Amazon AWS Certified Cloud Practitioner CLF-C02 Practice Test 40
Question 390
A stakeholder is considering AWS service APIs because a system needs a programmatic interface to request and manage AWS resources. What is the MOST relevant capability or benefit?
- Call service APIs from application code
- Interact with AWS services through supported API operations
- Combine on-premises infrastructure with cloud resources under a hybrid approach
- Enable supported AWS infrastructure placed on premises
Explanation
Correct Answer
B:Interact with AWS services through supported API operations. AWS APIs enable programmatic service access; management consoles and SDKs are other ways to use such capabilities. The stated need is specifically a system needs a programmatic interface to request and manage AWS resources.
Incorrect Answers
A:This outcome fits AWS SDKs: AWS SDKs provide language-specific APIs and tooling for integrating application software with AWS. The stakeholder requires the more specific capability provided by AWS service APIs, not that separate benefit.
C:This outcome fits Hybrid cloud deployment: A hybrid deployment model uses both on-premises environments and cloud infrastructure rather than moving every workload immediately. The stakeholder requires the more specific capability provided by AWS service APIs, not that separate benefit.
D:This outcome fits AWS Outposts: Outposts extends supported AWS infrastructure and services to customer locations where local processing or data needs apply. The stakeholder requires the more specific capability provided by AWS service APIs, not that separate benefit.
Question 391
A regulated company must identify which of its uploaded records contain sensitive personal information. Which AWS service or cloud concept is the MOST direct match for this need?
- AWS Lambda runtime infrastructure
- AWS EC2 host infrastructure
- Customer data classification
- Customer EC2 guest operating system
Explanation
Correct Answer
C:Customer data classification fits the need because aWS cannot determine the business sensitivity of customer content; data classification and applicable handling policies belong to the customer. The relevant capability or responsibility is: The customer classifies its own data and defines appropriate access requirements.
Incorrect Answers
A:AWS Lambda runtime infrastructure is associated with a different use case: a team adopts Lambda and asks who handles physical servers for function execution. Lambda abstracts away host provisioning and infrastructure operation, while customers remain accountable for their function code and permissions. The question instead focuses on a regulated company must identify which of its uploaded records contain sensitive personal information; Customer data classification is the more direct match.
B:AWS EC2 host infrastructure is associated with a different use case: a company uses EC2 but asks who maintains the hardware supporting its virtual machines. AWS is responsible for facilities, physical servers and underlying cloud infrastructure for EC2. The question instead focuses on a regulated company must identify which of its uploaded records contain sensitive personal information; Customer data classification is the more direct match.
D:Customer EC2 guest operating system is associated with a different use case: a business runs its own Linux installation on an Amazon EC2 virtual machine. For EC2 the customer manages the guest OS, applications and their configuration while AWS manages underlying physical hosts. The question instead focuses on a regulated company must identify which of its uploaded records contain sensitive personal information; Customer data classification is the more direct match.
Question 392
Which AWS service or cloud principle is the BEST fit for this outcome or responsibility: provision capacity when requested rather than waiting for hardware ordering?
- High availability
- Resource pooling
- Elasticity
- On-demand provisioning
Explanation
Correct Answer
D:On-demand provisioning directly addresses this outcome. AWS self-service resource provisioning reduces procurement lead time for many workloads. A common relevant example is: a testing team needs temporary computing capacity immediately for a newly approved project.
Incorrect Answers
A:High availability instead focuses on a different requirement, such as a hospital booking service must remain accessible even when one hosting location becomes unavailable. High availability focuses on minimizing service interruptions through redundancy and service continuity. It is not the primary match for the requirement described here: provision capacity when requested rather than waiting for hardware ordering.
B:Resource pooling instead focuses on a different requirement, such as several departments need separate virtual workloads without each purchasing dedicated physical machines. Cloud resource pooling supports multiple customers and workloads through provider-managed shared infrastructure with isolation controls. It is not the primary match for the requirement described here: provision capacity when requested rather than waiting for hardware ordering.
