Amazon AWS Certified Cloud Practitioner CLF-C02 Practice Test 60
Question 590
A project manager compares Data residency considerations with other AWS concepts while considering this need: a healthcare organization has contractual restrictions on the country in which records may be stored. Which pairing assigns the responsibilities or benefits correctly?
- Data residency considerations: define appropriate access controls and retention for collected audit logs; Security logging retention: evaluate Region and service data-location capabilities against applicable residency requirements
- Data residency considerations: evaluate Region and service data-location capabilities against applicable residency requirements; Security logging retention: define appropriate access controls and retention for collected audit logs
- Data residency considerations: record account API activity and identify the calling principal; AWS CloudTrail: evaluate Region and service data-location capabilities against applicable residency requirements
- Data residency considerations: support vulnerability management findings; Amazon Inspector: evaluate Region and service data-location capabilities against applicable residency requirements
Explanation
Correct Answer
B:The first pairing identifies Data residency considerations with its actual role: evaluate Region and service data-location capabilities against applicable residency requirements. Compliance and data-location choices remain customer decisions even when AWS operates the service infrastructure. The comparison is valid because Security logging retention instead addresses define appropriate access controls and retention for collected audit logs.
Incorrect Answers
A:The roles are swapped. Security logging retention is associated with define appropriate access controls and retention for collected audit logs; Data residency considerations instead has the role: Evaluate Region and service data-location capabilities against applicable residency requirements. Compliance and data-location choices remain customer decisions even when AWS operates the service infrastructure.
C:The roles are swapped. AWS CloudTrail is associated with record account API activity with AWS CloudTrail; Data residency considerations instead has the role: Evaluate Region and service data-location capabilities against applicable residency requirements. Compliance and data-location choices remain customer decisions even when AWS operates the service infrastructure.
D:The roles are swapped. Amazon Inspector is associated with use Amazon Inspector for vulnerability management findings; Data residency considerations instead has the role: Evaluate Region and service data-location capabilities against applicable residency requirements. Compliance and data-location choices remain customer decisions even when AWS operates the service infrastructure.
Question 591
A manufacturer wants connected devices to exchange messages securely with cloud applications. Which AWS service or cloud concept is the MOST direct match for this need?
- Amazon SES
- Amazon SNS
- AWS IoT Core
- Amazon Connect
Explanation
Correct Answer
C:AWS IoT Core fits the need because ioT Core helps connect and manage communications with devices, not an end-user email service. The relevant capability or responsibility is: Use AWS IoT Core for supported Internet of Things device connectivity.
Incorrect Answers
A:Amazon SES is associated with a different use case: a company must send transactional confirmation emails from its application. SES provides email sending and related features for business application communications. The question instead focuses on a manufacturer wants connected devices to exchange messages securely with cloud applications; AWS IoT Core is the more direct match.
B:Amazon SNS is associated with a different use case: a monitoring event should send notifications to multiple subscribed endpoints. SNS distributes published messages to subscribed destinations; it is not a relational database. The question instead focuses on a manufacturer wants connected devices to exchange messages securely with cloud applications; AWS IoT Core is the more direct match.
D:Amazon Connect is associated with a different use case: a company wants a cloud-based customer contact center with voice and contact workflows. Amazon Connect offers contact-center services, distinct from a general-purpose messaging queue. The question instead focuses on a manufacturer wants connected devices to exchange messages securely with cloud applications; AWS IoT Core is the more direct match.
Question 592
A stakeholder is considering AWS physical data center security because an AWS customer asks who guards the buildings where AWS runs underlying server hardware. What is the MOST relevant capability or benefit?
- The customer configures database users and permissions for its application data
- AWS manages the underlying compute infrastructure for Lambda execution
- The customer chooses applicable encryption configuration and key-access policies
- AWS secures the physical facilities that host its cloud infrastructure
Explanation
Correct Answer
D:AWS secures the physical facilities that host its cloud infrastructure. Physical facility access controls and provider-owned hardware protection fall under AWS security of the cloud. The stated need is specifically an AWS customer asks who guards the buildings where AWS runs underlying server hardware.
Incorrect Answers
A:This outcome fits Customer RDS data permissions: Selecting a managed database does not transfer responsibility for customer identities and data authorization to AWS. The stakeholder requires the more specific capability provided by AWS physical data center security, not that separate benefit.
B:This outcome fits AWS Lambda runtime infrastructure: Lambda abstracts away host provisioning and infrastructure operation, while customers remain accountable for their function code and permissions. The stakeholder requires the more specific capability provided by AWS physical data center security, not that separate benefit.
