Amazon AWS Certified Cloud Practitioner CLF-C02 Practice Test 7
Question 60
Within the Cloud Technology and Services domain, which business example MOST clearly illustrates Data sovereignty Region choice, rather than a different AWS concept?
- An internet-facing app has regional endpoints and needs stable global entry points for traffic routing
- An application must remain available if one Availability Zone experiences an outage
- A global website wants cached content served closer to its end users
- A government customer requires that certain datasets be stored in a specified legal jurisdiction
Explanation
Correct Answer
D:The decisive requirement is: Select an appropriate available AWS Region and check service data-location behavior. This is the role of Data sovereignty Region choice. Region choice is a customer decision for residency compliance, subject to service availability and contractual requirements.
Incorrect Answers
A:This describes a scenario for AWS Global Accelerator: use AWS Global Accelerator for global network traffic entry and endpoint routing. Global Accelerator provides static anycast IP addresses and routes traffic over the AWS global network to healthy endpoints. It is not the most direct example of Data sovereignty Region choice.
B:This describes a scenario for Multiple Availability Zones: place redundant application components across different AZs within a Region. Multi-AZ deployments can avoid a single-AZ failure taking down the whole application. It is not the most direct example of Data sovereignty Region choice.
C:This describes a scenario for AWS edge location: use edge locations as points near users for supported edge services. AWS edge locations support services such as CloudFront and reduce delivery distance for content or requests. It is not the most direct example of Data sovereignty Region choice.
Question 61
Within the Billing, Pricing, and Support domain, which business example MOST clearly illustrates Savings Plans, rather than a different AWS concept?
- A business expects steady eligible compute spending and can commit to a consistent hourly amount
- A research team runs flexible batch processing jobs that can tolerate interruption
- An organization needs a physical host dedicated to its account for certain licensing or compliance needs
- A company compares incoming internet traffic with traffic sent from AWS to external users
Explanation
Correct Answer
A:The decisive requirement is: Use Savings Plans to reduce eligible compute costs with a usage commitment. This is the role of Savings Plans. Savings Plans provide discounts for covered usage in exchange for a one- or three-year commitment to an hourly spend amount.
Incorrect Answers
B:This describes a scenario for Spot Instances: use spare EC2 capacity at a discount with interruption risk. EC2 Spot Instances offer discounted unused capacity but can be reclaimed with interruption notices. It is not the most direct example of Savings Plans.
C:This describes a scenario for Dedicated Hosts: use Dedicated Hosts when eligible licensing requires host visibility and control. Dedicated Hosts supply dedicated EC2 physical server capacity with characteristics useful for supported bring-your-own-license needs. It is not the most direct example of Savings Plans.
D:This describes a scenario for AWS data transfer charges: account for service- and route-dependent data transfer pricing. Data entering AWS is often priced differently from outbound or cross-Region traffic; actual charges depend on service and path. It is not the most direct example of Savings Plans.
Question 62
Within the Cloud Technology and Services domain, which business example MOST clearly illustrates AWS Glue, rather than a different AWS concept?
- A machine learning team needs tools to build and deploy custom ML models
- A data team needs managed data integration and metadata catalog features for analytics workloads
- An analyst needs to query data already stored in S3 using SQL without provisioning a database server
- A company wants a conversational bot that interprets user requests in a customer service channel
Explanation
Correct Answer
B:The decisive requirement is: Use AWS Glue for data integration, ETL and catalog features. This is the role of AWS Glue. Glue supports preparing and cataloging data; it is not the primary object storage service.
Incorrect Answers
A:This describes a scenario for Amazon SageMaker AI: use Amazon SageMaker AI for managed machine learning development workflows. SageMaker AI supports building, training and deploying ML models rather than simply translating text. It is not the most direct example of AWS Glue.
C:This describes a scenario for Amazon Athena: use Amazon Athena for interactive SQL analysis over data in S3. Athena is a serverless interactive query service for supported data sources such as S3. It is not the most direct example of AWS Glue.
