Amazon AWS Certified Cloud Practitioner CLF-C02 Practice Test 19
Question 180
A stakeholder is considering Amazon Rekognition because a media team wants managed analysis of image or video content without developing its own vision model. What is the MOST relevant capability or benefit?
- Support data integration, ETL and catalog features
- Support managed big-data processing frameworks
- Support managed machine learning development workflows
- Support image and video analysis capabilities
Explanation
Correct Answer
D:Use Amazon Rekognition for image and video analysis capabilities. Rekognition applies pretrained computer vision to supported image and video analysis tasks. The stated need is specifically a media team wants managed analysis of image or video content without developing its own vision model.
Incorrect Answers
A:This outcome fits AWS Glue: Glue supports preparing and cataloging data; it is not the primary object storage service. The stakeholder requires the more specific capability provided by Amazon Rekognition, not that separate benefit.
B:This outcome fits Amazon EMR: EMR runs supported distributed analytics frameworks and is not a relational transaction service. The stakeholder requires the more specific capability provided by Amazon Rekognition, not that separate benefit.
C:This outcome fits Amazon SageMaker AI: SageMaker AI supports building, training and deploying ML models rather than simply translating text. The stakeholder requires the more specific capability provided by Amazon Rekognition, not that separate benefit.
Question 181
A learner is explaining AWS compliance shared model to colleagues facing this situation: a regulated company assumes AWS compliance certificates automatically satisfy every customer-specific obligation. Which explanation is MOST accurate?
- AWS compliance programs cover AWS's side of applicable frameworks, while customers must evaluate and satisfy their own duties.
- AWS Audit Manager can collect evidence for assessments but does not replace an organization's compliance decisions.
- Compliance and data-location choices remain customer decisions even when AWS operates the service infrastructure.
- AWS Artifact gives customers on-demand access to available AWS assurance reports and selected compliance agreements.
Explanation
Correct Answer
A:AWS compliance programs cover AWS's side of applicable frameworks, while customers must evaluate and satisfy their own duties. The explanation directly connects AWS compliance shared model to evaluate customer controls and obligations alongside AWS's assurance documentation for the stated requirement.
Incorrect Answers
B:This statement is true of AWS Audit Manager evidence, which addresses a compliance team needs help collecting evidence against a recurring internal control assessment. It does not explain the particular role of AWS compliance shared model; AWS compliance programs cover AWS's side of applicable frameworks, while customers must evaluate and satisfy their own duties.
C:This statement is true of Data residency considerations, which addresses a healthcare organization has contractual restrictions on the country in which records may be stored. It does not explain the particular role of AWS compliance shared model; AWS compliance programs cover AWS's side of applicable frameworks, while customers must evaluate and satisfy their own duties.
D:This statement is true of AWS Artifact compliance reports, which addresses an auditor asks a company for AWS third-party compliance and assurance documentation. It does not explain the particular role of AWS compliance shared model; AWS compliance programs cover AWS's side of applicable frameworks, while customers must evaluate and satisfy their own duties.
Question 182
A stakeholder is considering Sustainability pillar because a company wants to reduce the environmental impact of its cloud workloads. What is the MOST relevant capability or benefit?
- Represent infrastructure configuration declaratively and apply repeatable changes
- Minimize energy consumption and environmental impact per unit of work
- Revisit architecture decisions as requirements and capabilities change
- Protect information and systems using risk-aware controls
Explanation
Correct Answer
B:Minimize energy consumption and environmental impact per unit of work. The Sustainability pillar encourages efficient resource use and reduced environmental impact of running workloads. The stated need is specifically a company wants to reduce the environmental impact of its cloud workloads.
Incorrect Answers
A:This outcome fits Infrastructure changes as code: Infrastructure as code reduces manual drift and supports consistent, reviewable infrastructure provisioning. The stakeholder requires the more specific capability provided by Sustainability pillar, not that separate benefit.
C:This outcome fits Design for expected change: Cloud design principles favor adaptability and continual evaluation over treating an early configuration as permanently optimal. The stakeholder requires the more specific capability provided by Sustainability pillar, not that separate benefit.
