Amazon AWS Certified Cloud Practitioner CLF-C02 Practice Test 32
Question 310
A learner is explaining S3 Standard to colleagues facing this situation: an application frequently reads newly uploaded customer content with unpredictable access. Which explanation is MOST accurate?
- EFS is a managed elastic network file system for supported Linux workloads, unlike S3 object API storage.
- S3 Standard is a general-purpose storage class suitable for frequently accessed objects requiring high availability.
- Deep Archive prioritizes low storage cost and accepts retrieval delays, unlike immediately accessed S3 classes.
- AWS Backup centralizes backup administration across supported resources; it is separate from normal object lifecycle transitions.
Explanation
Correct Answer
B:S3 Standard is a general-purpose storage class suitable for frequently accessed objects requiring high availability. The explanation directly connects S3 Standard to use S3 Standard for frequently accessed object data for the stated requirement.
Incorrect Answers
A:This statement is true of Amazon EFS shared files, which addresses multiple Linux EC2 instances require a shared elastic file system supporting common file semantics. It does not explain the particular role of S3 Standard; S3 Standard is a general-purpose storage class suitable for frequently accessed objects requiring high availability.
C:This statement is true of S3 Glacier Deep Archive, which addresses a regulator requires long-term retention of records that will almost never be retrieved. It does not explain the particular role of S3 Standard; S3 Standard is a general-purpose storage class suitable for frequently accessed objects requiring high availability.
D:This statement is true of AWS Backup, which addresses a company needs centralized policies and visibility across supported AWS resource backups. It does not explain the particular role of S3 Standard; S3 Standard is a general-purpose storage class suitable for frequently accessed objects requiring high availability.
Question 311
A project manager compares AWS Database Migration Service with other AWS concepts while considering this need: an enterprise needs help migrating data from a supported existing database to another endpoint. Which pairing assigns the responsibilities or benefits correctly?
- AWS Database Migration Service: support graph-oriented data relationships; Amazon Neptune: support database transfer and applicable ongoing replication
- AWS Database Migration Service: support cloud data warehousing; Amazon Redshift: support database transfer and applicable ongoing replication
- AWS Database Migration Service: support database transfer and applicable ongoing replication; Amazon Redshift: support cloud data warehousing
- AWS Database Migration Service: support a managed relational database compatible with supported engines; Amazon Aurora: support database transfer and applicable ongoing replication
Explanation
Correct Answer
C:The first pairing identifies AWS Database Migration Service with its actual role: use AWS DMS for database transfer and applicable ongoing replication. Database Migration Service helps migrate or replicate supported databases; it is not itself an application database engine. The comparison is valid because Amazon Redshift instead addresses use Amazon Redshift for cloud data warehousing.
Incorrect Answers
A:The roles are swapped. Amazon Neptune is associated with use Amazon Neptune for graph-oriented data relationships; AWS Database Migration Service instead has the role: Use AWS DMS for database transfer and applicable ongoing replication. Database Migration Service helps migrate or replicate supported databases; it is not itself an application database engine.
B:The roles are swapped. Amazon Redshift is associated with use Amazon Redshift for cloud data warehousing; AWS Database Migration Service instead has the role: Use AWS DMS for database transfer and applicable ongoing replication. Database Migration Service helps migrate or replicate supported databases; it is not itself an application database engine.
D:The roles are swapped. Amazon Aurora is associated with consider Amazon Aurora for a managed relational database compatible with supported engines; AWS Database Migration Service instead has the role: Use AWS DMS for database transfer and applicable ongoing replication. Database Migration Service helps migrate or replicate supported databases; it is not itself an application database engine.
Question 312
A project manager compares AWS Glue with other AWS concepts while considering this need: a data team needs managed data integration and metadata catalog features for analytics workloads. Which pairing assigns the responsibilities or benefits correctly?
- AWS Glue: support real-time streaming data ingestion and processing use cases; Amazon Kinesis: support data integration, ETL and catalog features
- AWS Glue: support interactive SQL analysis over data in S3; Amazon Athena: support data integration, ETL and catalog features
- AWS Glue: enable supported business intelligence and analytics experiences; Amazon Quick: support data integration, ETL and catalog features
- AWS Glue: support data integration, ETL and catalog features; Amazon Athena: support interactive SQL analysis over data in S3
Explanation
Correct Answer
D:The first pairing identifies AWS Glue with its actual role: use AWS Glue for data integration, ETL and catalog features. Glue supports preparing and cataloging data; it is not the primary object storage service. The comparison is valid because Amazon Athena instead addresses use Amazon Athena for interactive SQL analysis over data in S3.
