Amazon AWS Certified Cloud Practitioner CLF-C02 Practice Test 73
Question 720
Which AWS service or cloud principle is the BEST fit for this outcome or responsibility: support data integration, ETL and catalog features?
- Amazon Lex
- Amazon EMR
- Amazon SageMaker AI
- AWS Glue
Explanation
Correct Answer
D:AWS Glue directly addresses this outcome. Glue supports preparing and cataloging data; it is not the primary object storage service. A common relevant example is: a data team needs managed data integration and metadata catalog features for analytics workloads.
Incorrect Answers
A:Amazon Lex instead focuses on a different requirement, such as a company wants a conversational bot that interprets user requests in a customer service channel. Lex provides conversational AI for chatbots and voice-enabled applications. It is not the primary match for the requirement described here: support data integration, ETL and catalog features.
B:Amazon EMR instead focuses on a different requirement, such as a team wants managed compute for large-scale big-data frameworks such as Apache Spark. EMR runs supported distributed analytics frameworks and is not a relational transaction service. It is not the primary match for the requirement described here: support data integration, ETL and catalog features.
C:Amazon SageMaker AI instead focuses on a different requirement, such as a machine learning team needs tools to build and deploy custom ML models. SageMaker AI supports building, training and deploying ML models rather than simply translating text. It is not the primary match for the requirement described here: support data integration, ETL and catalog features.
Question 721
A game needs low-latency access to large volumes of key-value player state without managing servers. Which AWS service or cloud concept is the MOST direct match for this need?
- Amazon DynamoDB
- AWS Database Migration Service
- Amazon Aurora
- Amazon Redshift
Explanation
Correct Answer
A:Amazon DynamoDB fits the need because dynamoDB supports key-value and document data models and is not a general-purpose relational SQL database. The relevant capability or responsibility is: Use Amazon DynamoDB as a managed NoSQL database.
Incorrect Answers
B:AWS Database Migration Service is associated with a different use case: an enterprise needs help migrating data from a supported existing database to another endpoint. Database Migration Service helps migrate or replicate supported databases; it is not itself an application database engine. The question instead focuses on a game needs low-latency access to large volumes of key-value player state without managing servers; Amazon DynamoDB is the more direct match.
C:Amazon Aurora is associated with a different use case: a growing business wants a cloud-optimized managed relational engine compatible with MySQL or PostgreSQL. Aurora is an AWS-managed relational database designed for cloud operation and compatible with selected open-source SQL engines. The question instead focuses on a game needs low-latency access to large volumes of key-value player state without managing servers; Amazon DynamoDB is the more direct match.
D:Amazon Redshift is associated with a different use case: a data team needs a managed warehouse for analytical SQL queries across large structured datasets. Redshift is designed for analytics and data warehousing rather than being a low-latency transactional key-value store. The question instead focuses on a game needs low-latency access to large volumes of key-value player state without managing servers; Amazon DynamoDB is the more direct match.
Question 722
A project manager compares Reduced infrastructure maintenance with other AWS concepts while considering this need: a small team prefers to focus on application features instead of replacing failed server hardware. Which pairing assigns the responsibilities or benefits correctly?
- Reduced infrastructure maintenance: experiment and deliver changes rapidly using on-demand resources; Agility: delegate physical infrastructure operation to the cloud provider
- Reduced infrastructure maintenance: delegate physical infrastructure operation to the cloud provider; Rapid experimentation: launch and remove temporary testing resources without permanent equipment purchases
- Reduced infrastructure maintenance: maintain operation despite certain component failures; Fault tolerance: delegate physical infrastructure operation to the cloud provider
- Reduced infrastructure maintenance: launch and remove temporary testing resources without permanent equipment purchases; Rapid experimentation: delegate physical infrastructure operation to the cloud provider
Explanation
Correct Answer
B:The first pairing identifies Reduced infrastructure maintenance with its actual role: delegate physical infrastructure operation to the cloud provider. AWS handles the facilities and underlying physical infrastructure, freeing customers from those data-center tasks. The comparison is valid because Rapid experimentation instead addresses launch and remove temporary testing resources without permanent equipment purchases.