D:This outcome fits Security pillar: The Security pillar addresses identity, detection, infrastructure and data protection in the AWS Well-Architected Framework. The stakeholder requires the more specific capability provided by Sustainability pillar, not that separate benefit.
Question 183
Which AWS service or cloud principle is the BEST fit for this outcome or responsibility: consult the AWS Security Blog for guidance and updates?
- AWS Marketplace
- AWS WAF application protection
- AWS Security Blog guidance
- AWS Trusted Advisor
Explanation
Correct Answer
C:AWS Security Blog guidance directly addresses this outcome. AWS's official security blog explains security topics, unlike a service that enforces network traffic filtering. A common relevant example is: security engineers want AWS-authored technical articles discussing security practices.
Incorrect Answers
A:AWS Marketplace security software instead focuses on a different requirement, such as a company wants to evaluate a third-party security product compatible with AWS workloads. Marketplace lets customers discover and procure partner solutions; it is not the same as an AWS native security monitoring service. It is not the primary match for the requirement described here: consult the AWS Security Blog for guidance and updates.
B:AWS WAF application protection instead focuses on a different requirement, such as a public website needs rules to inspect common malicious HTTP requests. WAF acts at web request level and can help mitigate common HTTP attack patterns. It is not the primary match for the requirement described here: consult the AWS Security Blog for guidance and updates.
D:AWS Trusted Advisor security checks instead focuses on a different requirement, such as a small team wants to find certain common AWS account configuration risks through recommendations. Trusted Advisor provides best-practice guidance in supported categories including security, cost and service limits. It is not the primary match for the requirement described here: consult the AWS Security Blog for guidance and updates.
Question 184
A learner is explaining AWS CloudTrail to colleagues facing this situation: a security analyst needs to see which principal made an AWS control-plane API call. Which explanation is MOST accurate?
- Defense in depth reduces dependence on a single security mechanism by using multiple complementary safeguards.
- Macie uses managed data discovery to help identify sensitive information in S3 objects, not network packet attacks.
- AWS Audit Manager can collect evidence for assessments but does not replace an organization's compliance decisions.
- CloudTrail helps audit actions performed through the console, SDK and API; it differs from performance metrics.
Explanation
Correct Answer
D:CloudTrail helps audit actions performed through the console, SDK and API; it differs from performance metrics. The explanation directly connects AWS CloudTrail to record account API activity with AWS CloudTrail for the stated requirement.
Incorrect Answers
A:This statement is true of Defense in depth, which addresses a security team wants more than a single network restriction protecting sensitive records. It does not explain the particular role of AWS CloudTrail; CloudTrail helps audit actions performed through the console, SDK and API; it differs from performance metrics.
B:This statement is true of Amazon Macie sensitive S3 data, which addresses a team needs to discover potentially sensitive information stored within Amazon S3. It does not explain the particular role of AWS CloudTrail; CloudTrail helps audit actions performed through the console, SDK and API; it differs from performance metrics.
C:This statement is true of AWS Audit Manager evidence, which addresses a compliance team needs help collecting evidence against a recurring internal control assessment. It does not explain the particular role of AWS CloudTrail; CloudTrail helps audit actions performed through the console, SDK and API; it differs from performance metrics.
Question 185
A learner is explaining AWS Region to colleagues facing this situation: a company is selecting a separate geographic AWS location for a workload with residency requirements. Which explanation is MOST accurate?
- A Region is a geographically separate area containing multiple Availability Zones; customers select deployment Regions.
- AWS edge locations support services such as CloudFront and reduce delivery distance for content or requests.
- Availability Zones are distinct locations within a Region designed to reduce shared failure risks.
- Deploying across Regions can address geographic disruptions, customer latency and residency objectives at higher complexity.
Explanation
Correct Answer
A:A Region is a geographically separate area containing multiple Availability Zones; customers select deployment Regions. The explanation directly connects AWS Region to choose an AWS Region to select a geographic cloud infrastructure location for the stated requirement.