Incorrect Answers
A:The roles are swapped. Amazon Kinesis is associated with use Amazon Kinesis for real-time streaming data ingestion and processing use cases; AWS Glue instead has the role: Use AWS Glue for data integration, ETL and catalog features. Glue supports preparing and cataloging data; it is not the primary object storage service.
B:The roles are swapped. Amazon Athena is associated with use Amazon Athena for interactive SQL analysis over data in S3; AWS Glue instead has the role: Use AWS Glue for data integration, ETL and catalog features. Glue supports preparing and cataloging data; it is not the primary object storage service.
C:The roles are swapped. Amazon Quick is associated with use Amazon Quick for supported business intelligence and analytics experiences; AWS Glue instead has the role: Use AWS Glue for data integration, ETL and catalog features. Glue supports preparing and cataloging data; it is not the primary object storage service.
Question 313
A project manager compares S3 Glacier Deep Archive with other AWS concepts while considering this need: a regulator requires long-term retention of records that will almost never be retrieved. Which pairing assigns the responsibilities or benefits correctly?
- S3 Glacier Deep Archive: support very rarely accessed long-term archival data; S3 Standard: support frequently accessed object data
- S3 Glacier Deep Archive: support eligible ephemeral EC2 local storage; EC2 instance store: support very rarely accessed long-term archival data
- S3 Glacier Deep Archive: support frequently accessed object data; S3 Standard: support very rarely accessed long-term archival data
- S3 Glacier Deep Archive: support persistent EC2 block storage; Amazon EBS: support very rarely accessed long-term archival data
Explanation
Correct Answer
A:The first pairing identifies S3 Glacier Deep Archive with its actual role: use S3 Glacier Deep Archive for very rarely accessed long-term archival data. Deep Archive prioritizes low storage cost and accepts retrieval delays, unlike immediately accessed S3 classes. The comparison is valid because S3 Standard storage instead addresses use S3 Standard for frequently accessed object data.
Incorrect Answers
B:The roles are swapped. EC2 instance store is associated with use instance store for eligible ephemeral EC2 local storage; S3 Glacier Deep Archive instead has the role: Use S3 Glacier Deep Archive for very rarely accessed long-term archival data. Deep Archive prioritizes low storage cost and accepts retrieval delays, unlike immediately accessed S3 classes.
C:The roles are swapped. S3 Standard is associated with use S3 Standard for frequently accessed object data; S3 Glacier Deep Archive instead has the role: Use S3 Glacier Deep Archive for very rarely accessed long-term archival data. Deep Archive prioritizes low storage cost and accepts retrieval delays, unlike immediately accessed S3 classes.
D:The roles are swapped. Amazon EBS is associated with use Amazon EBS volumes for persistent EC2 block storage; S3 Glacier Deep Archive instead has the role: Use S3 Glacier Deep Archive for very rarely accessed long-term archival data. Deep Archive prioritizes low storage cost and accepts retrieval delays, unlike immediately accessed S3 classes.
Question 314
A learner is explaining Amazon Rekognition to colleagues facing this situation: a media team wants managed analysis of image or video content without developing its own vision model. Which explanation is MOST accurate?
- Athena is a serverless interactive query service for supported data sources such as S3.
- Rekognition applies pretrained computer vision to supported image and video analysis tasks.
- Amazon Quick is the current AWS branding for business intelligence capabilities previously associated with QuickSight.
- Kinesis includes streaming data capabilities suitable for near-real-time events.
Explanation
Correct Answer
B:Rekognition applies pretrained computer vision to supported image and video analysis tasks. The explanation directly connects Amazon Rekognition to use Amazon Rekognition for image and video analysis capabilities for the stated requirement.
Incorrect Answers
A:This statement is true of Amazon Athena, which addresses an analyst needs to query data already stored in S3 using SQL without provisioning a database server. It does not explain the particular role of Amazon Rekognition; Rekognition applies pretrained computer vision to supported image and video analysis tasks.
C:This statement is true of Amazon Quick, which addresses a business wants dashboards and business intelligence over curated organizational data. It does not explain the particular role of Amazon Rekognition; Rekognition applies pretrained computer vision to supported image and video analysis tasks.
D:This statement is true of Amazon Kinesis, which addresses an application wants to capture and process a continuous stream of event records. It does not explain the particular role of Amazon Rekognition; Rekognition applies pretrained computer vision to supported image and video analysis tasks.