C:Elasticity instead focuses on a different requirement, such as an online store has unpredictable weekend traffic spikes followed by quiet weekdays. Elasticity aligns live capacity with changing workload demand so idle peak-sized resources do not remain continuously allocated. It is not the primary match for the requirement described here: provision capacity when requested rather than waiting for hardware ordering.
Question 393
A learner is explaining AWS IAM Identity Center to colleagues facing this situation: employees need centralized workforce access to multiple AWS accounts using corporate identities. Which explanation is MOST accurate?
- IAM Identity Center connects workforce identities and assigns access across AWS accounts and compatible applications.
- Cognito focuses on end-user identity for web and mobile applications, not AWS workforce account administration.
- Cross-account role trust enables authorized temporary access without copying long-term keys to the external account.
- The root user has highly privileged account-wide capabilities and should be protected and used only when necessary.
Explanation
Correct Answer
A:IAM Identity Center connects workforce identities and assigns access across AWS accounts and compatible applications. The explanation directly connects AWS IAM Identity Center to use IAM Identity Center for centralized workforce sign-in and account access for the stated requirement.
Incorrect Answers
B:This statement is true of Amazon Cognito identity, which addresses a mobile application needs sign-up and authentication for its end users. It does not explain the particular role of AWS IAM Identity Center; IAM Identity Center connects workforce identities and assigns access across AWS accounts and compatible applications.
C:This statement is true of Cross-account role access, which addresses an auditor from a separate AWS account needs time-limited access to approved audit resources. It does not explain the particular role of AWS IAM Identity Center; IAM Identity Center connects workforce identities and assigns access across AWS accounts and compatible applications.
D:This statement is true of Root user protection, which addresses a newly created AWS account still has its root user's password and no extra protection. It does not explain the particular role of AWS IAM Identity Center; IAM Identity Center connects workforce identities and assigns access across AWS accounts and compatible applications.
Question 394
A project manager compares AWS EC2 host infrastructure with other AWS concepts while considering this need: a company uses EC2 but asks who maintains the hardware supporting its virtual machines. Which pairing assigns the responsibilities or benefits correctly?
- AWS EC2 host infrastructure: the customer configures identity permissions for access to its own data; Customer IAM permissions: aWS maintains the physical host and underlying cloud virtualization infrastructure
- AWS EC2 host infrastructure: aWS maintains the physical host and underlying cloud virtualization infrastructure; Customer IAM permissions: the customer configures identity permissions for access to its own data
- AWS EC2 host infrastructure: the customer chooses applicable encryption configuration and key-access policies; Customer encryption choices: aWS maintains the physical host and underlying cloud virtualization infrastructure
- AWS EC2 host infrastructure: the customer is responsible for the function code and its business logic; Customer Lambda function code: aWS maintains the physical host and underlying cloud virtualization infrastructure
Explanation
Correct Answer
B:The first pairing identifies AWS EC2 host infrastructure with its actual role: aWS maintains the physical host and underlying cloud virtualization infrastructure. AWS is responsible for facilities, physical servers and underlying cloud infrastructure for EC2. The comparison is valid because Customer IAM permissions instead addresses the customer configures identity permissions for access to its own data.
Incorrect Answers
A:The roles are swapped. Customer IAM permissions is associated with the customer configures identity permissions for access to its own data; AWS EC2 host infrastructure instead has the role: AWS maintains the physical host and underlying cloud virtualization infrastructure. AWS is responsible for facilities, physical servers and underlying cloud infrastructure for EC2.
C:The roles are swapped. Customer encryption choices is associated with the customer chooses applicable encryption configuration and key-access policies; AWS EC2 host infrastructure instead has the role: AWS maintains the physical host and underlying cloud virtualization infrastructure. AWS is responsible for facilities, physical servers and underlying cloud infrastructure for EC2.
D:The roles are swapped. Customer Lambda function code is associated with the customer is responsible for the function code and its business logic; AWS EC2 host infrastructure instead has the role: AWS maintains the physical host and underlying cloud virtualization infrastructure. AWS is responsible for facilities, physical servers and underlying cloud infrastructure for EC2.
