Amazon AWS Certified Cloud Practitioner CLF-C02 Practice Test 74
Question 730
Which AWS service or cloud principle is the BEST fit for this outcome or responsibility: move the existing workload largely as-is to cloud infrastructure?
- AWS Migration Hub
- Rehosting migration
- Replatforming migration
- AWS Snow Family
Explanation
Correct Answer
B:Rehosting migration directly addresses this outcome. Rehosting, often called lift and shift, relocates a workload without significant application redesign. A common relevant example is: a company wants to move an existing server-based application to AWS with minimal application changes.
Incorrect Answers
A:AWS Migration Hub instead focuses on a different requirement, such as a program manager needs a consolidated place to follow the progress of multiple migration activities. AWS Migration Hub provides visibility into discovered applications and migration activity across supported migration tools. It is not the primary match for the requirement described here: move the existing workload largely as-is to cloud infrastructure.
C:Replatforming migration instead focuses on a different requirement, such as a company moves an application to AWS and also adopts a managed database without rebuilding its business logic. Replatforming adjusts selected supporting components to gain cloud benefits without a full application rewrite. It is not the primary match for the requirement described here: move the existing workload largely as-is to cloud infrastructure.
D:AWS Snow Family instead focuses on a different requirement, such as an organization must transfer a very large volume of data from a remote site with insufficient network bandwidth. AWS Snow devices support moving large datasets when transferring everything over a network is slow or constrained. It is not the primary match for the requirement described here: move the existing workload largely as-is to cloud infrastructure.
Question 731
Which AWS service or cloud principle is the BEST fit for this outcome or responsibility: deliver cached web content nearer to globally distributed users?
- Data sovereignty Region choice
- AWS Region
- Amazon CloudFront
- Availability Zone
Explanation
Correct Answer
C:Amazon CloudFront directly addresses this outcome. CloudFront is AWS's content delivery network and can reduce latency by caching copies near viewers. A common relevant example is: users worldwide download the same publicly available product images from an origin.
Incorrect Answers
A:Data sovereignty Region choice instead focuses on a different requirement, such as a government customer requires that certain datasets be stored in a specified legal jurisdiction. Region choice is a customer decision for residency compliance, subject to service availability and contractual requirements. It is not the primary match for the requirement described here: deliver cached web content nearer to globally distributed users.
B:AWS Region instead focuses on a different requirement, such as a company is selecting a separate geographic AWS location for a workload with residency requirements. A Region is a geographically separate area containing multiple Availability Zones; customers select deployment Regions. It is not the primary match for the requirement described here: deliver cached web content nearer to globally distributed users.
D:Availability Zone instead focuses on a different requirement, such as a service must use separate isolated locations within one selected AWS Region. Availability Zones are distinct locations within a Region designed to reduce shared failure risks. It is not the primary match for the requirement described here: deliver cached web content nearer to globally distributed users.
Question 732
Within the Billing, Pricing, and Support domain, which business example MOST clearly illustrates AWS Support Center, rather than a different AWS concept?
- An operations team wants recommendations for AWS best practices in areas such as costs and security
- A company needs help finding qualified AWS consulting or software partners
- A team wants to understand AWS service events that may affect its account or Region
- A company needs to open and manage a support case through its applicable AWS plan
Explanation
Correct Answer
D:The decisive requirement is: Use the AWS Support Center for eligible technical or account support cases. This is the role of AWS Support Center. Support Center is the AWS interface for support cases and related help according to the account's plan.
Incorrect Answers
A:This describes a scenario for AWS Trusted Advisor: use AWS Trusted Advisor for available best-practice checks. Trusted Advisor provides advisory findings in supported categories; available checks and features depend on account arrangements. It is not the most direct example of AWS Support Center.
B:This describes a scenario for AWS Partner Network: use AWS Partner Network resources to identify AWS partners and offerings. APN connects customers with AWS partners, such as system integrators and independent software vendors. It is not the most direct example of AWS Support Center.
C:This describes a scenario for AWS Health Dashboard: review AWS Health Dashboard for service and account events. AWS Health provides information about relevant service disruptions and scheduled changes; it is distinct from an application metric alarm. It is not the most direct example of AWS Support Center.