C:This outcome fits Customer encryption choices: Managed services can provide encryption capabilities, but customers must select and govern settings needed for their data. The stakeholder requires the more specific capability provided by AWS physical data center security, not that separate benefit.
Question 593
Which AWS service or cloud principle is the BEST fit for this outcome or responsibility: meet this requirement: an organization must transfer a very large volume of data from a remote site with insufficient network bandwidth?
- AWS Snow Family
- AWS Database Migration Service
- Retaining a workload
- Refactoring migration
Explanation
Correct Answer
A:AWS Snow Family directly addresses this outcome. AWS Snow devices support moving large datasets when transferring everything over a network is slow or constrained. A common relevant example is: an organization must transfer a very large volume of data from a remote site with insufficient network bandwidth.
Incorrect Answers
B:AWS Database Migration Service instead focuses on a different requirement, such as a company wants to transfer database content to AWS while limiting downtime. AWS DMS can transfer data and support change data capture for applicable database migration scenarios. It is not the primary match for the requirement described here: meet this requirement: an organization must transfer a very large volume of data from a remote site with insufficient network bandwidth.
C:Retaining a workload instead focuses on a different requirement, such as a business must keep a legacy production system on premises until a contractual restriction expires. Retaining is an intentional decision to defer migration when business or technical constraints make an immediate move inappropriate. It is not the primary match for the requirement described here: meet this requirement: an organization must transfer a very large volume of data from a remote site with insufficient network bandwidth.
D:Refactoring migration instead focuses on a different requirement, such as a business is willing to redesign a tightly coupled application into cloud-native components. Refactoring transforms the application architecture, rather than simply moving the existing runtime to the cloud. It is not the primary match for the requirement described here: meet this requirement: an organization must transfer a very large volume of data from a remote site with insufficient network bandwidth.
Question 594
A project manager compares Automation savings with other AWS concepts while considering this need: a department repeatedly creates and deletes temporary test environments by hand. Which pairing assigns the responsibilities or benefits correctly?
- Automation savings: let eligible costs rise and fall with actual resource consumption; Variable costs: reduce repetitive administrative work through consistent automation
- Automation savings: reduce repetitive administrative work through consistent automation; Idle resource spending: avoid paying for unnecessary always-on capacity by managing idle resources
- Automation savings: include facilities, hardware, operations, and staffing in a long-term cost comparison; Total cost of ownership: reduce repetitive administrative work through consistent automation
- Automation savings: avoid paying for unnecessary always-on capacity by managing idle resources; Idle resource spending: reduce repetitive administrative work through consistent automation
Explanation
Correct Answer
B:The first pairing identifies Automation savings with its actual role: reduce repetitive administrative work through consistent automation. Automation can reduce manual effort and mistakes while making temporary resources easier to retire. The comparison is valid because Idle resource spending instead addresses avoid paying for unnecessary always-on capacity by managing idle resources.
Incorrect Answers
A:The roles are swapped. Variable costs is associated with let eligible costs rise and fall with actual resource consumption; Automation savings instead has the role: Reduce repetitive administrative work through consistent automation. Automation can reduce manual effort and mistakes while making temporary resources easier to retire.
C:The roles are swapped. Total cost of ownership is associated with include facilities, hardware, operations, and staffing in a long-term cost comparison; Automation savings instead has the role: Reduce repetitive administrative work through consistent automation. Automation can reduce manual effort and mistakes while making temporary resources easier to retire.
D:The roles are swapped. Idle resource spending is associated with avoid paying for unnecessary always-on capacity by managing idle resources; Automation savings instead has the role: Reduce repetitive administrative work through consistent automation. Automation can reduce manual effort and mistakes while making temporary resources easier to retire.
Question 595
Which AWS service or cloud principle is the BEST fit for this outcome or responsibility: deploy services geographically close to international users?
- Business continuity
- Edge content delivery
- Global reach
- Reduced infrastructure maintenance
Explanation
Correct Answer
C:Global reach directly addresses this outcome. AWS Regions enable deployment in multiple geographies without building and operating a physical data center in each market. A common relevant example is: a software provider wants to serve customers from multiple continents without building overseas data centers.
Incorrect Answers
A:Business continuity instead focuses on a different requirement, such as a retailer needs a plan for resuming critical operations after a major disruption. Business continuity combines preparedness and recovery measures rather than assuming failures will never occur. It is not the primary match for the requirement described here: deploy services geographically close to international users.
