Amazon AWS Certified Cloud Practitioner CLF-C02 Practice Test 17
Question 160
Within the Cloud Technology and Services domain, which business example MOST clearly illustrates Amazon ECS, rather than a different AWS concept?
- An analytics node needs high local disk throughput for temporary data processing
- A business runs an application that needs very large in-memory data structures
- A website needs inbound requests distributed among several healthy application targets
- An application team needs AWS-native orchestration of container workloads
Explanation
Correct Answer
D:The decisive requirement is: Use Amazon Elastic Container Service to manage containerized applications. This is the role of Amazon ECS. ECS manages deployment and scheduling of containers, with eligible EC2 or Fargate capacity options.
Incorrect Answers
A:This describes a scenario for Storage-optimized EC2: choose an EC2 storage-optimized instance family where local storage performance is central. Storage-optimized instance families are designed for high local storage I/O and throughput needs. It is not the most direct example of Amazon ECS.
B:This describes a scenario for Memory-optimized EC2: choose an EC2 memory-optimized instance family. Memory-optimized instances emphasize memory capacity relative to processing, fitting memory-intensive workloads. It is not the most direct example of Amazon ECS.
C:This describes a scenario for Elastic Load Balancing: use Elastic Load Balancing to distribute incoming workload traffic. Elastic Load Balancing routes requests or connections to available targets rather than relying on one application instance. It is not the most direct example of Amazon ECS.
Question 161
An operations engineer wants to run repeatable AWS service commands from a terminal script. Which AWS service or cloud concept is the MOST direct match for this need?
- AWS CLI
- AWS Management Console
- AWS CloudFormation
- AWS service APIs
Explanation
Correct Answer
A:AWS CLI fits the need because the AWS CLI exposes AWS service operations through command-line commands suitable for controlled automation. The relevant capability or responsibility is: Use the AWS Command Line Interface for scripted AWS API operations.
Incorrect Answers
B:AWS Management Console is associated with a different use case: a business analyst occasionally needs to view AWS resources through a browser interface. The AWS Management Console is a browser-based entry point for authorized AWS account users. The question instead focuses on an operations engineer wants to run repeatable AWS service commands from a terminal script; AWS CLI is the more direct match.
C:AWS CloudFormation is associated with a different use case: a cloud team must define a repeatable infrastructure configuration under version control. CloudFormation uses templates and stacks to create and manage supported AWS resources consistently. The question instead focuses on an operations engineer wants to run repeatable AWS service commands from a terminal script; AWS CLI is the more direct match.
D:AWS service APIs is associated with a different use case: a system needs a programmatic interface to request and manage AWS resources. AWS APIs enable programmatic service access; management consoles and SDKs are other ways to use such capabilities. The question instead focuses on an operations engineer wants to run repeatable AWS service commands from a terminal script; AWS CLI is the more direct match.
Question 162
A learner is explaining AWS Application Migration Service to colleagues facing this situation: an enterprise needs to lift and shift many supported physical or virtual servers to AWS. Which explanation is MOST accurate?
- AWS CAF helps align business and technology stakeholders throughout cloud adoption instead of treating migration as a server-copy exercise.
- AWS Application Migration Service supports continuous replication and cutover for eligible servers.
- Refactoring transforms the application architecture, rather than simply moving the existing runtime to the cloud.
- Repurchasing changes the software product consumed instead of moving the same application stack.
Explanation
Correct Answer
B:AWS Application Migration Service supports continuous replication and cutover for eligible servers. The explanation directly connects AWS Application Migration Service to replicate and migrate server workloads with minimal application changes for the stated requirement.
Incorrect Answers
A:This statement is true of AWS Cloud Adoption Framework, which addresses executives need a structured view of people, governance, business, platform, security, and operations during cloud adoption. It does not explain the particular role of AWS Application Migration Service; AWS Application Migration Service supports continuous replication and cutover for eligible servers.
