Amazon AWS Certified Cloud Practitioner CLF-C02 Practice Test 120
Question 1190
A learner is explaining Customer RDS data permissions to colleagues facing this situation: an RDS database stores sensitive customer records and must restrict user privileges. Which explanation is MOST accurate?
- Serverless eliminates server administration for the customer, not their responsibility for their own application code and data handling.
- Selecting a managed database does not transfer responsibility for customer identities and data authorization to AWS.
- AWS operates the S3 storage infrastructure, but customers configure authorized access to their buckets and objects.
- AWS handles service infrastructure, while customers still control object permissions, classifications and retention requirements.
Explanation
Correct Answer
B:Selecting a managed database does not transfer responsibility for customer identities and data authorization to AWS. The explanation directly connects Customer RDS data permissions to the customer configures database users and permissions for its application data for the stated requirement.
Incorrect Answers
A:This statement is true of Customer Lambda function code, which addresses a Lambda function processes user data using application code written by a development team. It does not explain the particular role of Customer RDS data permissions; Selecting a managed database does not transfer responsibility for customer identities and data authorization to AWS.
C:This statement is true of Customer S3 bucket access, which addresses a team accidentally publishes an S3 bucket containing internal reports. It does not explain the particular role of Customer RDS data permissions; Selecting a managed database does not transfer responsibility for customer identities and data authorization to AWS.
D:This statement is true of AWS S3 infrastructure durability, which addresses a customer asks who maintains the physical storage systems used by Amazon S3. It does not explain the particular role of Customer RDS data permissions; Selecting a managed database does not transfer responsibility for customer identities and data authorization to AWS.
Question 1191
A stakeholder is considering AWS Firewall Manager because a security administrator needs consistent firewall policies across multiple AWS accounts. What is the MOST relevant capability or benefit?
- Support DDoS protection capabilities
- Find AWS-authored security and compliance guidance and assurance resources
- Manage supported security policies centrally
- Enable supported cross-account resource sharing
Explanation
Correct Answer
C:Use AWS Firewall Manager to manage supported security policies centrally. Firewall Manager helps manage AWS WAF, Shield and related policies across an AWS Organizations environment. The stated need is specifically a security administrator needs consistent firewall policies across multiple AWS accounts.
Incorrect Answers
A:This outcome fits AWS Shield DDoS protection: Shield provides managed DDoS protection rather than classifying sensitive objects or managing IAM identities. The stakeholder requires the more specific capability provided by AWS Firewall Manager, not that separate benefit.
B:This outcome fits AWS Certified security documentation: AWS official security and compliance pages provide reference material; the customer's own compliance assessment remains necessary. The stakeholder requires the more specific capability provided by AWS Firewall Manager, not that separate benefit.
D:This outcome fits AWS Resource Access Manager: AWS RAM manages sharing of eligible AWS resources with other accounts or organizational units, subject to permissions. The stakeholder requires the more specific capability provided by AWS Firewall Manager, not that separate benefit.
Question 1192
Which AWS service or cloud principle is the BEST fit for this outcome or responsibility: share provider-managed infrastructure while retaining logical workload isolation?
- Pay-as-you-go consumption
- High availability
- On-demand provisioning
- Resource pooling
Explanation
Correct Answer
D:Resource pooling directly addresses this outcome. Cloud resource pooling supports multiple customers and workloads through provider-managed shared infrastructure with isolation controls. A common relevant example is: several departments need separate virtual workloads without each purchasing dedicated physical machines.
Incorrect Answers
A:Pay-as-you-go consumption instead focuses on a different requirement, such as a seasonal nonprofit wants computing only during a two-week annual campaign. Usage-based cloud charging can reduce upfront investment and better match cost to periods of actual consumption. It is not the primary match for the requirement described here: share provider-managed infrastructure while retaining logical workload isolation.
B:High availability instead focuses on a different requirement, such as a hospital booking service must remain accessible even when one hosting location becomes unavailable. High availability focuses on minimizing service interruptions through redundancy and service continuity. It is not the primary match for the requirement described here: share provider-managed infrastructure while retaining logical workload isolation.
