Amazon AWS Certified Cloud Practitioner CLF-C02 Practice Test 80
Question 790
A project manager compares Amazon SQS with other AWS concepts while considering this need: an order processing system wants queued messages so producers and workers do not need to run at the same speed. Which pairing assigns the responsibilities or benefits correctly?
- Amazon SQS: support application email delivery; Amazon SES: decouple components with durable message queues
- Amazon SQS: decouple components with durable message queues; Amazon SES: support application email delivery
- Amazon SQS: support publish-subscribe notifications and fan-out; Amazon SNS: decouple components with durable message queues
- Amazon SQS: enable supported Internet of Things device connectivity; AWS IoT Core: decouple components with durable message queues
Explanation
Correct Answer
B:The first pairing identifies Amazon SQS with its actual role: use Amazon SQS to decouple components with durable message queues. SQS buffers work items for asynchronous consumption, unlike a publish-subscribe notification fan-out service. The comparison is valid because Amazon SES instead addresses use Amazon Simple Email Service for application email delivery.
Incorrect Answers
A:The roles are swapped. Amazon SES is associated with use Amazon Simple Email Service for application email delivery; Amazon SQS instead has the role: Use Amazon SQS to decouple components with durable message queues. SQS buffers work items for asynchronous consumption, unlike a publish-subscribe notification fan-out service.
C:The roles are swapped. Amazon SNS is associated with use Amazon SNS for publish-subscribe notifications and fan-out; Amazon SQS instead has the role: Use Amazon SQS to decouple components with durable message queues. SQS buffers work items for asynchronous consumption, unlike a publish-subscribe notification fan-out service.
D:The roles are swapped. AWS IoT Core is associated with use AWS IoT Core for supported Internet of Things device connectivity; Amazon SQS instead has the role: Use Amazon SQS to decouple components with durable message queues. SQS buffers work items for asynchronous consumption, unlike a publish-subscribe notification fan-out service.
Question 791
A project manager compares AWS Application Migration Service with other AWS concepts while considering this need: an enterprise needs to lift and shift many supported physical or virtual servers to AWS. Which pairing assigns the responsibilities or benefits correctly?
- AWS Application Migration Service: move compatible virtual machines or virtualized infrastructure with minimal change; Relocating a workload: replicate and migrate server workloads with minimal application changes
- AWS Application Migration Service: move the existing workload largely as-is to cloud infrastructure; Rehosting migration: replicate and migrate server workloads with minimal application changes
- AWS Application Migration Service: replicate and migrate server workloads with minimal application changes; AWS Migration Hub: track application migration progress centrally
- AWS Application Migration Service: track application migration progress centrally; AWS Migration Hub: replicate and migrate server workloads with minimal application changes
Explanation
Correct Answer
C:The first pairing identifies AWS Application Migration Service with its actual role: replicate and migrate server workloads with minimal application changes. AWS Application Migration Service supports continuous replication and cutover for eligible servers. The comparison is valid because AWS Migration Hub instead addresses track application migration progress centrally.
Incorrect Answers
A:The roles are swapped. Relocating a workload is associated with move compatible virtual machines or virtualized infrastructure with minimal change; AWS Application Migration Service instead has the role: Replicate and migrate server workloads with minimal application changes. AWS Application Migration Service supports continuous replication and cutover for eligible servers.
B:The roles are swapped. Rehosting migration is associated with move the existing workload largely as-is to cloud infrastructure; AWS Application Migration Service instead has the role: Replicate and migrate server workloads with minimal application changes. AWS Application Migration Service supports continuous replication and cutover for eligible servers.
D:The roles are swapped. AWS Migration Hub is associated with track application migration progress centrally; AWS Application Migration Service instead has the role: Replicate and migrate server workloads with minimal application changes. AWS Application Migration Service supports continuous replication and cutover for eligible servers.
Question 792
A company buys servers and pays the purchase cost before those servers are used. Which AWS service or cloud concept is the MOST direct match for this need?
- License-included pricing
- Variable costs
- Rightsizing
- Capital expenditure
Explanation
Correct Answer
D:Capital expenditure fits the need because owning servers typically requires an upfront capital investment, unlike metered cloud resource consumption. The relevant capability or responsibility is: Classify upfront infrastructure equipment purchases as capital spending.