C:This statement is true of Refactoring migration, which addresses a business is willing to redesign a tightly coupled application into cloud-native components. It does not explain the particular role of AWS Application Migration Service; AWS Application Migration Service supports continuous replication and cutover for eligible servers.
D:This statement is true of Repurchasing migration, which addresses an organization replaces its custom on-premises collaboration tool with a commercial SaaS subscription. It does not explain the particular role of AWS Application Migration Service; AWS Application Migration Service supports continuous replication and cutover for eligible servers.
Question 163
Which AWS service or cloud principle is the BEST fit for this outcome or responsibility: support eligible response and contact options?
- AWS Health Dashboard
- AWS Trusted Advisor
- AWS Support plans
- AWS re:Post
Explanation
Correct Answer
C:AWS Support plans directly addresses this outcome. Support benefits and service-level commitments depend on the chosen plan and current AWS support terms. A common relevant example is: a business wants to compare the support response options included with different AWS support tiers.
Incorrect Answers
A:AWS Health Dashboard instead focuses on a different requirement, such as a team wants to understand AWS service events that may affect its account or Region. AWS Health provides information about relevant service disruptions and scheduled changes; it is distinct from an application metric alarm. It is not the primary match for the requirement described here: support eligible response and contact options.
B:AWS Trusted Advisor instead focuses on a different requirement, such as an operations team wants recommendations for AWS best practices in areas such as costs and security. Trusted Advisor provides advisory findings in supported categories; available checks and features depend on account arrangements. It is not the primary match for the requirement described here: support eligible response and contact options.
D:AWS re:Post instead focuses on a different requirement, such as a developer wants to ask a public technical question and learn from AWS community answers. re:Post provides community questions and answers rather than guaranteed contractual support response times. It is not the primary match for the requirement described here: support eligible response and contact options.
Question 164
Which AWS service or cloud principle is the BEST fit for this outcome or responsibility: support persistent EC2 block storage?
- Amazon S3
- AWS Backup
- AWS Storage Gateway
- Amazon EBS
Explanation
Correct Answer
D:Amazon EBS directly addresses this outcome. EBS provides network-attached block volumes with persistence and snapshot capabilities subject to volume type and configuration. A common relevant example is: a database server on EC2 needs persistent block storage beyond the life of one specific host.
Incorrect Answers
A:Amazon S3 object storage instead focuses on a different requirement, such as a business stores images and documents as objects accessed using service APIs. S3 stores data as objects in buckets; it is not an attachable EC2 block device or shared POSIX file system. It is not the primary match for the requirement described here: support persistent EC2 block storage.
B:AWS Backup instead focuses on a different requirement, such as a company needs centralized policies and visibility across supported AWS resource backups. AWS Backup centralizes backup administration across supported resources; it is separate from normal object lifecycle transitions. It is not the primary match for the requirement described here: support persistent EC2 block storage.
C:AWS Storage Gateway instead focuses on a different requirement, such as an on-premises application needs familiar file or storage interfaces connected to AWS cloud storage. Storage Gateway supports hybrid storage patterns and local caching for selected AWS-backed interfaces. It is not the primary match for the requirement described here: support persistent EC2 block storage.
Question 165
Within the Cloud Concepts domain, which business example MOST clearly illustrates Refactoring migration, rather than a different AWS concept?
- A business is willing to redesign a tightly coupled application into cloud-native components
- A business must keep a legacy production system on premises until a contractual restriction expires
- An organization must transfer a very large volume of data from a remote site with insufficient network bandwidth
- An organization replaces its custom on-premises collaboration tool with a commercial SaaS subscription
Explanation
Correct Answer
A:The decisive requirement is: Make significant application changes to use cloud-native capabilities. This is the role of Refactoring migration. Refactoring transforms the application architecture, rather than simply moving the existing runtime to the cloud.
Incorrect Answers
B:This describes a scenario for Retaining a workload: leave a selected workload in its existing environment for now. Retaining is an intentional decision to defer migration when business or technical constraints make an immediate move inappropriate. It is not the most direct example of Refactoring migration.