D:This describes a scenario for Amazon Lex: use Amazon Lex for building conversational interfaces. Lex provides conversational AI for chatbots and voice-enabled applications. It is not the most direct example of AWS Glue.
Question 63
A project manager compares AWS Health Dashboard with other AWS concepts while considering this need: a team wants to understand AWS service events that may affect its account or Region. Which pairing assigns the responsibilities or benefits correctly?
- AWS Health Dashboard: support eligible technical or account support cases; AWS Support Center: support service and account events
- AWS Health Dashboard: support eligible response and contact options; AWS Support plans: support service and account events
- AWS Health Dashboard: support service and account events; AWS Support plans: support eligible response and contact options
- AWS Health Dashboard: identify AWS partners and offerings; AWS Partner Network: support service and account events
Explanation
Correct Answer
C:The first pairing identifies AWS Health Dashboard with its actual role: review AWS Health Dashboard for service and account events. AWS Health provides information about relevant service disruptions and scheduled changes; it is distinct from an application metric alarm. The comparison is valid because AWS Support plans instead addresses review current AWS Support plans for eligible response and contact options.
Incorrect Answers
A:The roles are swapped. AWS Support Center is associated with use the AWS Support Center for eligible technical or account support cases; AWS Health Dashboard instead has the role: Review AWS Health Dashboard for service and account events. AWS Health provides information about relevant service disruptions and scheduled changes; it is distinct from an application metric alarm.
B:The roles are swapped. AWS Support plans is associated with review current AWS Support plans for eligible response and contact options; AWS Health Dashboard instead has the role: Review AWS Health Dashboard for service and account events. AWS Health provides information about relevant service disruptions and scheduled changes; it is distinct from an application metric alarm.
D:The roles are swapped. AWS Partner Network is associated with use AWS Partner Network resources to identify AWS partners and offerings; AWS Health Dashboard instead has the role: Review AWS Health Dashboard for service and account events. AWS Health provides information about relevant service disruptions and scheduled changes; it is distinct from an application metric alarm.
Question 64
A security team wants managed detection of suspicious activity from AWS account and workload signals. Which AWS service or cloud concept is the MOST direct match for this need?
- Amazon Inspector
- Encryption in transit
- AWS CloudHSM
- Amazon GuardDuty
Explanation
Correct Answer
D:Amazon GuardDuty fits the need because guardDuty analyzes signals for suspicious or malicious behavior rather than acting as a general-purpose firewall. The relevant capability or responsibility is: Use Amazon GuardDuty to identify potential threats from supported telemetry.
Incorrect Answers
A:Amazon Inspector vulnerability findings is associated with a different use case: an administrator wants continuous assessments of supported workloads for software vulnerabilities. Inspector identifies package and supported workload vulnerabilities; it is not a replacement for data classification. The question instead focuses on a security team wants managed detection of suspicious activity from AWS account and workload signals; Amazon GuardDuty is the more direct match.
B:Encryption in transit is associated with a different use case: a company wants to protect data while it moves between clients and an online service. Encryption in transit protects communications over networks; it differs from encryption of data stored on disks. The question instead focuses on a security team wants managed detection of suspicious activity from AWS account and workload signals; Amazon GuardDuty is the more direct match.
C:AWS CloudHSM hardware keys is associated with a different use case: a company needs dedicated hardware security modules for particular cryptographic key requirements. CloudHSM provides customer-controlled HSM capacity for supported workloads requiring hardware-backed cryptographic operations. The question instead focuses on a security team wants managed detection of suspicious activity from AWS account and workload signals; Amazon GuardDuty is the more direct match.
Question 65
A learner is explaining Amazon EventBridge to colleagues facing this situation: a SaaS app emits business events that must be routed to different AWS targets based on rules. Which explanation is MOST accurate?
- EventBridge matches events against rules and directs them to supported targets.
- Step Functions models stateful application workflows and service coordination rather than storing the business records.
- Amazon Connect offers contact-center services, distinct from a general-purpose messaging queue.
- SES provides email sending and related features for business application communications.
