Amazon AWS Certified Cloud Practitioner CLF-C02 Practice Test 111
Question 1100
A learner is explaining Rapid experimentation to colleagues facing this situation: a product group wants to run several short-lived proofs of concept at low initial commitment. Which explanation is MOST accurate?
- Scalability is the ability to handle greater load by adding resources or increasing their capacity as an organization grows.
- Cloud resource pooling supports multiple customers and workloads through provider-managed shared infrastructure with isolation controls.
- AWS self-service resource provisioning reduces procurement lead time for many workloads.
- On-demand cloud environments make experiments easier to start and stop as new ideas are evaluated.
Explanation
Correct Answer
D:On-demand cloud environments make experiments easier to start and stop as new ideas are evaluated. The explanation directly connects Rapid experimentation to launch and remove temporary testing resources without permanent equipment purchases for the stated requirement.
Incorrect Answers
A:This statement is true of Scalability, which addresses a research portal expects sustained growth from thousands to millions of visitors over several years. It does not explain the particular role of Rapid experimentation; On-demand cloud environments make experiments easier to start and stop as new ideas are evaluated.
B:This statement is true of Resource pooling, which addresses several departments need separate virtual workloads without each purchasing dedicated physical machines. It does not explain the particular role of Rapid experimentation; On-demand cloud environments make experiments easier to start and stop as new ideas are evaluated.
C:This statement is true of On-demand provisioning, which addresses a testing team needs temporary computing capacity immediately for a newly approved project. It does not explain the particular role of Rapid experimentation; On-demand cloud environments make experiments easier to start and stop as new ideas are evaluated.
Question 1101
Within the Security and Compliance domain, which business example MOST clearly illustrates Security logging retention, rather than a different AWS concept?
- An organization wants security logs available for internal investigations for a defined period
- A company needs centralized governance across many separate AWS accounts
- A security analyst needs to see which principal made an AWS control-plane API call
- An administrator wants continuous assessments of supported workloads for software vulnerabilities
Explanation
Correct Answer
A:The decisive requirement is: Define appropriate access controls and retention for collected audit logs. This is the role of Security logging retention. Collecting logs alone is insufficient unless their access, preservation and lifecycle align with organizational policy.
Incorrect Answers
B:This describes a scenario for AWS Organizations governance: use AWS Organizations for multi-account governance and consolidated controls. Organizations groups accounts and supports policies and billing consolidation; it does not itself analyze threats. It is not the most direct example of Security logging retention.
C:This describes a scenario for AWS CloudTrail API auditing: record account API activity with AWS CloudTrail. CloudTrail helps audit actions performed through the console, SDK and API; it differs from performance metrics. It is not the most direct example of Security logging retention.
D:This describes a scenario for Amazon Inspector vulnerability findings: use Amazon Inspector for vulnerability management findings. Inspector identifies package and supported workload vulnerabilities; it is not a replacement for data classification. It is not the most direct example of Security logging retention.
Question 1102
A stakeholder is considering AWS Security Hub because a security operations team wants a consolidated view of findings from multiple AWS security services. What is the MOST relevant capability or benefit?
- Support multi-account governance and consolidated controls
- Aggregate and prioritize findings from different security detection tools
- Apply layered identity, network and data-protection controls
- Evaluate customer controls and obligations alongside AWS's assurance documentation
Explanation
Correct Answer
B:Aggregate and prioritize security findings with AWS Security Hub. Security Hub centralizes security posture information and findings rather than storing application business data. The stated need is specifically a security operations team wants a consolidated view of findings from multiple AWS security services.
Incorrect Answers
A:This outcome fits AWS Organizations governance: Organizations groups accounts and supports policies and billing consolidation; it does not itself analyze threats. The stakeholder requires the more specific capability provided by AWS Security Hub, not that separate benefit.
C:This outcome fits Defense in depth: Defense in depth reduces dependence on a single security mechanism by using multiple complementary safeguards. The stakeholder requires the more specific capability provided by AWS Security Hub, not that separate benefit.