Question 733
An EC2 application needs AWS API permissions without storing a permanent access key in the server. Which AWS service or cloud concept is the MOST direct match for this need?
- IAM roles
- Principle of least privilege
- Access keys
- IAM groups
Explanation
Correct Answer
A:IAM roles fits the need because iAM roles can be assumed to obtain temporary security credentials and avoid embedding long-term keys in applications. The relevant capability or responsibility is: Use an IAM role to provide temporary credentials to the workload.
Incorrect Answers
B:Principle of least privilege is associated with a different use case: a developer only needs read access to one object storage bucket for a project. Least privilege restricts permissions to required actions and resources rather than granting broad administrator access. The question instead focuses on an EC2 application needs AWS API permissions without storing a permanent access key in the server; IAM roles is the more direct match.
C:Access keys is associated with a different use case: a legacy automation application uses an AWS access-key ID and secret key for API access. AWS access keys enable programmatic authentication and must not be committed to public repositories. The question instead focuses on an EC2 application needs AWS API permissions without storing a permanent access key in the server; IAM roles is the more direct match.
D:IAM groups is associated with a different use case: a team needs to assign the same AWS permissions to several IAM users. IAM groups collect IAM users for permissions management; they are not assumed identities like IAM roles. The question instead focuses on an EC2 application needs AWS API permissions without storing a permanent access key in the server; IAM roles is the more direct match.
Question 734
A project manager compares Measure outcomes with other AWS concepts while considering this need: a cloud team cannot tell whether a change improved customer-facing performance. Which pairing assigns the responsibilities or benefits correctly?
- Measure outcomes: protect information and systems using risk-aware controls; Security pillar: use operational metrics and business outcomes to evaluate improvements
- Measure outcomes: use operational metrics and business outcomes to evaluate improvements; Design for expected change: revisit architecture decisions as requirements and capabilities change
- Measure outcomes: revisit architecture decisions as requirements and capabilities change; Design for expected change: use operational metrics and business outcomes to evaluate improvements
- Measure outcomes: use automation for routine, repeatable operational actions; Automated operational response: use operational metrics and business outcomes to evaluate improvements
Explanation
Correct Answer
B:The first pairing identifies Measure outcomes with its actual role: use operational metrics and business outcomes to evaluate improvements. The Well-Architected approach encourages observing real workload outcomes rather than relying only on resource existence. The comparison is valid because Design for expected change instead addresses revisit architecture decisions as requirements and capabilities change.
Incorrect Answers
A:The roles are swapped. Security pillar is associated with protect information and systems using risk-aware controls; Measure outcomes instead has the role: Use operational metrics and business outcomes to evaluate improvements. The Well-Architected approach encourages observing real workload outcomes rather than relying only on resource existence.
C:The roles are swapped. Design for expected change is associated with revisit architecture decisions as requirements and capabilities change; Measure outcomes instead has the role: Use operational metrics and business outcomes to evaluate improvements. The Well-Architected approach encourages observing real workload outcomes rather than relying only on resource existence.
D:The roles are swapped. Automated operational response is associated with use automation for routine, repeatable operational actions; Measure outcomes instead has the role: Use operational metrics and business outcomes to evaluate improvements. The Well-Architected approach encourages observing real workload outcomes rather than relying only on resource existence.
Question 735
A public website needs rules to inspect common malicious HTTP requests. Which AWS service or cloud concept is the MOST direct match for this need?
- AWS Knowledge Center
- AWS Trusted Advisor
- AWS WAF application protection
- AWS Resource Access Manager
Explanation
Correct Answer
C:AWS WAF application protection fits the need because wAF acts at web request level and can help mitigate common HTTP attack patterns. The relevant capability or responsibility is: Use AWS WAF to filter supported web requests.
Incorrect Answers
A:AWS Knowledge Center is associated with a different use case: an AWS user wants AWS-authored answers to common service troubleshooting and account questions. Knowledge Center provides guidance and answers; it is an information resource, not an active security enforcement tool. The question instead focuses on a public website needs rules to inspect common malicious HTTP requests; AWS WAF application protection is the more direct match.