C:This describes a scenario for AWS Snow Family: use physical AWS data transfer devices where online transfer is impractical. AWS Snow devices support moving large datasets when transferring everything over a network is slow or constrained. It is not the most direct example of Refactoring migration.
D:This describes a scenario for Repurchasing migration: replace an existing application with a different product or SaaS solution. Repurchasing changes the software product consumed instead of moving the same application stack. It is not the most direct example of Refactoring migration.
Question 166
Which AWS service or cloud principle is the BEST fit for this outcome or responsibility: replicate and migrate server workloads with minimal application changes?
- Refactoring migration
- AWS Application Migration Service
- AWS Snow Family
- Repurchasing migration
Explanation
Correct Answer
B:AWS Application Migration Service directly addresses this outcome. AWS Application Migration Service supports continuous replication and cutover for eligible servers. A common relevant example is: an enterprise needs to lift and shift many supported physical or virtual servers to AWS.
Incorrect Answers
A:Refactoring migration instead focuses on a different requirement, such as a business is willing to redesign a tightly coupled application into cloud-native components. Refactoring transforms the application architecture, rather than simply moving the existing runtime to the cloud. It is not the primary match for the requirement described here: replicate and migrate server workloads with minimal application changes.
C:AWS Snow Family instead focuses on a different requirement, such as an organization must transfer a very large volume of data from a remote site with insufficient network bandwidth. AWS Snow devices support moving large datasets when transferring everything over a network is slow or constrained. It is not the primary match for the requirement described here: replicate and migrate server workloads with minimal application changes.
D:Repurchasing migration instead focuses on a different requirement, such as an organization replaces its custom on-premises collaboration tool with a commercial SaaS subscription. Repurchasing changes the software product consumed instead of moving the same application stack. It is not the primary match for the requirement described here: replicate and migrate server workloads with minimal application changes.
Question 167
A stakeholder is considering Root user protection because a newly created AWS account still has its root user's password and no extra protection. What is the MOST relevant capability or benefit?
- Assume an appropriately trusted IAM role across accounts
- Provide temporary credentials to the workload
- Secure the root identity with MFA and avoid routine root use
- Manage shared user permissions
Explanation
Correct Answer
C:Secure the root identity with MFA and avoid routine root use. The root user has highly privileged account-wide capabilities and should be protected and used only when necessary. The stated need is specifically a newly created AWS account still has its root user's password and no extra protection.
Incorrect Answers
A:This outcome fits Cross-account role access: Cross-account role trust enables authorized temporary access without copying long-term keys to the external account. The stakeholder requires the more specific capability provided by Root user protection, not that separate benefit.
B:This outcome fits IAM roles: IAM roles can be assumed to obtain temporary security credentials and avoid embedding long-term keys in applications. The stakeholder requires the more specific capability provided by Root user protection, not that separate benefit.
D:This outcome fits IAM groups: IAM groups collect IAM users for permissions management; they are not assumed identities like IAM roles. The stakeholder requires the more specific capability provided by Root user protection, not that separate benefit.
Question 168
A VPC owner needs network traffic rules at the subnet boundary and wants stateless filtering. Which AWS service or cloud concept is the MOST direct match for this need?
- AWS Site-to-Site VPN
- Security groups
- AWS Transit Gateway
- Network ACLs
Explanation
Correct Answer
D:Network ACLs fits the need because VPC network ACLs apply to subnets and are stateless, unlike security groups' stateful behavior. The relevant capability or responsibility is: Use network access control lists for subnet-level traffic rules.
Incorrect Answers
A:AWS Site-to-Site VPN is associated with a different use case: a company wants an encrypted tunnel between an office network and its AWS VPC over the internet. Site-to-Site VPN provides encrypted tunnels using internet-based connectivity, subject to supported gateway arrangements. The question instead focuses on a VPC owner needs network traffic rules at the subnet boundary and wants stateless filtering; Network ACLs is the more direct match.