Incorrect Answers
A:The roles are swapped. Agility is associated with experiment and deliver changes rapidly using on-demand resources; Reduced infrastructure maintenance instead has the role: Delegate physical infrastructure operation to the cloud provider. AWS handles the facilities and underlying physical infrastructure, freeing customers from those data-center tasks.
C:The roles are swapped. Fault tolerance is associated with maintain operation despite certain component failures; Reduced infrastructure maintenance instead has the role: Delegate physical infrastructure operation to the cloud provider. AWS handles the facilities and underlying physical infrastructure, freeing customers from those data-center tasks.
D:The roles are swapped. Rapid experimentation is associated with launch and remove temporary testing resources without permanent equipment purchases; Reduced infrastructure maintenance instead has the role: Delegate physical infrastructure operation to the cloud provider. AWS handles the facilities and underlying physical infrastructure, freeing customers from those data-center tasks.
Question 723
A learner is explaining License-included pricing to colleagues facing this situation: a team prefers a cloud software offering whose price includes the relevant software license. Which explanation is MOST accurate?
- Idle provisioned resources may continue to generate charges; matching uptime to need reduces wasted spending.
- Rightsizing replaces persistently oversized resources with suitable capacities to improve cost efficiency.
- License-included pricing is distinct from providing a separately acquired customer license under BYOL.
- Owning servers typically requires an upfront capital investment, unlike metered cloud resource consumption.
Explanation
Correct Answer
C:License-included pricing is distinct from providing a separately acquired customer license under BYOL. The explanation directly connects License-included pricing to use a service price that bundles eligible software licensing for the stated requirement.
Incorrect Answers
A:This statement is true of Idle resource spending, which addresses an internal testing account leaves unused compute instances running every weekend. It does not explain the particular role of License-included pricing; License-included pricing is distinct from providing a separately acquired customer license under BYOL.
B:This statement is true of Rightsizing, which addresses a monthly review finds development servers consume little of their allocated CPU and memory. It does not explain the particular role of License-included pricing; License-included pricing is distinct from providing a separately acquired customer license under BYOL.
D:This statement is true of Capital expenditure, which addresses a company buys servers and pays the purchase cost before those servers are used. It does not explain the particular role of License-included pricing; License-included pricing is distinct from providing a separately acquired customer license under BYOL.
Question 724
A learner is explaining AWS KMS to colleagues facing this situation: an application team needs centralized control of encryption key use and auditability. Which explanation is MOST accurate?
- GuardDuty analyzes signals for suspicious or malicious behavior rather than acting as a general-purpose firewall.
- Collecting logs alone is insufficient unless their access, preservation and lifecycle align with organizational policy.
- CloudHSM provides customer-controlled HSM capacity for supported workloads requiring hardware-backed cryptographic operations.
- AWS KMS manages keys and enforces key-use controls for integrated services; it is not a general database service.
Explanation
Correct Answer
D:AWS KMS manages keys and enforces key-use controls for integrated services; it is not a general database service. The explanation directly connects AWS KMS to use AWS Key Management Service for supported cryptographic key management for the stated requirement.
Incorrect Answers
A:This statement is true of Amazon GuardDuty threat detection, which addresses a security team wants managed detection of suspicious activity from AWS account and workload signals. It does not explain the particular role of AWS KMS; AWS KMS manages keys and enforces key-use controls for integrated services; it is not a general database service.
B:This statement is true of Security logging retention, which addresses an organization wants security logs available for internal investigations for a defined period. It does not explain the particular role of AWS KMS; AWS KMS manages keys and enforces key-use controls for integrated services; it is not a general database service.
C:This statement is true of AWS CloudHSM hardware keys, which addresses a company needs dedicated hardware security modules for particular cryptographic key requirements. It does not explain the particular role of AWS KMS; AWS KMS manages keys and enforces key-use controls for integrated services; it is not a general database service.
Question 725
A project manager compares Amazon SageMaker AI with other AWS concepts while considering this need: a machine learning team needs tools to build and deploy custom ML models. Which pairing assigns the responsibilities or benefits correctly?