B:AWS Trusted Advisor security checks is associated with a different use case: a small team wants to find certain common AWS account configuration risks through recommendations. Trusted Advisor provides best-practice guidance in supported categories including security, cost and service limits. The question instead focuses on a public website needs rules to inspect common malicious HTTP requests; AWS WAF application protection is the more direct match.
D:AWS Resource Access Manager is associated with a different use case: two AWS accounts in one organization need to share supported resources without duplicating them. AWS RAM manages sharing of eligible AWS resources with other accounts or organizational units, subject to permissions. The question instead focuses on a public website needs rules to inspect common malicious HTTP requests; AWS WAF application protection is the more direct match.
Question 736
Within the Cloud Technology and Services domain, which business example MOST clearly illustrates Security groups, rather than a different AWS concept?
- A VPC owner needs network traffic rules at the subnet boundary and wants stateless filtering
- An administrator needs separate IP address ranges for application and database resources within one VPC
- An enterprise wants a dedicated private network connection between its premises and AWS
- An EC2 workload should allow only specified inbound and outbound connections at the resource level
Explanation
Correct Answer
D:The decisive requirement is: Use security groups as stateful virtual firewall rules for resources. This is the role of Security groups. Security groups control permitted traffic for associated resources and automatically allow response traffic to allowed flows.
Incorrect Answers
A:This describes a scenario for Network ACLs: use network access control lists for subnet-level traffic rules. VPC network ACLs apply to subnets and are stateless, unlike security groups' stateful behavior. It is not the most direct example of Security groups.
B:This describes a scenario for VPC subnets: use VPC subnets to divide VPC address space into smaller networks. Each subnet belongs to one Availability Zone and can have network and routing controls. It is not the most direct example of Security groups.
C:This describes a scenario for AWS Direct Connect: use AWS Direct Connect for dedicated network connectivity to AWS. Direct Connect provides private physical network connectivity through supported locations; encryption is a separate consideration. It is not the most direct example of Security groups.
Question 737
A company wants to reduce the environmental impact of its cloud workloads. Which AWS service or cloud concept is the MOST direct match for this need?
- Sustainability pillar
- Reliability pillar
- Automated operational response
- Test recovery assumptions
Explanation
Correct Answer
A:Sustainability pillar fits the need because the Sustainability pillar encourages efficient resource use and reduced environmental impact of running workloads. The relevant capability or responsibility is: Minimize energy consumption and environmental impact per unit of work.
Incorrect Answers
B:Reliability pillar is associated with a different use case: an application needs to recover predictably from failures and adapt when demand changes. The Reliability pillar emphasizes recovery, distributed design, and meeting availability requirements. The question instead focuses on a company wants to reduce the environmental impact of its cloud workloads; Sustainability pillar is the more direct match.
C:Automated operational response is associated with a different use case: operators repeatedly perform the same low-risk response to predictable workload events. Automating repeatable operations reduces manual error and supports dependable responses while human review remains appropriate for sensitive changes. The question instead focuses on a company wants to reduce the environmental impact of its cloud workloads; Sustainability pillar is the more direct match.
D:Test recovery assumptions is associated with a different use case: a service owner has a written recovery plan but does not know whether it would work in practice. Regular recovery testing reveals gaps in backup, dependency, and restoration plans before a real disruption. The question instead focuses on a company wants to reduce the environmental impact of its cloud workloads; Sustainability pillar is the more direct match.
Question 738
A project manager compares Compute-optimized EC2 with other AWS concepts while considering this need: a simulation workload spends most of its time performing CPU-intensive numerical calculations. Which pairing assigns the responsibilities or benefits correctly?