B:Edge content delivery instead focuses on a different requirement, such as a media company serves static images to viewers in many countries and wants them delivered near viewers. An edge content delivery network reduces distance to cached content and can improve latency for geographically distributed users. It is not the primary match for the requirement described here: deploy services geographically close to international users.
D:Reduced infrastructure maintenance instead focuses on a different requirement, such as a small team prefers to focus on application features instead of replacing failed server hardware. AWS handles the facilities and underlying physical infrastructure, freeing customers from those data-center tasks. It is not the primary match for the requirement described here: deploy services geographically close to international users.
Question 596
A project manager compares Elasticity with other AWS concepts while considering this need: an online store has unpredictable weekend traffic spikes followed by quiet weekdays. Which pairing assigns the responsibilities or benefits correctly?
- Elasticity: pay for consumed services instead of buying hardware for the annual peak; Pay-as-you-go consumption: adjust allocated resources upward and downward as actual demand changes
- Elasticity: maintain operation despite certain component failures; Fault tolerance: adjust allocated resources upward and downward as actual demand changes
- Elasticity: launch and remove temporary testing resources without permanent equipment purchases; Rapid experimentation: adjust allocated resources upward and downward as actual demand changes
- Elasticity: adjust allocated resources upward and downward as actual demand changes; Rapid experimentation: launch and remove temporary testing resources without permanent equipment purchases
Explanation
Correct Answer
D:The first pairing identifies Elasticity with its actual role: adjust allocated resources upward and downward as actual demand changes. Elasticity aligns live capacity with changing workload demand so idle peak-sized resources do not remain continuously allocated. The comparison is valid because Rapid experimentation instead addresses launch and remove temporary testing resources without permanent equipment purchases.
Incorrect Answers
A:The roles are swapped. Pay-as-you-go consumption is associated with pay for consumed services instead of buying hardware for the annual peak; Elasticity instead has the role: Adjust allocated resources upward and downward as actual demand changes. Elasticity aligns live capacity with changing workload demand so idle peak-sized resources do not remain continuously allocated.
B:The roles are swapped. Fault tolerance is associated with maintain operation despite certain component failures; Elasticity instead has the role: Adjust allocated resources upward and downward as actual demand changes. Elasticity aligns live capacity with changing workload demand so idle peak-sized resources do not remain continuously allocated.
C:The roles are swapped. Rapid experimentation is associated with launch and remove temporary testing resources without permanent equipment purchases; Elasticity instead has the role: Adjust allocated resources upward and downward as actual demand changes. Elasticity aligns live capacity with changing workload demand so idle peak-sized resources do not remain continuously allocated.
Question 597
A data team needs a managed warehouse for analytical SQL queries across large structured datasets. Which AWS service or cloud concept is the MOST direct match for this need?
- Amazon Redshift
- Amazon RDS
- Amazon DynamoDB
- Amazon Aurora
Explanation
Correct Answer
A:Amazon Redshift fits the need because redshift is designed for analytics and data warehousing rather than being a low-latency transactional key-value store. The relevant capability or responsibility is: Use Amazon Redshift for cloud data warehousing.
Incorrect Answers
B:Amazon RDS relational database is associated with a different use case: a web application needs a managed relational database that supports SQL queries and transactions. RDS manages selected database infrastructure work for relational workloads, while users still control database schema and access. The question instead focuses on a data team needs a managed warehouse for analytical SQL queries across large structured datasets; Amazon Redshift is the more direct match.
C:Amazon DynamoDB is associated with a different use case: a game needs low-latency access to large volumes of key-value player state without managing servers. DynamoDB supports key-value and document data models and is not a general-purpose relational SQL database. The question instead focuses on a data team needs a managed warehouse for analytical SQL queries across large structured datasets; Amazon Redshift is the more direct match.
D:Amazon Aurora is associated with a different use case: a growing business wants a cloud-optimized managed relational engine compatible with MySQL or PostgreSQL. Aurora is an AWS-managed relational database designed for cloud operation and compatible with selected open-source SQL engines. The question instead focuses on a data team needs a managed warehouse for analytical SQL queries across large structured datasets; Amazon Redshift is the more direct match.
Question 598
Which AWS service or cloud principle is the BEST fit for this outcome or responsibility: support publish-subscribe notifications and fan-out?
