the requirement described here: support event-driven serverless function execution.
B:Compute-optimized EC2 instead focuses on a different requirement, such as a simulation workload spends most of its time performing CPU-intensive numerical calculations. Compute-optimized instances provide a high ratio of compute performance for suitable CPU-bound applications. It is not the primary match for the requirement described here: support event-driven serverless function execution.
D:Amazon EC2 virtual servers instead focuses on a different requirement, such as a software vendor needs full control of a virtual machine operating system for a legacy application. EC2 offers virtual servers with selectable instance types and customer-managed guest operating systems. It is not the primary match for the requirement described here: support event-driven serverless function execution.
Question 1084
A stakeholder is considering AWS CloudTrail because a security analyst needs to see which principal made an AWS control-plane API call. What is the MOST relevant capability or benefit?
- Enable supported cryptographic key management
- Use supported encrypted network connections such as TLS
- Evaluate customer controls and obligations alongside AWS's assurance documentation
- Record account API activity and identify the calling principal
Explanation
Correct Answer
D:Record account API activity with AWS CloudTrail. CloudTrail helps audit actions performed through the console, SDK and API; it differs from performance metrics. The stated need is specifically a security analyst needs to see which principal made an AWS control-plane API call.
Incorrect Answers
A:This outcome fits AWS KMS managed keys: AWS KMS manages keys and enforces key-use controls for integrated services; it is not a general database service. The stakeholder requires the more specific capability provided by AWS CloudTrail, not that separate benefit.
B:This outcome fits Encryption in transit: Encryption in transit protects communications over networks; it differs from encryption of data stored on disks. The stakeholder requires the more specific capability provided by AWS CloudTrail, not that separate benefit.
C:This outcome fits AWS compliance shared model: AWS compliance programs cover AWS's side of applicable frameworks, while customers must evaluate and satisfy their own duties. The stakeholder requires the more specific capability provided by AWS CloudTrail, not that separate benefit.
Question 1085
A project owner must restrict which network connections can reach an EC2 instance. Which AWS service or cloud concept is the MOST direct match for this need?
- Customer EC2 security groups
- Customer Lambda function code
- AWS S3 infrastructure durability
- Customer data classification
Explanation
Correct Answer
A:Customer EC2 security groups fits the need because customers control security-group configuration for their EC2 workloads even though AWS operates the network infrastructure. The relevant capability or responsibility is: The customer defines and maintains the instance security group rules.
Incorrect Answers
B:Customer Lambda function code is associated with a different use case: a Lambda function processes user data using application code written by a development team. Serverless eliminates server administration for the customer, not their responsibility for their own application code and data handling. The question instead focuses on a project owner must restrict which network connections can reach an EC2 instance; Customer EC2 security groups is the more direct match.
C:AWS S3 infrastructure durability is associated with a different use case: a customer asks who maintains the physical storage systems used by Amazon S3. AWS handles service infrastructure, while customers still control object permissions, classifications and retention requirements. The question instead focuses on a project owner must restrict which network connections can reach an EC2 instance; Customer EC2 security groups is the more direct match.
D:Customer data classification is associated with a different use case: a regulated company must identify which of its uploaded records contain sensitive personal information. AWS cannot determine the business sensitivity of customer content; data classification and applicable handling policies belong to the customer. The question instead focuses on a project owner must restrict which network connections can reach an EC2 instance; Customer EC2 security groups is the more direct match.
Question 1086
Which AWS service or cloud principle is the BEST fit for this outcome or responsibility: enable supported business intelligence and analytics experiences?
- Amazon Lex
- Amazon Quick
- Amazon Athena
- Amazon EMR
Explanation
Correct Answer
B:Amazon Quick directly addresses this outcome. Amazon Quick is the current AWS branding for business intelligence capabilities previously associated with QuickSight. A common relevant example is: a business wants dashboards and business intelligence over curated organizational data.
Incorrect Answers
A:Amazon Lex instead focuses on a different requirement, such as a company wants a conversational bot that interprets user requests in a customer service channel. Lex provides conversational AI for chatbots and voice-enabled applications. It is not the primary match for the requirement described here: enable supported business intelligence and analytics experiences.
C:Amazon Athena instead focuses on a different requirement, such as an analyst needs to query data already stored in S3 using SQL without provisioning a database server. Athena is a serverless interactive query service for supported data sources such as S3. It is not the primary match for the requirement described here: enable supported business intelligence and analytics experiences.
D:Amazon EMR instead focuses on a different requirement, such as a team wants managed compute for large-scale big-data frameworks such as Apache Spark. EMR runs supported distributed analytics frameworks and is not a relational transaction service. It is not the primary match for the requirement described here: enable supported business intelligence and analytics experiences.
Question 1087
A company must send transactional confirmation emails from its application. Which AWS service or cloud concept is the MOST direct match for this need?
- AWS Step Functions
- Amazon SNS
- Amazon SES
- Amazon Connect
Explanation
Correct Answer
C:Amazon SES fits the need because sES provides email sending and related features for business application communications. The relevant capability or responsibility is: Use Amazon Simple Email Service for application email delivery.
Incorrect Answers
A:AWS Step Functions is associated with a different use case: a business process needs a coordinated sequence of several AWS service tasks with branching states. Step Functions models stateful application workflows and service coordination rather than storing the business records. The question instead focuses on a company must send transactional confirmation emails from its application; Amazon SES is the more direct match.