- Compute-optimized EC2: adjust instance capacity based on demand; EC2 Auto Scaling: support CPU-heavy work
- Compute-optimized EC2: support CPU-heavy work; EC2 Auto Scaling: adjust instance capacity based on demand
- Compute-optimized EC2: distribute inbound traffic among healthy application targets; Elastic Load Balancing: support CPU-heavy work
- Compute-optimized EC2: support AWS-hosted Kubernetes orchestration; Amazon EKS: support CPU-heavy work
Explanation
Correct Answer
B:The first pairing identifies Compute-optimized EC2 with its actual role: choose an EC2 compute-optimized instance family for CPU-heavy work. Compute-optimized instances provide a high ratio of compute performance for suitable CPU-bound applications. The comparison is valid because EC2 Auto Scaling instead addresses use Amazon EC2 Auto Scaling to adjust instance capacity based on demand.
Incorrect Answers
A:The roles are swapped. EC2 Auto Scaling is associated with use Amazon EC2 Auto Scaling to adjust instance capacity based on demand; Compute-optimized EC2 instead has the role: Choose an EC2 compute-optimized instance family for CPU-heavy work. Compute-optimized instances provide a high ratio of compute performance for suitable CPU-bound applications.
C:The roles are swapped. Elastic Load Balancing is associated with use Elastic Load Balancing to distribute incoming workload traffic; Compute-optimized EC2 instead has the role: Choose an EC2 compute-optimized instance family for CPU-heavy work. Compute-optimized instances provide a high ratio of compute performance for suitable CPU-bound applications.
D:The roles are swapped. Amazon EKS is associated with use Amazon Elastic Kubernetes Service for AWS-hosted Kubernetes orchestration; Compute-optimized EC2 instead has the role: Choose an EC2 compute-optimized instance family for CPU-heavy work. Compute-optimized instances provide a high ratio of compute performance for suitable CPU-bound applications.
Question 739
A learner is explaining AWS Partner Network to colleagues facing this situation: a company needs help finding qualified AWS consulting or software partners. Which explanation is MOST accurate?
- re:Post provides community questions and answers rather than guaranteed contractual support response times.
- AWS Health provides information about relevant service disruptions and scheduled changes; it is distinct from an application metric alarm.
- APN connects customers with AWS partners, such as system integrators and independent software vendors.
- Support benefits and service-level commitments depend on the chosen plan and current AWS support terms.
Explanation
Correct Answer
C:APN connects customers with AWS partners, such as system integrators and independent software vendors. The explanation directly connects AWS Partner Network to use AWS Partner Network resources to identify AWS partners and offerings for the stated requirement.
Incorrect Answers
A:This statement is true of AWS re:Post, which addresses a developer wants to ask a public technical question and learn from AWS community answers. It does not explain the particular role of AWS Partner Network; APN connects customers with AWS partners, such as system integrators and independent software vendors.
B:This statement is true of AWS Health Dashboard, which addresses a team wants to understand AWS service events that may affect its account or Region. It does not explain the particular role of AWS Partner Network; APN connects customers with AWS partners, such as system integrators and independent software vendors.
D:This statement is true of AWS Support plans, which addresses a business wants to compare the support response options included with different AWS support tiers. It does not explain the particular role of AWS Partner Network; APN connects customers with AWS partners, such as system integrators and independent software vendors.
Question 740
A stakeholder is considering Amazon SNS because a monitoring event should send notifications to multiple subscribed endpoints. What is the MOST relevant capability or benefit?
- Support managed workflow orchestration
- Support application email delivery
- Support event bus routing and integration
- Support publish-subscribe notifications and fan-out
Explanation
Correct Answer
D:Use Amazon SNS for publish-subscribe notifications and fan-out. SNS distributes published messages to subscribed destinations; it is not a relational database. The stated need is specifically a monitoring event should send notifications to multiple subscribed endpoints.
Incorrect Answers
A:This outcome fits AWS Step Functions: Step Functions models stateful application workflows and service coordination rather than storing the business records. The stakeholder requires the more specific capability provided by Amazon SNS, not that separate benefit.
B:This outcome fits Amazon SES: SES provides email sending and related features for business application communications. The stakeholder requires the more specific capability provided by Amazon SNS, not that separate benefit.
C:This outcome fits Amazon EventBridge: EventBridge matches events against rules and directs them to supported targets. The stakeholder requires the more specific capability provided by Amazon SNS, not that separate benefit.