C:On-demand provisioning instead focuses on a different requirement, such as a testing team needs temporary computing capacity immediately for a newly approved project. AWS self-service resource provisioning reduces procurement lead time for many workloads. It is not the primary match for the requirement described here: share provider-managed infrastructure while retaining logical workload isolation.
Question 1193
A business needs a disaster recovery location outside the primary Region. Which AWS service or cloud concept is the MOST direct match for this need?
- Multiple AWS Regions
- AWS Global Accelerator
- Multiple Availability Zones
- Data sovereignty Region choice
Explanation
Correct Answer
A:Multiple AWS Regions fits the need because deploying across Regions can address geographic disruptions, customer latency and residency objectives at higher complexity. The relevant capability or responsibility is: Use a separate AWS Region as part of a multi-Region continuity plan.
Incorrect Answers
B:AWS Global Accelerator is associated with a different use case: an internet-facing app has regional endpoints and needs stable global entry points for traffic routing. Global Accelerator provides static anycast IP addresses and routes traffic over the AWS global network to healthy endpoints. The question instead focuses on a business needs a disaster recovery location outside the primary Region; Multiple AWS Regions is the more direct match.
C:Multiple Availability Zones is associated with a different use case: an application must remain available if one Availability Zone experiences an outage. Multi-AZ deployments can avoid a single-AZ failure taking down the whole application. The question instead focuses on a business needs a disaster recovery location outside the primary Region; Multiple AWS Regions is the more direct match.
D:Data sovereignty Region choice is associated with a different use case: a government customer requires that certain datasets be stored in a specified legal jurisdiction. Region choice is a customer decision for residency compliance, subject to service availability and contractual requirements. The question instead focuses on a business needs a disaster recovery location outside the primary Region; Multiple AWS Regions is the more direct match.
Question 1194
Which AWS service or cloud principle is the BEST fit for this outcome or responsibility: make significant application changes to use cloud-native capabilities?
- Retiring an application
- Refactoring migration
- Retaining a workload
- AWS Snow Family
Explanation
Correct Answer
B:Refactoring migration directly addresses this outcome. Refactoring transforms the application architecture, rather than simply moving the existing runtime to the cloud. A common relevant example is: a business is willing to redesign a tightly coupled application into cloud-native components.
Incorrect Answers
A:Retiring an application instead focuses on a different requirement, such as an inventory review discovers a legacy reporting system with no users or business dependency. Retiring eliminates redundant or unused workloads so migration effort is not spent on systems with no continuing value. It is not the primary match for the requirement described here: make significant application changes to use cloud-native capabilities.
C:Retaining a workload instead focuses on a different requirement, such as a business must keep a legacy production system on premises until a contractual restriction expires. Retaining is an intentional decision to defer migration when business or technical constraints make an immediate move inappropriate. It is not the primary match for the requirement described here: make significant application changes to use cloud-native capabilities.
D:AWS Snow Family instead focuses on a different requirement, such as an organization must transfer a very large volume of data from a remote site with insufficient network bandwidth. AWS Snow devices support moving large datasets when transferring everything over a network is slow or constrained. It is not the primary match for the requirement described here: make significant application changes to use cloud-native capabilities.
Question 1195
Within the Cloud Concepts domain, which business example MOST clearly illustrates Economies of scale, rather than a different AWS concept?
- A team prefers a cloud software offering whose price includes the relevant software license
- A retailer wants lower cloud expenses during months with fewer transactions
- A small organization benefits from AWS data-center purchasing power even though it cannot operate a massive facility itself
- A finance director compares AWS migration with building another private data center
Explanation
Correct Answer
C:The decisive requirement is: Benefit from aggregate cloud-provider scale and procurement efficiency. This is the role of Economies of scale. Large cloud providers spread infrastructure costs across many customers and workloads.
Incorrect Answers
A:This describes a scenario for License-included pricing: use a service price that bundles eligible software licensing. License-included pricing is distinct from providing a separately acquired customer license under BYOL. It is not the most direct example of Economies of scale.