- AWS IoT Core
- Amazon SNS
- Amazon Connect
- Amazon EventBridge
Explanation
Correct Answer
B:Amazon SNS directly addresses this outcome. SNS distributes published messages to subscribed destinations; it is not a relational database. A common relevant example is: a monitoring event should send notifications to multiple subscribed endpoints.
Incorrect Answers
A:AWS IoT Core instead focuses on a different requirement, such as a manufacturer wants connected devices to exchange messages securely with cloud applications. IoT Core helps connect and manage communications with devices, not an end-user email service. It is not the primary match for the requirement described here: support publish-subscribe notifications and fan-out.
C:Amazon Connect instead focuses on a different requirement, such as a company wants a cloud-based customer contact center with voice and contact workflows. Amazon Connect offers contact-center services, distinct from a general-purpose messaging queue. It is not the primary match for the requirement described here: support publish-subscribe notifications and fan-out.
D:Amazon EventBridge instead focuses on a different requirement, such as a SaaS app emits business events that must be routed to different AWS targets based on rules. EventBridge matches events against rules and directs them to supported targets. It is not the primary match for the requirement described here: support publish-subscribe notifications and fan-out.
Question 599
A business is willing to redesign a tightly coupled application into cloud-native components. Which AWS service or cloud concept is the MOST direct match for this need?
- Rehosting migration
- AWS Cloud Adoption Framework
- Refactoring migration
- Retiring an application
Explanation
Correct Answer
C:Refactoring migration fits the need because refactoring transforms the application architecture, rather than simply moving the existing runtime to the cloud. The relevant capability or responsibility is: Make significant application changes to use cloud-native capabilities.
Incorrect Answers
A:Rehosting migration is associated with a different use case: a company wants to move an existing server-based application to AWS with minimal application changes. Rehosting, often called lift and shift, relocates a workload without significant application redesign. The question instead focuses on a business is willing to redesign a tightly coupled application into cloud-native components; Refactoring migration is the more direct match.
B:AWS Cloud Adoption Framework is associated with a different use case: executives need a structured view of people, governance, business, platform, security, and operations during cloud adoption. AWS CAF helps align business and technology stakeholders throughout cloud adoption instead of treating migration as a server-copy exercise. The question instead focuses on a business is willing to redesign a tightly coupled application into cloud-native components; Refactoring migration is the more direct match.
D:Retiring an application is associated with a different use case: an inventory review discovers a legacy reporting system with no users or business dependency. Retiring eliminates redundant or unused workloads so migration effort is not spent on systems with no continuing value. The question instead focuses on a business is willing to redesign a tightly coupled application into cloud-native components; Refactoring migration is the more direct match.
Question 600
A project manager compares Availability Zone with other AWS concepts while considering this need: a service must use separate isolated locations within one selected AWS Region. Which pairing assigns the responsibilities or benefits correctly?
- Availability Zone: use edge locations as points near users for supported edge services; AWS edge location: distribute components across isolated locations inside one geographic Region
- Availability Zone: provide part of a multi-Region continuity plan; Multiple AWS Regions: distribute components across isolated locations inside one geographic Region
- Availability Zone: meet this requirement: a government customer requires that certain datasets be stored in a specified legal jurisdiction; Data sovereignty Region choice: distribute components across isolated locations inside one geographic Region
- Availability Zone: distribute components across isolated locations inside one geographic Region; Multiple AWS Regions: provide part of a multi-Region continuity plan
Explanation
Correct Answer
D:The first pairing identifies Availability Zone with its actual role: distribute components across Availability Zones for fault isolation. Availability Zones are distinct locations within a Region designed to reduce shared failure risks. The comparison is valid because Multiple AWS Regions instead addresses use a separate AWS Region as part of a multi-Region continuity plan.
Incorrect Answers
A:The roles are swapped. AWS edge location is associated with use edge locations as points near users for supported edge services; Availability Zone instead has the role: Distribute components across Availability Zones for fault isolation. Availability Zones are distinct locations within a Region designed to reduce shared failure risks.
B:The roles are swapped. Multiple AWS Regions is associated with use a separate AWS Region as part of a multi-Region continuity plan; Availability Zone instead has the role: Distribute components across Availability Zones for fault isolation. Availability Zones are distinct locations within a Region designed to reduce shared failure risks.
C:The roles are swapped. Data sovereignty Region choice is associated with select an appropriate available AWS Region and check service data-location behavior; Availability Zone instead has the role: Distribute components across Availability Zones for fault isolation. Availability Zones are distinct locations within a Region designed to reduce shared failure risks.