Incorrect Answers
B:This statement is true of AWS edge location, which addresses a global website wants cached content served closer to its end users. It does not explain the particular role of AWS Region; A Region is a geographically separate area containing multiple Availability Zones; customers select deployment Regions.
C:This statement is true of Availability Zone, which addresses a service must use separate isolated locations within one selected AWS Region. It does not explain the particular role of AWS Region; A Region is a geographically separate area containing multiple Availability Zones; customers select deployment Regions.
D:This statement is true of Multiple AWS Regions, which addresses a business needs a disaster recovery location outside the primary Region. It does not explain the particular role of AWS Region; A Region is a geographically separate area containing multiple Availability Zones; customers select deployment Regions.
Question 186
Which AWS service or cloud principle is the BEST fit for this outcome or responsibility: combine on-premises infrastructure with cloud resources under a hybrid approach?
- AWS CLI
- Hybrid cloud deployment
- AWS Outposts
- AWS SDKs
Explanation
Correct Answer
B:Hybrid cloud deployment directly addresses this outcome. A hybrid deployment model uses both on-premises environments and cloud infrastructure rather than moving every workload immediately. A common relevant example is: a bank must keep some applications on its own premises while using AWS for other services.
Incorrect Answers
A:AWS CLI instead focuses on a different requirement, such as an operations engineer wants to run repeatable AWS service commands from a terminal script. The AWS CLI exposes AWS service operations through command-line commands suitable for controlled automation. It is not the primary match for the requirement described here: combine on-premises infrastructure with cloud resources under a hybrid approach.
C:AWS Outposts instead focuses on a different requirement, such as a manufacturer needs AWS-managed hardware and selected cloud services in its own facility. Outposts extends supported AWS infrastructure and services to customer locations where local processing or data needs apply. It is not the primary match for the requirement described here: combine on-premises infrastructure with cloud resources under a hybrid approach.
D:AWS SDKs instead focuses on a different requirement, such as a developer wants a Java application to interact with AWS services using language libraries. AWS SDKs provide language-specific APIs and tooling for integrating application software with AWS. It is not the primary match for the requirement described here: combine on-premises infrastructure with cloud resources under a hybrid approach.
Question 187
A learner is explaining AWS Firewall Manager to colleagues facing this situation: a security administrator needs consistent firewall policies across multiple AWS accounts. Which explanation is MOST accurate?
- WAF acts at web request level and can help mitigate common HTTP attack patterns.
- Knowledge Center provides guidance and answers; it is an information resource, not an active security enforcement tool.
- Firewall Manager helps manage AWS WAF, Shield and related policies across an AWS Organizations environment.
- Trusted Advisor provides best-practice guidance in supported categories including security, cost and service limits.
Explanation
Correct Answer
C:Firewall Manager helps manage AWS WAF, Shield and related policies across an AWS Organizations environment. The explanation directly connects AWS Firewall Manager to use AWS Firewall Manager to manage supported security policies centrally for the stated requirement.
Incorrect Answers
A:This statement is true of AWS WAF application protection, which addresses a public website needs rules to inspect common malicious HTTP requests. It does not explain the particular role of AWS Firewall Manager; Firewall Manager helps manage AWS WAF, Shield and related policies across an AWS Organizations environment.
B:This statement is true of AWS Knowledge Center, which addresses an AWS user wants AWS-authored answers to common service troubleshooting and account questions. It does not explain the particular role of AWS Firewall Manager; Firewall Manager helps manage AWS WAF, Shield and related policies across an AWS Organizations environment.
D:This statement is true of AWS Trusted Advisor security checks, which addresses a small team wants to find certain common AWS account configuration risks through recommendations. It does not explain the particular role of AWS Firewall Manager; Firewall Manager helps manage AWS WAF, Shield and related policies across an AWS Organizations environment.
Question 188
A learner is explaining Edge content delivery to colleagues facing this situation: a media company serves static images to viewers in many countries and wants them delivered near viewers. Which explanation is MOST accurate?
- AWS self-service resource provisioning reduces procurement lead time for many workloads.
