Pass Amazon AWS Certified Cloud Practitioner CLF-C02 Exam in First Attempt Guaranteed!

AWS Application Migration Service instead focuses on a different requirement, such as an enterprise needs to lift and shift many supported physical or virtual servers to AWS. AWS Application Migration Service supports continuous replication and cutover for eligible servers. It is not the primary match for the requirement described here: migrate and optionally replicate data between supported database endpoints.

AWS Migration Hub instead focuses on a different requirement, such as a program manager needs a consolidated place to follow the progress of multiple migration activities. AWS Migration Hub provides visibility into discovered applications and migration activity across supported migration tools. It is not the primary match for the requirement described here: migrate and optionally replicate data between supported database endpoints.

Relocating a workload instead focuses on a different requirement, such as a company can move a supported virtualized environment to AWS while maintaining its familiar virtualization stack. Relocating retains much of the underlying virtualization model while shifting where it runs. It is not the primary match for the requirement described here: migrate and optionally replicate data between supported database endpoints.

This describes a scenario for Amazon Inspector vulnerability findings: use Amazon Inspector for vulnerability management findings. Inspector identifies package and supported workload vulnerabilities; it is not a replacement for data classification. It is not the most direct example of Encryption in transit.

This describes a scenario for AWS Organizations governance: use AWS Organizations for multi-account governance and consolidated controls. Organizations groups accounts and supports policies and billing consolidation; it does not itself analyze threats. It is not the most direct example of Encryption in transit.

This describes a scenario for AWS KMS managed keys: use AWS Key Management Service for supported cryptographic key management. AWS KMS manages keys and enforces key-use controls for integrated services; it is not a general database service. It is not the most direct example of Encryption in transit.

This outcome fits Refactoring migration: Refactoring transforms the application architecture, rather than simply moving the existing runtime to the cloud. The stakeholder requires the more specific capability provided by Relocating a workload, not that separate benefit.

This outcome fits AWS Cloud Adoption Framework: AWS CAF helps align business and technology stakeholders throughout cloud adoption instead of treating migration as a server-copy exercise. The stakeholder requires the more specific capability provided by Relocating a workload, not that separate benefit.

This outcome fits AWS Application Migration Service: AWS Application Migration Service supports continuous replication and cutover for eligible servers. The stakeholder requires the more specific capability provided by Relocating a workload, not that separate benefit.

This outcome fits Amazon Redshift: Redshift is designed for analytics and data warehousing rather than being a low-latency transactional key-value store. The stakeholder requires the more specific capability provided by Amazon ElastiCache, not that separate benefit.

This outcome fits Amazon DocumentDB: DocumentDB is a managed document database, distinct from relational engines and caching services. The stakeholder requires the more specific capability provided by Amazon ElastiCache, not that separate benefit.

This outcome fits AWS Database Migration Service: Database Migration Service helps migrate or replicate supported databases; it is not itself an application database engine. The stakeholder requires the more specific capability provided by Amazon ElastiCache, not that separate benefit.

Multi-factor authentication is associated with a different use case: a team wants an additional verification step if a user password is stolen. MFA requires another authentication factor beyond a password and reduces risks from compromised passwords. The question instead focuses on an application needs temporary AWS credentials after assuming an authorized IAM role; AWS STS is the more direct match.

Amazon Cognito identity is associated with a different use case: a mobile application needs sign-up and authentication for its end users. Cognito focuses on end-user identity for web and mobile applications, not AWS workforce account administration. The question instead focuses on an application needs temporary AWS credentials after assuming an authorized IAM role; AWS STS is the more direct match.

Identity federation is associated with a different use case: a company wants staff to authenticate to AWS using its existing corporate identity provider. Federation integrates identity-provider authentication with AWS access, supporting centralized workforce identity management. The question instead focuses on an application needs temporary AWS credentials after assuming an authorized IAM role; AWS STS is the more direct match.

This outcome fits AWS EC2 host infrastructure: AWS is responsible for facilities, physical servers and underlying cloud infrastructure for EC2. The stakeholder requires the more specific capability provided by Customer Lambda function code, not that separate benefit.