D:This outcome fits AWS compliance shared model: AWS compliance programs cover AWS's side of applicable frameworks, while customers must evaluate and satisfy their own duties. The stakeholder requires the more specific capability provided by AWS Security Hub, not that separate benefit.
Question 1103
Which AWS service or cloud principle is the BEST fit for this outcome or responsibility: meet this requirement: a business runs an application that needs very large in-memory data structures?
- AWS Lambda
- Compute-optimized EC2
- Memory-optimized EC2
- Amazon EKS
Explanation
Correct Answer
C:Memory-optimized EC2 directly addresses this outcome. Memory-optimized instances emphasize memory capacity relative to processing, fitting memory-intensive workloads. A common relevant example is: a business runs an application that needs very large in-memory data structures.
Incorrect Answers
A:AWS Lambda instead focuses on a different requirement, such as an online form should run short application code only when events occur without managing servers. Lambda executes event-triggered code without the customer managing underlying servers, subject to service limits. It is not the primary match for the requirement described here: meet this requirement: a business runs an application that needs very large in-memory data structures.
B:Compute-optimized EC2 instead focuses on a different requirement, such as a simulation workload spends most of its time performing CPU-intensive numerical calculations. Compute-optimized instances provide a high ratio of compute performance for suitable CPU-bound applications. It is not the primary match for the requirement described here: meet this requirement: a business runs an application that needs very large in-memory data structures.
D:Amazon EKS instead focuses on a different requirement, such as an organization wants managed Kubernetes control-plane capabilities for containerized workloads. EKS offers managed Kubernetes control-plane capabilities for applications using Kubernetes APIs. It is not the primary match for the requirement described here: meet this requirement: a business runs an application that needs very large in-memory data structures.
Question 1104
A department repeatedly creates and deletes temporary test environments by hand. Which AWS service or cloud concept is the MOST direct match for this need?
- Variable costs
- Total cost of ownership
- Idle resource spending
- Automation savings
Explanation
Correct Answer
D:Automation savings fits the need because automation can reduce manual effort and mistakes while making temporary resources easier to retire. The relevant capability or responsibility is: Reduce repetitive administrative work through consistent automation.
Incorrect Answers
A:Variable costs is associated with a different use case: a retailer wants lower cloud expenses during months with fewer transactions. Variable cost follows utilization or usage rather than remaining fixed at a pre-purchased capacity level. The question instead focuses on a department repeatedly creates and deletes temporary test environments by hand; Automation savings is the more direct match.
B:Total cost of ownership is associated with a different use case: a finance director compares AWS migration with building another private data center. Total cost of ownership considers direct and indirect costs, not only an instance hourly price. The question instead focuses on a department repeatedly creates and deletes temporary test environments by hand; Automation savings is the more direct match.
C:Idle resource spending is associated with a different use case: an internal testing account leaves unused compute instances running every weekend. Idle provisioned resources may continue to generate charges; matching uptime to need reduces wasted spending. The question instead focuses on a department repeatedly creates and deletes temporary test environments by hand; Automation savings is the more direct match.
Question 1105
Which AWS service or cloud principle is the BEST fit for this outcome or responsibility: leave a selected workload in its existing environment for now?
- Retaining a workload
- AWS Database Migration Service
- AWS Cloud Adoption Framework
- Replatforming migration
Explanation
Correct Answer
A:Retaining a workload directly addresses this outcome. Retaining is an intentional decision to defer migration when business or technical constraints make an immediate move inappropriate. A common relevant example is: a business must keep a legacy production system on premises until a contractual restriction expires.
Incorrect Answers
B:AWS Database Migration Service instead focuses on a different requirement, such as a company wants to transfer database content to AWS while limiting downtime. AWS DMS can transfer data and support change data capture for applicable database migration scenarios. It is not the primary match for the requirement described here: leave a selected workload in its existing environment for now.
C:AWS Cloud Adoption Framework instead focuses on a different requirement, such as executives need a structured view of people, governance, business, platform, security, and operations during cloud adoption. AWS CAF helps align business and technology stakeholders throughout cloud adoption instead of treating migration as a server-copy exercise. It is not the primary match for the requirement described here: leave a selected workload in its existing environment for now.