Explanation
Correct Answer
A:EventBridge matches events against rules and directs them to supported targets. The explanation directly connects Amazon EventBridge to use Amazon EventBridge for event bus routing and integration for the stated requirement.
Incorrect Answers
B:This statement is true of AWS Step Functions, which addresses a business process needs a coordinated sequence of several AWS service tasks with branching states. It does not explain the particular role of Amazon EventBridge; EventBridge matches events against rules and directs them to supported targets.
C:This statement is true of Amazon Connect, which addresses a company wants a cloud-based customer contact center with voice and contact workflows. It does not explain the particular role of Amazon EventBridge; EventBridge matches events against rules and directs them to supported targets.
D:This statement is true of Amazon SES, which addresses a company must send transactional confirmation emails from its application. It does not explain the particular role of Amazon EventBridge; EventBridge matches events against rules and directs them to supported targets.
Question 66
Which AWS service or cloud principle is the BEST fit for this outcome or responsibility: decommission an unneeded application rather than migrate it?
- Retaining a workload
- Retiring an application
- AWS Database Migration Service
- Relocating a workload
Explanation
Correct Answer
B:Retiring an application directly addresses this outcome. Retiring eliminates redundant or unused workloads so migration effort is not spent on systems with no continuing value. A common relevant example is: an inventory review discovers a legacy reporting system with no users or business dependency.
Incorrect Answers
A:Retaining a workload instead focuses on a different requirement, such as a business must keep a legacy production system on premises until a contractual restriction expires. Retaining is an intentional decision to defer migration when business or technical constraints make an immediate move inappropriate. It is not the primary match for the requirement described here: decommission an unneeded application rather than migrate it.
C:AWS Database Migration Service instead focuses on a different requirement, such as a company wants to transfer database content to AWS while limiting downtime. AWS DMS can transfer data and support change data capture for applicable database migration scenarios. It is not the primary match for the requirement described here: decommission an unneeded application rather than migrate it.
D:Relocating a workload instead focuses on a different requirement, such as a company can move a supported virtualized environment to AWS while maintaining its familiar virtualization stack. Relocating retains much of the underlying virtualization model while shifting where it runs. It is not the primary match for the requirement described here: decommission an unneeded application rather than migrate it.
Question 67
A learner is explaining Automated operational response to colleagues facing this situation: operators repeatedly perform the same low-risk response to predictable workload events. Which explanation is MOST accurate?
- Cost Optimization includes understanding expenditure, selecting cost-effective resources, and managing demand and supply.
- Cloud design principles favor adaptability and continual evaluation over treating an early configuration as permanently optimal.
- Automating repeatable operations reduces manual error and supports dependable responses while human review remains appropriate for sensitive changes.
- The Well-Architected approach encourages observing real workload outcomes rather than relying only on resource existence.
Explanation
Correct Answer
C:Automating repeatable operations reduces manual error and supports dependable responses while human review remains appropriate for sensitive changes. The explanation directly connects Automated operational response to use automation for routine, repeatable operational actions for the stated requirement.
Incorrect Answers
A:This statement is true of Cost Optimization pillar, which addresses a department wants to eliminate idle spending and understand the cost of delivering business value. It does not explain the particular role of Automated operational response; Automating repeatable operations reduces manual error and supports dependable responses while human review remains appropriate for sensitive changes.
B:This statement is true of Design for expected change, which addresses a company expects its cloud usage and business requirements to evolve frequently. It does not explain the particular role of Automated operational response; Automating repeatable operations reduces manual error and supports dependable responses while human review remains appropriate for sensitive changes.
D:This statement is true of Measure outcomes, which addresses a cloud team cannot tell whether a change improved customer-facing performance. It does not explain the particular role of Automated operational response; Automating repeatable operations reduces manual error and supports dependable responses while human review remains appropriate for sensitive changes.
Question 68
A learner is explaining Multi-factor authentication to colleagues facing this situation: a team wants an additional verification step if a user password is stolen. Which explanation is MOST accurate?
- Cross-account role trust enables authorized temporary access without copying long-term keys to the external account.