- Amazon SageMaker AI: support managed machine learning development workflows; AWS Glue: support data integration, ETL and catalog features
- Amazon SageMaker AI: support image and video analysis capabilities; Amazon Rekognition: support managed machine learning development workflows
- Amazon SageMaker AI: support managed big-data processing frameworks; Amazon EMR: support managed machine learning development workflows
- Amazon SageMaker AI: support data integration, ETL and catalog features; AWS Glue: support managed machine learning development workflows
Explanation
Correct Answer
A:The first pairing identifies Amazon SageMaker AI with its actual role: use Amazon SageMaker AI for managed machine learning development workflows. SageMaker AI supports building, training and deploying ML models rather than simply translating text. The comparison is valid because AWS Glue instead addresses use AWS Glue for data integration, ETL and catalog features.
Incorrect Answers
B:The roles are swapped. Amazon Rekognition is associated with use Amazon Rekognition for image and video analysis capabilities; Amazon SageMaker AI instead has the role: Use Amazon SageMaker AI for managed machine learning development workflows. SageMaker AI supports building, training and deploying ML models rather than simply translating text.
C:The roles are swapped. Amazon EMR is associated with use Amazon EMR for managed big-data processing frameworks; Amazon SageMaker AI instead has the role: Use Amazon SageMaker AI for managed machine learning development workflows. SageMaker AI supports building, training and deploying ML models rather than simply translating text.
D:The roles are swapped. AWS Glue is associated with use AWS Glue for data integration, ETL and catalog features; Amazon SageMaker AI instead has the role: Use Amazon SageMaker AI for managed machine learning development workflows. SageMaker AI supports building, training and deploying ML models rather than simply translating text.
Question 726
Within the Cloud Concepts domain, which business example MOST clearly illustrates Retaining a workload, rather than a different AWS concept?
- An inventory review discovers a legacy reporting system with no users or business dependency
- A business must keep a legacy production system on premises until a contractual restriction expires
- Executives need a structured view of people, governance, business, platform, security, and operations during cloud adoption
- A company wants to transfer database content to AWS while limiting downtime
Explanation
Correct Answer
B:The decisive requirement is: Leave a selected workload in its existing environment for now. This is the role of Retaining a workload. Retaining is an intentional decision to defer migration when business or technical constraints make an immediate move inappropriate.
Incorrect Answers
A:This describes a scenario for Retiring an application: decommission an unneeded application rather than migrate it. Retiring eliminates redundant or unused workloads so migration effort is not spent on systems with no continuing value. It is not the most direct example of Retaining a workload.
C:This describes a scenario for AWS Cloud Adoption Framework: organize organizational readiness across AWS CAF perspectives. AWS CAF helps align business and technology stakeholders throughout cloud adoption instead of treating migration as a server-copy exercise. It is not the most direct example of Retaining a workload.
D:This describes a scenario for AWS Database Migration Service: migrate and optionally replicate data between supported database endpoints. AWS DMS can transfer data and support change data capture for applicable database migration scenarios. It is not the most direct example of Retaining a workload.
Question 727
A stakeholder is considering AWS Application Migration Service because an enterprise needs to lift and shift many supported physical or virtual servers to AWS. What is the MOST relevant capability or benefit?
- Meet this requirement: an organization must transfer a very large volume of data from a remote site with insufficient network bandwidth
- Move the existing workload largely as-is to cloud infrastructure
- Replicate and migrate server workloads with minimal application changes
- Track application migration progress centrally
Explanation
Correct Answer
C:Replicate and migrate server workloads with minimal application changes. AWS Application Migration Service supports continuous replication and cutover for eligible servers. The stated need is specifically an enterprise needs to lift and shift many supported physical or virtual servers to AWS.
Incorrect Answers
A:This outcome fits AWS Snow Family: AWS Snow devices support moving large datasets when transferring everything over a network is slow or constrained. The stakeholder requires the more specific capability provided by AWS Application Migration Service, not that separate benefit.
B:This outcome fits Rehosting migration: Rehosting, often called lift and shift, relocates a workload without significant application redesign. The stakeholder requires the more specific capability provided by AWS Application Migration Service, not that separate benefit.
D:This outcome fits AWS Migration Hub: AWS Migration Hub provides visibility into discovered applications and migration activity across supported migration tools. The stakeholder requires the more specific capability provided by AWS Application Migration Service, not that separate benefit.
Question 728
Which AWS service or cloud principle is the BEST fit for this outcome or responsibility: aWS performs managed database infrastructure tasks such as underlying host and OS maintenance?