B:Amazon SNS is associated with a different use case: a monitoring event should send notifications to multiple subscribed endpoints. SNS distributes published messages to subscribed destinations; it is not a relational database. The question instead focuses on a company must send transactional confirmation emails from its application; Amazon SES is the more direct match.
D:Amazon Connect is associated with a different use case: a company wants a cloud-based customer contact center with voice and contact workflows. Amazon Connect offers contact-center services, distinct from a general-purpose messaging queue. The question instead focuses on a company must send transactional confirmation emails from its application; Amazon SES is the more direct match.
Question 1088
Which AWS service or cloud principle is the BEST fit for this outcome or responsibility: support event bus routing and integration?
- Amazon SES
- AWS IoT Core
- Amazon SNS
- Amazon EventBridge
Explanation
Correct Answer
D:Amazon EventBridge directly addresses this outcome. EventBridge matches events against rules and directs them to supported targets. A common relevant example is: a SaaS app emits business events that must be routed to different AWS targets based on rules.
Incorrect Answers
A:Amazon SES instead focuses on a different requirement, such as a company must send transactional confirmation emails from its application. SES provides email sending and related features for business application communications. It is not the primary match for the requirement described here: support event bus routing and integration.
B:AWS IoT Core instead focuses on a different requirement, such as a manufacturer wants connected devices to exchange messages securely with cloud applications. IoT Core helps connect and manage communications with devices, not an end-user email service. It is not the primary match for the requirement described here: support event bus routing and integration.
C:Amazon SNS instead focuses on a different requirement, such as a monitoring event should send notifications to multiple subscribed endpoints. SNS distributes published messages to subscribed destinations; it is not a relational database. It is not the primary match for the requirement described here: support event bus routing and integration.
Question 1089
A project manager compares Amazon CloudWatch with other AWS concepts while considering this need: operations needs metrics and alarms for an AWS workload's performance. Which pairing assigns the responsibilities or benefits correctly?
- Amazon CloudWatch: monitor metrics, logs and alarm conditions for workloads; Encryption at rest: enable applicable data-at-rest encryption on storage services
- Amazon CloudWatch: evaluate customer controls and obligations alongside AWS's assurance documentation; AWS compliance shared model: monitor metrics, logs and alarm conditions for workloads
- Amazon CloudWatch: enable supported cryptographic key management; AWS KMS: monitor metrics, logs and alarm conditions for workloads
- Amazon CloudWatch: enable applicable data-at-rest encryption on storage services; Encryption at rest: monitor metrics, logs and alarm conditions for workloads
Explanation
Correct Answer
A:The first pairing identifies Amazon CloudWatch with its actual role: monitor metrics, logs and alarm conditions with Amazon CloudWatch. CloudWatch supplies monitoring and observability signals, not an authoritative history of every API management change. The comparison is valid because Encryption at rest instead addresses enable applicable data-at-rest encryption on storage services.
Incorrect Answers
B:The roles are swapped. AWS compliance shared model is associated with evaluate customer controls and obligations alongside AWS's assurance documentation; Amazon CloudWatch instead has the role: Monitor metrics, logs and alarm conditions with Amazon CloudWatch. CloudWatch supplies monitoring and observability signals, not an authoritative history of every API management change.
C:The roles are swapped. AWS KMS is associated with use AWS Key Management Service for supported cryptographic key management; Amazon CloudWatch instead has the role: Monitor metrics, logs and alarm conditions with Amazon CloudWatch. CloudWatch supplies monitoring and observability signals, not an authoritative history of every API management change.
D:The roles are swapped. Encryption at rest is associated with enable applicable data-at-rest encryption on storage services; Amazon CloudWatch instead has the role: Monitor metrics, logs and alarm conditions with Amazon CloudWatch. CloudWatch supplies monitoring and observability signals, not an authoritative history of every API management change.
Question 1090
A project manager compares High availability with other AWS concepts while considering this need: a hospital booking service must remain accessible even when one hosting location becomes unavailable. Which pairing assigns the responsibilities or benefits correctly?
- High availability: experiment and deliver changes rapidly using on-demand resources; Agility: keep the application accessible by using redundant resources and eliminating single points of failure
- High availability: keep the application accessible by using redundant resources and eliminating single points of failure; Agility: experiment and deliver changes rapidly using on-demand resources
- High availability: deploy services geographically close to international users; Global reach: keep the application accessible by using redundant resources and eliminating single points of failure
- High availability: reduce routine infrastructure management by consuming a managed service; Managed service operations: keep the application accessible by using redundant resources and eliminating single points of failure
Explanation
Correct Answer
B:The first pairing identifies High availability with its actual role: keep the application accessible by using redundant resources and eliminating single points of failure. High availability focuses on minimizing service interruptions through redundancy and service continuity. The comparison is valid because Agility instead addresses experiment and deliver changes rapidly using on-demand resources.
Incorrect Answers
A:The roles are swapped. Agility is associated with experiment and deliver changes rapidly using on-demand resources; High availability instead has the role: Keep the application accessible by using redundant resources and eliminating single points of failure. High availability focuses on minimizing service interruptions through redundancy and service continuity.
C:The roles are swapped. Global reach is associated with deploy services geographically close to international users; High availability instead has the role: Keep the application accessible by using redundant resources and eliminating single points of failure. High availability focuses on minimizing service interruptions through redundancy and service continuity.
D:The roles are swapped. Managed service operations is associated with reduce routine infrastructure management by consuming a managed service; High availability instead has the role: Keep the application accessible by using redundant resources and eliminating single points of failure. High availability focuses on minimizing service interruptions through redundancy and service continuity.