B:Security groups is associated with a different use case: an EC2 workload should allow only specified inbound and outbound connections at the resource level. Security groups control permitted traffic for associated resources and automatically allow response traffic to allowed flows. The question instead focuses on a VPC owner needs network traffic rules at the subnet boundary and wants stateless filtering; Network ACLs is the more direct match.
C:AWS Transit Gateway is associated with a different use case: a company needs a central networking hub connecting multiple VPCs and applicable on-premises networks. Transit Gateway acts as a regional routing hub for supported VPC and network attachments. The question instead focuses on a VPC owner needs network traffic rules at the subnet boundary and wants stateless filtering; Network ACLs is the more direct match.
Question 169
A project manager compares Amazon ElastiCache with other AWS concepts while considering this need: a shopping service needs fast in-memory access to frequently requested session information. Which pairing assigns the responsibilities or benefits correctly?
- Amazon ElastiCache: support managed in-memory caching; Amazon DocumentDB: enable supported MongoDB-compatible document workloads
- Amazon ElastiCache: support a managed relational database compatible with supported engines; Amazon Aurora: support managed in-memory caching
- Amazon ElastiCache: support cloud data warehousing; Amazon Redshift: support managed in-memory caching
- Amazon ElastiCache: enable supported MongoDB-compatible document workloads; Amazon DocumentDB: support managed in-memory caching
Explanation
Correct Answer
A:The first pairing identifies Amazon ElastiCache with its actual role: use Amazon ElastiCache for managed in-memory caching. ElastiCache reduces repeated backend reads by keeping appropriate data in memory for fast access. The comparison is valid because Amazon DocumentDB instead addresses use Amazon DocumentDB for supported MongoDB-compatible document workloads.
Incorrect Answers
B:The roles are swapped. Amazon Aurora is associated with consider Amazon Aurora for a managed relational database compatible with supported engines; Amazon ElastiCache instead has the role: Use Amazon ElastiCache for managed in-memory caching. ElastiCache reduces repeated backend reads by keeping appropriate data in memory for fast access.
C:The roles are swapped. Amazon Redshift is associated with use Amazon Redshift for cloud data warehousing; Amazon ElastiCache instead has the role: Use Amazon ElastiCache for managed in-memory caching. ElastiCache reduces repeated backend reads by keeping appropriate data in memory for fast access.
D:The roles are swapped. Amazon DocumentDB is associated with use Amazon DocumentDB for supported MongoDB-compatible document workloads; Amazon ElastiCache instead has the role: Use Amazon ElastiCache for managed in-memory caching. ElastiCache reduces repeated backend reads by keeping appropriate data in memory for fast access.
Question 170
Within the Cloud Technology and Services domain, which business example MOST clearly illustrates AWS Site-to-Site VPN, rather than a different AWS concept?
- A team wants a logically isolated network environment for its AWS compute resources
- A company wants an encrypted tunnel between an office network and its AWS VPC over the internet
- A company needs a central networking hub connecting multiple VPCs and applicable on-premises networks
- A business needs a managed DNS service for resolving public application domain names
Explanation
Correct Answer
B:The decisive requirement is: Use AWS Site-to-Site VPN for encrypted hybrid network connectivity. This is the role of AWS Site-to-Site VPN. Site-to-Site VPN provides encrypted tunnels using internet-based connectivity, subject to supported gateway arrangements.
Incorrect Answers
A:This describes a scenario for Amazon VPC: use Amazon Virtual Private Cloud for customer-defined virtual networking. A VPC is a logically isolated virtual network in which customers can organize subnets, routes and connectivity. It is not the most direct example of AWS Site-to-Site VPN.
C:This describes a scenario for AWS Transit Gateway: use AWS Transit Gateway to simplify multi-network connectivity. Transit Gateway acts as a regional routing hub for supported VPC and network attachments. It is not the most direct example of AWS Site-to-Site VPN.
D:This describes a scenario for Amazon Route 53: use Amazon Route 53 for managed DNS and related domain routing features. Route 53 supplies managed DNS records and routing policies, rather than acting as a virtual machine host. It is not the most direct example of AWS Site-to-Site VPN.