This outcome fits Shared responsibility varies by service: Responsibility depends on the service model: managing an EC2 guest OS differs from managing application code on Lambda. The stakeholder requires the more specific capability provided by Customer Lambda function code, not that separate benefit.

This outcome fits Customer encryption choices: Managed services can provide encryption capabilities, but customers must select and govern settings needed for their data. The stakeholder requires the more specific capability provided by Customer Lambda function code, not that separate benefit.

This describes a scenario for Variable costs: let eligible costs rise and fall with actual resource consumption. Variable cost follows utilization or usage rather than remaining fixed at a pre-purchased capacity level. It is not the most direct example of Automation savings.

This describes a scenario for Idle resource spending: avoid paying for unnecessary always-on capacity by managing idle resources. Idle provisioned resources may continue to generate charges; matching uptime to need reduces wasted spending. It is not the most direct example of Automation savings.

This describes a scenario for Total cost of ownership: include facilities, hardware, operations, and staffing in a long-term cost comparison. Total cost of ownership considers direct and indirect costs, not only an instance hourly price. It is not the most direct example of Automation savings.

This statement is true of Storage-optimized EC2, which addresses an analytics node needs high local disk throughput for temporary data processing. It does not explain the particular role of Amazon EC2; EC2 offers virtual servers with selectable instance types and customer-managed guest operating systems.

This statement is true of Elastic Load Balancing, which addresses a website needs inbound requests distributed among several healthy application targets. It does not explain the particular role of Amazon EC2; EC2 offers virtual servers with selectable instance types and customer-managed guest operating systems.

This statement is true of Amazon ECS, which addresses an application team needs AWS-native orchestration of container workloads. It does not explain the particular role of Amazon EC2; EC2 offers virtual servers with selectable instance types and customer-managed guest operating systems.

This describes a scenario for Encryption in transit: use supported encrypted network connections such as TLS. Encryption in transit protects communications over networks; it differs from encryption of data stored on disks. It is not the most direct example of AWS CloudTrail.

This describes a scenario for Defense in depth: apply layered identity, network and data-protection controls. Defense in depth reduces dependence on a single security mechanism by using multiple complementary safeguards. It is not the most direct example of AWS CloudTrail.

This describes a scenario for AWS KMS managed keys: use AWS Key Management Service for supported cryptographic key management. AWS KMS manages keys and enforces key-use controls for integrated services; it is not a general database service. It is not the most direct example of AWS CloudTrail.

The roles are swapped. Encryption at rest is associated with enable applicable data-at-rest encryption on storage services; AWS Audit Manager instead has the role: Use AWS Audit Manager to organize control evidence collection. AWS Audit Manager can collect evidence for assessments but does not replace an organization's compliance decisions.

The roles are swapped. Security logging retention is associated with define appropriate access controls and retention for collected audit logs; AWS Audit Manager instead has the role: Use AWS Audit Manager to organize control evidence collection. AWS Audit Manager can collect evidence for assessments but does not replace an organization's compliance decisions.

The roles are swapped. AWS CloudHSM is associated with use AWS CloudHSM to access dedicated managed hardware security modules; AWS Audit Manager instead has the role: Use AWS Audit Manager to organize control evidence collection. AWS Audit Manager can collect evidence for assessments but does not replace an organization's compliance decisions.

AWS Support plans instead focuses on a different requirement, such as a business wants to compare the support response options included with different AWS support tiers. Support benefits and service-level commitments depend on the chosen plan and current AWS support terms. It is not the primary match for the requirement described here: enable available best-practice checks.

AWS Partner Network instead focuses on a different requirement, such as a company needs help finding qualified AWS consulting or software partners. APN connects customers with AWS partners, such as system integrators and independent software vendors. It is not the primary match for the requirement described here: enable available best-practice checks.

AWS Health Dashboard instead focuses on a different requirement, such as a team wants to understand AWS service events that may affect its account or Region. AWS Health provides information about relevant service disruptions and scheduled changes; it is distinct from an application metric alarm. It is not the primary match for the requirement described here: enable available best-practice checks.