- Least privilege restricts permissions to required actions and resources rather than granting broad administrator access.
- Federation integrates identity-provider authentication with AWS access, supporting centralized workforce identity management.
- MFA requires another authentication factor beyond a password and reduces risks from compromised passwords.
Explanation
Correct Answer
D:MFA requires another authentication factor beyond a password and reduces risks from compromised passwords. The explanation directly connects Multi-factor authentication to require MFA for eligible AWS sign-in identities for the stated requirement.
Incorrect Answers
A:This statement is true of Cross-account role access, which addresses an auditor from a separate AWS account needs time-limited access to approved audit resources. It does not explain the particular role of Multi-factor authentication; MFA requires another authentication factor beyond a password and reduces risks from compromised passwords.
B:This statement is true of Principle of least privilege, which addresses a developer only needs read access to one object storage bucket for a project. It does not explain the particular role of Multi-factor authentication; MFA requires another authentication factor beyond a password and reduces risks from compromised passwords.
C:This statement is true of Identity federation, which addresses a company wants staff to authenticate to AWS using its existing corporate identity provider. It does not explain the particular role of Multi-factor authentication; MFA requires another authentication factor beyond a password and reduces risks from compromised passwords.
Question 69
Within the Cloud Technology and Services domain, which business example MOST clearly illustrates Elastic Load Balancing, rather than a different AWS concept?
- A website needs inbound requests distributed among several healthy application targets
- A business runs an application that needs very large in-memory data structures
- An online form should run short application code only when events occur without managing servers
- A small business wants a straightforward virtual private server with bundled resources
Explanation
Correct Answer
A:The decisive requirement is: Use Elastic Load Balancing to distribute incoming workload traffic. This is the role of Elastic Load Balancing. Elastic Load Balancing routes requests or connections to available targets rather than relying on one application instance.
Incorrect Answers
B:This describes a scenario for Memory-optimized EC2: choose an EC2 memory-optimized instance family. Memory-optimized instances emphasize memory capacity relative to processing, fitting memory-intensive workloads. It is not the most direct example of Elastic Load Balancing.
C:This describes a scenario for AWS Lambda: use AWS Lambda for event-driven serverless function execution. Lambda executes event-triggered code without the customer managing underlying servers, subject to service limits. It is not the most direct example of Elastic Load Balancing.
D:This describes a scenario for Amazon Lightsail: use Amazon Lightsail for simplified cloud hosting. Lightsail offers simple virtual server and related resource plans for common small applications and websites. It is not the most direct example of Elastic Load Balancing.
Question 70
A department wants to eliminate idle spending and understand the cost of delivering business value. Which AWS service or cloud concept is the MOST direct match for this need?
- Measure outcomes
- Cost Optimization pillar
- Automated operational response
- Performance Efficiency pillar
Explanation
Correct Answer
B:Cost Optimization pillar fits the need because cost Optimization includes understanding expenditure, selecting cost-effective resources, and managing demand and supply. The relevant capability or responsibility is: Avoid unnecessary expense while delivering required outcomes.
Incorrect Answers
A:Measure outcomes is associated with a different use case: a cloud team cannot tell whether a change improved customer-facing performance. The Well-Architected approach encourages observing real workload outcomes rather than relying only on resource existence. The question instead focuses on a department wants to eliminate idle spending and understand the cost of delivering business value; Cost Optimization pillar is the more direct match.
C:Automated operational response is associated with a different use case: operators repeatedly perform the same low-risk response to predictable workload events. Automating repeatable operations reduces manual error and supports dependable responses while human review remains appropriate for sensitive changes. The question instead focuses on a department wants to eliminate idle spending and understand the cost of delivering business value; Cost Optimization pillar is the more direct match.
D:Performance Efficiency pillar is associated with a different use case: a team compares computing approaches to meet response-time goals without unnecessary resources. The Performance Efficiency pillar focuses on choosing and adapting resources to match workload performance needs. The question instead focuses on a department wants to eliminate idle spending and understand the cost of delivering business value; Cost Optimization pillar is the more direct match.