B:This describes a scenario for Variable costs: let eligible costs rise and fall with actual resource consumption. Variable cost follows utilization or usage rather than remaining fixed at a pre-purchased capacity level. It is not the most direct example of Economies of scale.
D:This describes a scenario for Total cost of ownership: include facilities, hardware, operations, and staffing in a long-term cost comparison. Total cost of ownership considers direct and indirect costs, not only an instance hourly price. It is not the most direct example of Economies of scale.
Question 1196
An inventory review discovers a legacy reporting system with no users or business dependency. Which AWS service or cloud concept is the MOST direct match for this need?
- AWS Database Migration Service
- AWS Snow Family
- Rehosting migration
- Retiring an application
Explanation
Correct Answer
D:Retiring an application fits the need because retiring eliminates redundant or unused workloads so migration effort is not spent on systems with no continuing value. The relevant capability or responsibility is: Decommission an unneeded application rather than migrate it.
Incorrect Answers
A:AWS Database Migration Service is associated with a different use case: a company wants to transfer database content to AWS while limiting downtime. AWS DMS can transfer data and support change data capture for applicable database migration scenarios. The question instead focuses on an inventory review discovers a legacy reporting system with no users or business dependency; Retiring an application is the more direct match.
B:AWS Snow Family is associated with a different use case: an organization must transfer a very large volume of data from a remote site with insufficient network bandwidth. AWS Snow devices support moving large datasets when transferring everything over a network is slow or constrained. The question instead focuses on an inventory review discovers a legacy reporting system with no users or business dependency; Retiring an application is the more direct match.
C:Rehosting migration is associated with a different use case: a company wants to move an existing server-based application to AWS with minimal application changes. Rehosting, often called lift and shift, relocates a workload without significant application redesign. The question instead focuses on an inventory review discovers a legacy reporting system with no users or business dependency; Retiring an application is the more direct match.
Question 1197
Which AWS service or cloud principle is the BEST fit for this outcome or responsibility: organize organizational readiness across AWS CAF perspectives?
- AWS Cloud Adoption Framework
- AWS Migration Hub
- Refactoring migration
- AWS Snow Family
Explanation
Correct Answer
A:AWS Cloud Adoption Framework directly addresses this outcome. AWS CAF helps align business and technology stakeholders throughout cloud adoption instead of treating migration as a server-copy exercise. A common relevant example is: executives need a structured view of people, governance, business, platform, security, and operations during cloud adoption.
Incorrect Answers
B:AWS Migration Hub instead focuses on a different requirement, such as a program manager needs a consolidated place to follow the progress of multiple migration activities. AWS Migration Hub provides visibility into discovered applications and migration activity across supported migration tools. It is not the primary match for the requirement described here: organize organizational readiness across AWS CAF perspectives.
C:Refactoring migration instead focuses on a different requirement, such as a business is willing to redesign a tightly coupled application into cloud-native components. Refactoring transforms the application architecture, rather than simply moving the existing runtime to the cloud. It is not the primary match for the requirement described here: organize organizational readiness across AWS CAF perspectives.
D:AWS Snow Family instead focuses on a different requirement, such as an organization must transfer a very large volume of data from a remote site with insufficient network bandwidth. AWS Snow devices support moving large datasets when transferring everything over a network is slow or constrained. It is not the primary match for the requirement described here: organize organizational readiness across AWS CAF perspectives.
Question 1198
A stakeholder is considering Replatforming migration because a company moves an application to AWS and also adopts a managed database without rebuilding its business logic. What is the MOST relevant capability or benefit?
- Meet this requirement: an organization must transfer a very large volume of data from a remote site with insufficient network bandwidth
- Make limited platform optimizations while retaining the main application architecture
- Track application migration progress centrally
- Organize organizational readiness across AWS CAF perspectives
Explanation
Correct Answer
B:Make limited platform optimizations while retaining the main application architecture. Replatforming adjusts selected supporting components to gain cloud benefits without a full application rewrite. The stated need is specifically a company moves an application to AWS and also adopts a managed database without rebuilding its business logic.