Question 315
A stakeholder is considering Reduced infrastructure maintenance because a small team prefers to focus on application features instead of replacing failed server hardware. What is the MOST relevant capability or benefit?
- Launch and remove temporary testing resources without permanent equipment purchases
- Adjust allocated resources upward and downward as actual demand changes
- Delegate physical infrastructure operation to the cloud provider
- Maintain operation despite certain component failures
Explanation
Correct Answer
C:Delegate physical infrastructure operation to the cloud provider. AWS handles the facilities and underlying physical infrastructure, freeing customers from those data-center tasks. The stated need is specifically a small team prefers to focus on application features instead of replacing failed server hardware.
Incorrect Answers
A:This outcome fits Rapid experimentation: On-demand cloud environments make experiments easier to start and stop as new ideas are evaluated. The stakeholder requires the more specific capability provided by Reduced infrastructure maintenance, not that separate benefit.
B:This outcome fits Elasticity: Elasticity aligns live capacity with changing workload demand so idle peak-sized resources do not remain continuously allocated. The stakeholder requires the more specific capability provided by Reduced infrastructure maintenance, not that separate benefit.
D:This outcome fits Fault tolerance: Fault tolerance keeps service functioning when failures happen, often through replicated or redundant components. The stakeholder requires the more specific capability provided by Reduced infrastructure maintenance, not that separate benefit.
Question 316
A project manager compares IAM Access Analyzer with other AWS concepts while considering this need: a security team wants to identify unintended external access to supported AWS resources. Which pairing assigns the responsibilities or benefits correctly?
- IAM Access Analyzer: federate existing enterprise identities instead of issuing separate permanent credentials; Identity federation: examine resource access and policy exposure
- IAM Access Analyzer: secure the root identity with MFA and avoid routine root use; Root user protection: examine resource access and policy exposure
- IAM Access Analyzer: grant only the permissions necessary to perform approved duties; Principle of least privilege: examine resource access and policy exposure
- IAM Access Analyzer: examine resource access and policy exposure; Identity federation: federate existing enterprise identities instead of issuing separate permanent credentials
Explanation
Correct Answer
D:The first pairing identifies IAM Access Analyzer with its actual role: use IAM Access Analyzer to examine resource access and policy exposure. Access Analyzer helps identify access findings; it does not by itself remove the underlying excessive permissions. The comparison is valid because Identity federation instead addresses federate existing enterprise identities instead of issuing separate permanent credentials.
Incorrect Answers
A:The roles are swapped. Identity federation is associated with federate existing enterprise identities instead of issuing separate permanent credentials; IAM Access Analyzer instead has the role: Use IAM Access Analyzer to examine resource access and policy exposure. Access Analyzer helps identify access findings; it does not by itself remove the underlying excessive permissions.
B:The roles are swapped. Root user protection is associated with secure the root identity with MFA and avoid routine root use; IAM Access Analyzer instead has the role: Use IAM Access Analyzer to examine resource access and policy exposure. Access Analyzer helps identify access findings; it does not by itself remove the underlying excessive permissions.
C:The roles are swapped. Principle of least privilege is associated with grant only the permissions necessary to perform approved duties; IAM Access Analyzer instead has the role: Use IAM Access Analyzer to examine resource access and policy exposure. Access Analyzer helps identify access findings; it does not by itself remove the underlying excessive permissions.
Question 317
An internet-facing app has regional endpoints and needs stable global entry points for traffic routing. Which AWS service or cloud concept is the MOST direct match for this need?
- AWS Global Accelerator
- AWS edge location
- AWS Region
- Availability Zone
Explanation
Correct Answer
A:AWS Global Accelerator fits the need because global Accelerator provides static anycast IP addresses and routes traffic over the AWS global network to healthy endpoints. The relevant capability or responsibility is: Use AWS Global Accelerator for global network traffic entry and endpoint routing.
Incorrect Answers
B:AWS edge location is associated with a different use case: a global website wants cached content served closer to its end users. AWS edge locations support services such as CloudFront and reduce delivery distance for content or requests. The question instead focuses on an internet-facing app has regional endpoints and needs stable global entry points for traffic routing; AWS Global Accelerator is the more direct match.
C:AWS Region is associated with a different use case: a company is selecting a separate geographic AWS location for a workload with residency requirements. A Region is a geographically separate area containing multiple Availability Zones; customers select deployment Regions. The question instead focuses on an internet-facing app has regional endpoints and needs stable global entry points for traffic routing; AWS Global Accelerator is the more direct match.