Question 395
A stakeholder is considering VPC subnets because an administrator needs separate IP address ranges for application and database resources within one VPC. What is the MOST relevant capability or benefit?
- Support dedicated network connectivity to AWS
- Support customer-defined virtual networking
- Divide VPC address space into smaller networks
- Support private service connectivity from a VPC
Explanation
Correct Answer
C:Use VPC subnets to divide VPC address space into smaller networks. Each subnet belongs to one Availability Zone and can have network and routing controls. The stated need is specifically an administrator needs separate IP address ranges for application and database resources within one VPC.
Incorrect Answers
A:This outcome fits AWS Direct Connect: Direct Connect provides private physical network connectivity through supported locations; encryption is a separate consideration. The stakeholder requires the more specific capability provided by VPC subnets, not that separate benefit.
B:This outcome fits Amazon VPC: A VPC is a logically isolated virtual network in which customers can organize subnets, routes and connectivity. The stakeholder requires the more specific capability provided by VPC subnets, not that separate benefit.
D:This outcome fits AWS PrivateLink: PrivateLink uses VPC endpoints to access supported services over private connectivity without traversing the public internet. The stakeholder requires the more specific capability provided by VPC subnets, not that separate benefit.
Question 396
A stakeholder is considering AWS Database Migration Service because an enterprise needs help migrating data from a supported existing database to another endpoint. What is the MOST relevant capability or benefit?
- Provide a managed NoSQL database
- Support cloud data warehousing
- Support graph-oriented data relationships
- Support database transfer and applicable ongoing replication
Explanation
Correct Answer
D:Use AWS DMS for database transfer and applicable ongoing replication. Database Migration Service helps migrate or replicate supported databases; it is not itself an application database engine. The stated need is specifically an enterprise needs help migrating data from a supported existing database to another endpoint.
Incorrect Answers
A:This outcome fits Amazon DynamoDB: DynamoDB supports key-value and document data models and is not a general-purpose relational SQL database. The stakeholder requires the more specific capability provided by AWS Database Migration Service, not that separate benefit.
B:This outcome fits Amazon Redshift: Redshift is designed for analytics and data warehousing rather than being a low-latency transactional key-value store. The stakeholder requires the more specific capability provided by AWS Database Migration Service, not that separate benefit.
C:This outcome fits Amazon Neptune: Neptune supports graph data models for workloads centered on relationships among connected entities. The stakeholder requires the more specific capability provided by AWS Database Migration Service, not that separate benefit.
Question 397
Within the Security and Compliance domain, which business example MOST clearly illustrates Customer S3 bucket access, rather than a different AWS concept?
- A team accidentally publishes an S3 bucket containing internal reports
- A Lambda function processes user data using application code written by a development team
- An organization must decide which employees can read an S3 bucket in its AWS account
- A customer asks who maintains the physical storage systems used by Amazon S3
Explanation
Correct Answer
A:The decisive requirement is: The customer must correct the bucket access policy and exposure settings. This is the role of Customer S3 bucket access. AWS operates the S3 storage infrastructure, but customers configure authorized access to their buckets and objects.
Incorrect Answers
B:This describes a scenario for Customer Lambda function code: the customer is responsible for the function code and its business logic. Serverless eliminates server administration for the customer, not their responsibility for their own application code and data handling. It is not the most direct example of Customer S3 bucket access.
C:This describes a scenario for Customer IAM permissions: the customer configures identity permissions for access to its own data. Even on a managed AWS service, customers remain responsible for authorizing who can access their data. It is not the most direct example of Customer S3 bucket access.
D:This describes a scenario for AWS S3 infrastructure durability: aWS operates and maintains the managed S3 storage infrastructure. AWS handles service infrastructure, while customers still control object permissions, classifications and retention requirements. It is not the most direct example of Customer S3 bucket access.
Question 398
A stakeholder is considering Memory-optimized EC2 because a business runs an application that needs very large in-memory data structures. What is the MOST relevant capability or benefit?