- Shared responsibility varies by service
- Customer EC2 security groups
- Customer data classification
- AWS RDS database infrastructure
Explanation
Correct Answer
D:AWS RDS database infrastructure directly addresses this outcome. RDS reduces operational work compared with a self-managed database, but does not remove customer responsibilities for data and access. A common relevant example is: a developer chooses Amazon RDS instead of installing a database engine on an EC2 virtual machine.
Incorrect Answers
A:Shared responsibility varies by service instead focuses on a different requirement, such as a technology leader compares the management obligations of EC2, RDS and Lambda. Responsibility depends on the service model: managing an EC2 guest OS differs from managing application code on Lambda. It is not the primary match for the requirement described here: aWS performs managed database infrastructure tasks such as underlying host and OS maintenance.
B:Customer EC2 security groups instead focuses on a different requirement, such as a project owner must restrict which network connections can reach an EC2 instance. Customers control security-group configuration for their EC2 workloads even though AWS operates the network infrastructure. It is not the primary match for the requirement described here: aWS performs managed database infrastructure tasks such as underlying host and OS maintenance.
C:Customer data classification instead focuses on a different requirement, such as a regulated company must identify which of its uploaded records contain sensitive personal information. AWS cannot determine the business sensitivity of customer content; data classification and applicable handling policies belong to the customer. It is not the primary match for the requirement described here: aWS performs managed database infrastructure tasks such as underlying host and OS maintenance.
Question 729
A learner is explaining Cross-account role access to colleagues facing this situation: an auditor from a separate AWS account needs time-limited access to approved audit resources. Which explanation is MOST accurate?
- Cross-account role trust enables authorized temporary access without copying long-term keys to the external account.
- STS provides temporary credentials for permitted role or federated sessions; it does not issue physical security tokens.
- IAM roles can be assumed to obtain temporary security credentials and avoid embedding long-term keys in applications.
- Federation integrates identity-provider authentication with AWS access, supporting centralized workforce identity management.
Explanation
Correct Answer
A:Cross-account role trust enables authorized temporary access without copying long-term keys to the external account. The explanation directly connects Cross-account role access to assume an appropriately trusted IAM role across accounts for the stated requirement.
Incorrect Answers
B:This statement is true of AWS STS role assumption, which addresses an application needs temporary AWS credentials after assuming an authorized IAM role. It does not explain the particular role of Cross-account role access; Cross-account role trust enables authorized temporary access without copying long-term keys to the external account.
C:This statement is true of IAM roles, which addresses an EC2 application needs AWS API permissions without storing a permanent access key in the server. It does not explain the particular role of Cross-account role access; Cross-account role trust enables authorized temporary access without copying long-term keys to the external account.
D:This statement is true of Identity federation, which addresses a company wants staff to authenticate to AWS using its existing corporate identity provider. It does not explain the particular role of Cross-account role access; Cross-account role trust enables authorized temporary access without copying long-term keys to the external account.
Question 730
Which AWS service or cloud principle is the BEST fit for this outcome or responsibility: move the existing workload largely as-is to cloud infrastructure?
- AWS Migration Hub
- Rehosting migration
- Replatforming migration
- AWS Snow Family
Explanation
Correct Answer
B:Rehosting migration directly addresses this outcome. Rehosting, often called lift and shift, relocates a workload without significant application redesign. A common relevant example is: a company wants to move an existing server-based application to AWS with minimal application changes.
Incorrect Answers
A:AWS Migration Hub instead focuses on a different requirement, such as a program manager needs a consolidated place to follow the progress of multiple migration activities. AWS Migration Hub provides visibility into discovered applications and migration activity across supported migration tools. It is not the primary match for the requirement described here: move the existing workload largely as-is to cloud infrastructure.
C:Replatforming migration instead focuses on a different requirement, such as a company moves an application to AWS and also adopts a managed database without rebuilding its business logic. Replatforming adjusts selected supporting components to gain cloud benefits without a full application rewrite. It is not the primary match for the requirement described here: move the existing workload largely as-is to cloud infrastructure.
D:AWS Snow Family instead focuses on a different requirement, such as an organization must transfer a very large volume of data from a remote site with insufficient network bandwidth. AWS Snow devices support moving large datasets when transferring everything over a network is slow or constrained. It is not the primary match for the requirement described here: move the existing workload largely as-is to cloud infrastructure.