D:Availability Zone is associated with a different use case: a service must use separate isolated locations within one selected AWS Region. Availability Zones are distinct locations within a Region designed to reduce shared failure risks. The question instead focuses on an internet-facing app has regional endpoints and needs stable global entry points for traffic routing; AWS Global Accelerator is the more direct match.
Question 318
Within the Cloud Technology and Services domain, which business example MOST clearly illustrates Amazon Rekognition, rather than a different AWS concept?
- A data team needs managed data integration and metadata catalog features for analytics workloads
- A media team wants managed analysis of image or video content without developing its own vision model
- An analyst needs to query data already stored in S3 using SQL without provisioning a database server
- A team wants managed compute for large-scale big-data frameworks such as Apache Spark
Explanation
Correct Answer
B:The decisive requirement is: Use Amazon Rekognition for image and video analysis capabilities. This is the role of Amazon Rekognition. Rekognition applies pretrained computer vision to supported image and video analysis tasks.
Incorrect Answers
A:This describes a scenario for AWS Glue: use AWS Glue for data integration, ETL and catalog features. Glue supports preparing and cataloging data; it is not the primary object storage service. It is not the most direct example of Amazon Rekognition.
C:This describes a scenario for Amazon Athena: use Amazon Athena for interactive SQL analysis over data in S3. Athena is a serverless interactive query service for supported data sources such as S3. It is not the most direct example of Amazon Rekognition.
D:This describes a scenario for Amazon EMR: use Amazon EMR for managed big-data processing frameworks. EMR runs supported distributed analytics frameworks and is not a relational transaction service. It is not the most direct example of Amazon Rekognition.
Question 319
Within the Security and Compliance domain, which business example MOST clearly illustrates AWS KMS, rather than a different AWS concept?
- Operations needs metrics and alarms for an AWS workload's performance
- A security analyst needs to see which principal made an AWS control-plane API call
- An application team needs centralized control of encryption key use and auditability
- A company needs dedicated hardware security modules for particular cryptographic key requirements
Explanation
Correct Answer
C:The decisive requirement is: Use AWS Key Management Service for supported cryptographic key management. This is the role of AWS KMS. AWS KMS manages keys and enforces key-use controls for integrated services; it is not a general database service.
Incorrect Answers
A:This describes a scenario for Amazon CloudWatch monitoring: monitor metrics, logs and alarm conditions with Amazon CloudWatch. CloudWatch supplies monitoring and observability signals, not an authoritative history of every API management change. It is not the most direct example of AWS KMS.
B:This describes a scenario for AWS CloudTrail API auditing: record account API activity with AWS CloudTrail. CloudTrail helps audit actions performed through the console, SDK and API; it differs from performance metrics. It is not the most direct example of AWS KMS.
D:This describes a scenario for AWS CloudHSM hardware keys: use AWS CloudHSM to access dedicated managed hardware security modules. CloudHSM provides customer-controlled HSM capacity for supported workloads requiring hardware-backed cryptographic operations. It is not the most direct example of AWS KMS.
Question 320
Within the Billing, Pricing, and Support domain, which business example MOST clearly illustrates AWS Cost Explorer, rather than a different AWS concept?
- A project manager wants an alert when forecast monthly cloud spending will exceed a set threshold
- A solutions advisor wants to estimate charges for a proposed AWS environment before it is created
- A new learner wants to understand eligible introductory usage offers and their limits
- A finance analyst wants to see past AWS spending trends by service and forecast likely future cost
Explanation
Correct Answer
D:The decisive requirement is: Use AWS Cost Explorer to explore and forecast AWS cost and usage. This is the role of AWS Cost Explorer. Cost Explorer offers interactive cost analysis and forecasting over supported billing data.
Incorrect Answers
A:This describes a scenario for AWS Budgets: use AWS Budgets to track spending or usage against defined budget thresholds. Budgets supports cost and usage alerts relative to planned thresholds; it is distinct from an invoice payment processor. It is not the most direct example of AWS Cost Explorer.
B:This describes a scenario for AWS Pricing Calculator: use AWS Pricing Calculator for planned service cost estimates. Pricing Calculator models estimated charges from selected assumptions rather than reading an existing account's actual spending. It is not the most direct example of AWS Cost Explorer.
C:This describes a scenario for AWS Free Tier: review the AWS Free Tier terms and eligible service offers before launching resources. AWS Free Tier offers depend on account eligibility, service and current pricing terms; excess usage can still produce charges. It is not the most direct example of AWS Cost Explorer.