- Adjust instance capacity based on demand
- Meet this requirement: a business runs an application that needs very large in-memory data structures
- Support CPU-heavy work
- Support serverless container compute
Explanation
Correct Answer
B:Choose an EC2 memory-optimized instance family. Memory-optimized instances emphasize memory capacity relative to processing, fitting memory-intensive workloads. The stated need is specifically a business runs an application that needs very large in-memory data structures.
Incorrect Answers
A:This outcome fits EC2 Auto Scaling: EC2 Auto Scaling can add or remove instances based on policies to help meet capacity and availability needs. The stakeholder requires the more specific capability provided by Memory-optimized EC2, not that separate benefit.
C:This outcome fits Compute-optimized EC2: Compute-optimized instances provide a high ratio of compute performance for suitable CPU-bound applications. The stakeholder requires the more specific capability provided by Memory-optimized EC2, not that separate benefit.
D:This outcome fits AWS Fargate: Fargate supplies compute capacity for supported container tasks without customers administering container hosts. The stakeholder requires the more specific capability provided by Memory-optimized EC2, not that separate benefit.
Question 399
A project manager compares AWS Partner Network with other AWS concepts while considering this need: a company needs help finding qualified AWS consulting or software partners. Which pairing assigns the responsibilities or benefits correctly?
- AWS Partner Network: support service and account events; AWS Health Dashboard: identify AWS partners and offerings
- AWS Partner Network: support eligible technical or account support cases; AWS Support Center: identify AWS partners and offerings
- AWS Partner Network: identify AWS partners and offerings; AWS Support Center: support eligible technical or account support cases
- AWS Partner Network: support eligible response and contact options; AWS Support plans: identify AWS partners and offerings
Explanation
Correct Answer
C:The first pairing identifies AWS Partner Network with its actual role: use AWS Partner Network resources to identify AWS partners and offerings. APN connects customers with AWS partners, such as system integrators and independent software vendors. The comparison is valid because AWS Support Center instead addresses use the AWS Support Center for eligible technical or account support cases.
Incorrect Answers
A:The roles are swapped. AWS Health Dashboard is associated with review AWS Health Dashboard for service and account events; AWS Partner Network instead has the role: Use AWS Partner Network resources to identify AWS partners and offerings. APN connects customers with AWS partners, such as system integrators and independent software vendors.
B:The roles are swapped. AWS Support Center is associated with use the AWS Support Center for eligible technical or account support cases; AWS Partner Network instead has the role: Use AWS Partner Network resources to identify AWS partners and offerings. APN connects customers with AWS partners, such as system integrators and independent software vendors.
D:The roles are swapped. AWS Support plans is associated with review current AWS Support plans for eligible response and contact options; AWS Partner Network instead has the role: Use AWS Partner Network resources to identify AWS partners and offerings. APN connects customers with AWS partners, such as system integrators and independent software vendors.
Question 400
A business pays recurring usage charges for AWS resources it uses this month. Which AWS service or cloud concept is the MOST direct match for this need?
- Variable costs
- Total cost of ownership
- Automation savings
- Operating expenditure
Explanation
Correct Answer
D:Operating expenditure fits the need because variable cloud charges generally align with operating expense rather than a customer buying provider hardware. The relevant capability or responsibility is: Classify cloud usage-based service payments as operating spending.
Incorrect Answers
A:Variable costs is associated with a different use case: a retailer wants lower cloud expenses during months with fewer transactions. Variable cost follows utilization or usage rather than remaining fixed at a pre-purchased capacity level. The question instead focuses on a business pays recurring usage charges for AWS resources it uses this month; Operating expenditure is the more direct match.
B:Total cost of ownership is associated with a different use case: a finance director compares AWS migration with building another private data center. Total cost of ownership considers direct and indirect costs, not only an instance hourly price. The question instead focuses on a business pays recurring usage charges for AWS resources it uses this month; Operating expenditure is the more direct match.
C:Automation savings is associated with a different use case: a department repeatedly creates and deletes temporary test environments by hand. Automation can reduce manual effort and mistakes while making temporary resources easier to retire. The question instead focuses on a business pays recurring usage charges for AWS resources it uses this month; Operating expenditure is the more direct match.