- Cloud resource pooling supports multiple customers and workloads through provider-managed shared infrastructure with isolation controls.
- Managed AWS offerings take on selected provisioning and maintenance tasks while customers remain responsible for their data and access policies.
- An edge content delivery network reduces distance to cached content and can improve latency for geographically distributed users.
Explanation
Correct Answer
D:An edge content delivery network reduces distance to cached content and can improve latency for geographically distributed users. The explanation directly connects Edge content delivery to cache frequently requested content at locations closer to end users for the stated requirement.
Incorrect Answers
A:This statement is true of On-demand provisioning, which addresses a testing team needs temporary computing capacity immediately for a newly approved project. It does not explain the particular role of Edge content delivery; An edge content delivery network reduces distance to cached content and can improve latency for geographically distributed users.
B:This statement is true of Resource pooling, which addresses several departments need separate virtual workloads without each purchasing dedicated physical machines. It does not explain the particular role of Edge content delivery; An edge content delivery network reduces distance to cached content and can improve latency for geographically distributed users.
C:This statement is true of Managed service operations, which addresses an analytics team prefers a managed database rather than operating its own database host. It does not explain the particular role of Edge content delivery; An edge content delivery network reduces distance to cached content and can improve latency for geographically distributed users.
Question 189
Which AWS service or cloud principle is the BEST fit for this outcome or responsibility: decouple components with durable message queues?
- Amazon SQS
- Amazon EventBridge
- Amazon SES
- Amazon SNS
Explanation
Correct Answer
A:Amazon SQS directly addresses this outcome. SQS buffers work items for asynchronous consumption, unlike a publish-subscribe notification fan-out service. A common relevant example is: an order processing system wants queued messages so producers and workers do not need to run at the same speed.
Incorrect Answers
B:Amazon EventBridge instead focuses on a different requirement, such as a SaaS app emits business events that must be routed to different AWS targets based on rules. EventBridge matches events against rules and directs them to supported targets. It is not the primary match for the requirement described here: decouple components with durable message queues.
C:Amazon SES instead focuses on a different requirement, such as a company must send transactional confirmation emails from its application. SES provides email sending and related features for business application communications. It is not the primary match for the requirement described here: decouple components with durable message queues.
D:Amazon SNS instead focuses on a different requirement, such as a monitoring event should send notifications to multiple subscribed endpoints. SNS distributes published messages to subscribed destinations; it is not a relational database. It is not the primary match for the requirement described here: decouple components with durable message queues.
Question 190
An enterprise needs to lift and shift many supported physical or virtual servers to AWS. Which AWS service or cloud concept is the MOST direct match for this need?
- Refactoring migration
- AWS Application Migration Service
- AWS Cloud Adoption Framework
- Retiring an application
Explanation
Correct Answer
B:AWS Application Migration Service fits the need because aWS Application Migration Service supports continuous replication and cutover for eligible servers. The relevant capability or responsibility is: Replicate and migrate server workloads with minimal application changes.
Incorrect Answers
A:Refactoring migration is associated with a different use case: a business is willing to redesign a tightly coupled application into cloud-native components. Refactoring transforms the application architecture, rather than simply moving the existing runtime to the cloud. The question instead focuses on an enterprise needs to lift and shift many supported physical or virtual servers to AWS; AWS Application Migration Service is the more direct match.
C:AWS Cloud Adoption Framework is associated with a different use case: executives need a structured view of people, governance, business, platform, security, and operations during cloud adoption. AWS CAF helps align business and technology stakeholders throughout cloud adoption instead of treating migration as a server-copy exercise. The question instead focuses on an enterprise needs to lift and shift many supported physical or virtual servers to AWS; AWS Application Migration Service is the more direct match.
D:Retiring an application is associated with a different use case: an inventory review discovers a legacy reporting system with no users or business dependency. Retiring eliminates redundant or unused workloads so migration effort is not spent on systems with no continuing value. The question instead focuses on an enterprise needs to lift and shift many supported physical or virtual servers to AWS; AWS Application Migration Service is the more direct match.