D:Replatforming migration instead focuses on a different requirement, such as a company moves an application to AWS and also adopts a managed database without rebuilding its business logic. Replatforming adjusts selected supporting components to gain cloud benefits without a full application rewrite. It is not the primary match for the requirement described here: leave a selected workload in its existing environment for now.
Question 1106
A learner is explaining Security pillar to colleagues facing this situation: a business wants to protect data, identities, and systems while maintaining risk controls. Which explanation is MOST accurate?
- Regular recovery testing reveals gaps in backup, dependency, and restoration plans before a real disruption.
- The Security pillar addresses identity, detection, infrastructure and data protection in the AWS Well-Architected Framework.
- The Reliability pillar emphasizes recovery, distributed design, and meeting availability requirements.
- Automating repeatable operations reduces manual error and supports dependable responses while human review remains appropriate for sensitive changes.
Explanation
Correct Answer
B:The Security pillar addresses identity, detection, infrastructure and data protection in the AWS Well-Architected Framework. The explanation directly connects Security pillar to protect information and systems using risk-aware controls for the stated requirement.
Incorrect Answers
A:This statement is true of Test recovery assumptions, which addresses a service owner has a written recovery plan but does not know whether it would work in practice. It does not explain the particular role of Security pillar; The Security pillar addresses identity, detection, infrastructure and data protection in the AWS Well-Architected Framework.
C:This statement is true of Reliability pillar, which addresses an application needs to recover predictably from failures and adapt when demand changes. It does not explain the particular role of Security pillar; The Security pillar addresses identity, detection, infrastructure and data protection in the AWS Well-Architected Framework.
D:This statement is true of Automated operational response, which addresses operators repeatedly perform the same low-risk response to predictable workload events. It does not explain the particular role of Security pillar; The Security pillar addresses identity, detection, infrastructure and data protection in the AWS Well-Architected Framework.
Question 1107
A stakeholder is considering Data residency considerations because a healthcare organization has contractual restrictions on the country in which records may be stored. What is the MOST relevant capability or benefit?
- Record account API activity and identify the calling principal
- Define appropriate access controls and retention for collected audit logs
- Evaluate Region and service data-location capabilities against applicable residency requirements
- Organize control evidence collection
Explanation
Correct Answer
C:Evaluate Region and service data-location capabilities against applicable residency requirements. Compliance and data-location choices remain customer decisions even when AWS operates the service infrastructure. The stated need is specifically a healthcare organization has contractual restrictions on the country in which records may be stored.
Incorrect Answers
A:This outcome fits AWS CloudTrail API auditing: CloudTrail helps audit actions performed through the console, SDK and API; it differs from performance metrics. The stakeholder requires the more specific capability provided by Data residency considerations, not that separate benefit.
B:This outcome fits Security logging retention: Collecting logs alone is insufficient unless their access, preservation and lifecycle align with organizational policy. The stakeholder requires the more specific capability provided by Data residency considerations, not that separate benefit.
D:This outcome fits AWS Audit Manager evidence: AWS Audit Manager can collect evidence for assessments but does not replace an organization's compliance decisions. The stakeholder requires the more specific capability provided by Data residency considerations, not that separate benefit.
Question 1108
A learner is explaining Amazon Lex to colleagues facing this situation: a company wants a conversational bot that interprets user requests in a customer service channel. Which explanation is MOST accurate?
- SageMaker AI supports building, training and deploying ML models rather than simply translating text.
- Rekognition applies pretrained computer vision to supported image and video analysis tasks.
- Kinesis includes streaming data capabilities suitable for near-real-time events.
- Lex provides conversational AI for chatbots and voice-enabled applications.
Explanation
Correct Answer
D:Lex provides conversational AI for chatbots and voice-enabled applications. The explanation directly connects Amazon Lex to use Amazon Lex for building conversational interfaces for the stated requirement.