Incorrect Answers
A:This outcome fits AWS Snow Family: AWS Snow devices support moving large datasets when transferring everything over a network is slow or constrained. The stakeholder requires the more specific capability provided by Replatforming migration, not that separate benefit.
C:This outcome fits AWS Migration Hub: AWS Migration Hub provides visibility into discovered applications and migration activity across supported migration tools. The stakeholder requires the more specific capability provided by Replatforming migration, not that separate benefit.
D:This outcome fits AWS Cloud Adoption Framework: AWS CAF helps align business and technology stakeholders throughout cloud adoption instead of treating migration as a server-copy exercise. The stakeholder requires the more specific capability provided by Replatforming migration, not that separate benefit.
Question 1199
A project manager compares AWS KMS with other AWS concepts while considering this need: an application team needs centralized control of encryption key use and auditability. Which pairing assigns the responsibilities or benefits correctly?
- AWS KMS: retrieve AWS compliance reports and related agreements using AWS Artifact; AWS Artifact compliance reports: enable supported cryptographic key management
- AWS KMS: record account API activity and identify the calling principal; AWS CloudTrail: enable supported cryptographic key management
- AWS KMS: enable supported cryptographic key management; AWS CloudTrail: record account API activity and identify the calling principal
- AWS KMS: aggregate and prioritize findings from different security detection tools; AWS Security Hub: enable supported cryptographic key management
Explanation
Correct Answer
C:The first pairing identifies AWS KMS with its actual role: use AWS Key Management Service for supported cryptographic key management. AWS KMS manages keys and enforces key-use controls for integrated services; it is not a general database service. The comparison is valid because AWS CloudTrail API auditing instead addresses record account API activity with AWS CloudTrail.
Incorrect Answers
A:The roles are swapped. AWS Artifact compliance reports is associated with retrieve AWS compliance reports and related agreements using AWS Artifact; AWS KMS instead has the role: Use AWS Key Management Service for supported cryptographic key management. AWS KMS manages keys and enforces key-use controls for integrated services; it is not a general database service.
B:The roles are swapped. AWS CloudTrail is associated with record account API activity with AWS CloudTrail; AWS KMS instead has the role: Use AWS Key Management Service for supported cryptographic key management. AWS KMS manages keys and enforces key-use controls for integrated services; it is not a general database service.
D:The roles are swapped. AWS Security Hub is associated with aggregate and prioritize security findings with AWS Security Hub; AWS KMS instead has the role: Use AWS Key Management Service for supported cryptographic key management. AWS KMS manages keys and enforces key-use controls for integrated services; it is not a general database service.
Question 1200
A stakeholder is considering EC2 Auto Scaling because a retail site needs more EC2 instances during traffic spikes and fewer when usage falls. What is the MOST relevant capability or benefit?
- Support event-driven serverless function execution
- Support CPU-heavy work
- Meet this requirement: an analytics node needs high local disk throughput for temporary data processing
- Adjust instance capacity based on demand
Explanation
Correct Answer
D:Use Amazon EC2 Auto Scaling to adjust instance capacity based on demand. EC2 Auto Scaling can add or remove instances based on policies to help meet capacity and availability needs. The stated need is specifically a retail site needs more EC2 instances during traffic spikes and fewer when usage falls.
Incorrect Answers
A:This outcome fits AWS Lambda: Lambda executes event-triggered code without the customer managing underlying servers, subject to service limits. The stakeholder requires the more specific capability provided by EC2 Auto Scaling, not that separate benefit.
B:This outcome fits Compute-optimized EC2: Compute-optimized instances provide a high ratio of compute performance for suitable CPU-bound applications. The stakeholder requires the more specific capability provided by EC2 Auto Scaling, not that separate benefit.
C:This outcome fits Storage-optimized EC2: Storage-optimized instance families are designed for high local storage I/O and throughput needs. The stakeholder requires the more specific capability provided by EC2 Auto Scaling, not that separate benefit.