Incorrect Answers
A:This statement is true of Amazon SageMaker AI, which addresses a machine learning team needs tools to build and deploy custom ML models. It does not explain the particular role of Amazon Lex; Lex provides conversational AI for chatbots and voice-enabled applications.
B:This statement is true of Amazon Rekognition, which addresses a media team wants managed analysis of image or video content without developing its own vision model. It does not explain the particular role of Amazon Lex; Lex provides conversational AI for chatbots and voice-enabled applications.
C:This statement is true of Amazon Kinesis, which addresses an application wants to capture and process a continuous stream of event records. It does not explain the particular role of Amazon Lex; Lex provides conversational AI for chatbots and voice-enabled applications.
Question 1109
Within the Cloud Concepts domain, which business example MOST clearly illustrates AWS Snow Family, rather than a different AWS concept?
- An organization must transfer a very large volume of data from a remote site with insufficient network bandwidth
- Executives need a structured view of people, governance, business, platform, security, and operations during cloud adoption
- A business is willing to redesign a tightly coupled application into cloud-native components
- A business must keep a legacy production system on premises until a contractual restriction expires
Explanation
Correct Answer
A:The decisive requirement is: Use physical AWS data transfer devices where online transfer is impractical. This is the role of AWS Snow Family. AWS Snow devices support moving large datasets when transferring everything over a network is slow or constrained.
Incorrect Answers
B:This describes a scenario for AWS Cloud Adoption Framework: organize organizational readiness across AWS CAF perspectives. AWS CAF helps align business and technology stakeholders throughout cloud adoption instead of treating migration as a server-copy exercise. It is not the most direct example of AWS Snow Family.
C:This describes a scenario for Refactoring migration: make significant application changes to use cloud-native capabilities. Refactoring transforms the application architecture, rather than simply moving the existing runtime to the cloud. It is not the most direct example of AWS Snow Family.
D:This describes a scenario for Retaining a workload: leave a selected workload in its existing environment for now. Retaining is an intentional decision to defer migration when business or technical constraints make an immediate move inappropriate. It is not the most direct example of AWS Snow Family.
Question 1110
A project manager compares Amazon ECS with other AWS concepts while considering this need: an application team needs AWS-native orchestration of container workloads. Which pairing assigns the responsibilities or benefits correctly?
- Amazon ECS: meet this requirement: an analytics node needs high local disk throughput for temporary data processing; Storage-optimized EC2: manage containerized applications
- Amazon ECS: manage containerized applications; Storage-optimized EC2: meet this requirement: an analytics node needs high local disk throughput for temporary data processing
- Amazon ECS: distribute inbound traffic among healthy application targets; Elastic Load Balancing: manage containerized applications
- Amazon ECS: meet this requirement: a business runs an application that needs very large in-memory data structures; Memory-optimized EC2: manage containerized applications
Explanation
Correct Answer
B:The first pairing identifies Amazon ECS with its actual role: use Amazon Elastic Container Service to manage containerized applications. ECS manages deployment and scheduling of containers, with eligible EC2 or Fargate capacity options. The comparison is valid because Storage-optimized EC2 instead addresses choose an EC2 storage-optimized instance family where local storage performance is central.
Incorrect Answers
A:The roles are swapped. Storage-optimized EC2 is associated with choose an EC2 storage-optimized instance family where local storage performance is central; Amazon ECS instead has the role: Use Amazon Elastic Container Service to manage containerized applications. ECS manages deployment and scheduling of containers, with eligible EC2 or Fargate capacity options.
C:The roles are swapped. Elastic Load Balancing is associated with use Elastic Load Balancing to distribute incoming workload traffic; Amazon ECS instead has the role: Use Amazon Elastic Container Service to manage containerized applications. ECS manages deployment and scheduling of containers, with eligible EC2 or Fargate capacity options.
D:The roles are swapped. Memory-optimized EC2 is associated with choose an EC2 memory-optimized instance family; Amazon ECS instead has the role: Use Amazon Elastic Container Service to manage containerized applications. ECS manages deployment and scheduling of containers, with eligible EC2 or Fargate capacity options.