Incorrect Answers
A:License-included pricing is associated with a different use case: a team prefers a cloud software offering whose price includes the relevant software license. License-included pricing is distinct from providing a separately acquired customer license under BYOL. The question instead focuses on a company buys servers and pays the purchase cost before those servers are used; Capital expenditure is the more direct match.
B:Variable costs is associated with a different use case: a retailer wants lower cloud expenses during months with fewer transactions. Variable cost follows utilization or usage rather than remaining fixed at a pre-purchased capacity level. The question instead focuses on a company buys servers and pays the purchase cost before those servers are used; Capital expenditure is the more direct match.
C:Rightsizing is associated with a different use case: a monthly review finds development servers consume little of their allocated CPU and memory. Rightsizing replaces persistently oversized resources with suitable capacities to improve cost efficiency. The question instead focuses on a company buys servers and pays the purchase cost before those servers are used; Capital expenditure is the more direct match.
Question 793
A software provider wants to serve customers from multiple continents without building overseas data centers. Which AWS service or cloud concept is the MOST direct match for this need?
- Global reach
- Scalability
- Agility
- Business continuity
Explanation
Correct Answer
A:Global reach fits the need because aWS Regions enable deployment in multiple geographies without building and operating a physical data center in each market. The relevant capability or responsibility is: Deploy services geographically close to international users.
Incorrect Answers
B:Scalability is associated with a different use case: a research portal expects sustained growth from thousands to millions of visitors over several years. Scalability is the ability to handle greater load by adding resources or increasing their capacity as an organization grows. The question instead focuses on a software provider wants to serve customers from multiple continents without building overseas data centers; Global reach is the more direct match.
C:Agility is associated with a different use case: a startup needs to launch a pilot environment within hours rather than wait for a server purchase. Cloud agility helps teams provision resources quickly and test business ideas without waiting for lengthy hardware procurement. The question instead focuses on a software provider wants to serve customers from multiple continents without building overseas data centers; Global reach is the more direct match.
D:Business continuity is associated with a different use case: a retailer needs a plan for resuming critical operations after a major disruption. Business continuity combines preparedness and recovery measures rather than assuming failures will never occur. The question instead focuses on a software provider wants to serve customers from multiple continents without building overseas data centers; Global reach is the more direct match.
Question 794
A learner is explaining Customer S3 bucket access to colleagues facing this situation: a team accidentally publishes an S3 bucket containing internal reports. Which explanation is MOST accurate?
- Physical facility access controls and provider-owned hardware protection fall under AWS security of the cloud.
- AWS operates the S3 storage infrastructure, but customers configure authorized access to their buckets and objects.
- Customers control security-group configuration for their EC2 workloads even though AWS operates the network infrastructure.
- AWS handles service infrastructure, while customers still control object permissions, classifications and retention requirements.
Explanation
Correct Answer
B:AWS operates the S3 storage infrastructure, but customers configure authorized access to their buckets and objects. The explanation directly connects Customer S3 bucket access to the customer must correct the bucket access policy and exposure settings for the stated requirement.
Incorrect Answers
A:This statement is true of AWS physical data center security, which addresses an AWS customer asks who guards the buildings where AWS runs underlying server hardware. It does not explain the particular role of Customer S3 bucket access; AWS operates the S3 storage infrastructure, but customers configure authorized access to their buckets and objects.
C:This statement is true of Customer EC2 security groups, which addresses a project owner must restrict which network connections can reach an EC2 instance. It does not explain the particular role of Customer S3 bucket access; AWS operates the S3 storage infrastructure, but customers configure authorized access to their buckets and objects.
D:This statement is true of AWS S3 infrastructure durability, which addresses a customer asks who maintains the physical storage systems used by Amazon S3. It does not explain the particular role of Customer S3 bucket access; AWS operates the S3 storage infrastructure, but customers configure authorized access to their buckets and objects.
Question 795
A stakeholder is considering Customer encryption choices because a company wants to ensure its application stores sensitive objects with required encryption settings. What is the MOST relevant capability or benefit?
- AWS manages the underlying compute infrastructure for Lambda execution
- The customer must correct the bucket access policy and exposure settings
- The customer chooses applicable encryption configuration and key-access policies
- AWS maintains the physical host and underlying cloud virtualization infrastructure
Explanation
Correct Answer
C:The customer chooses applicable encryption configuration and key-access policies. Managed services can provide encryption capabilities, but customers must select and govern settings needed for their data. The stated need is specifically a company wants to ensure its application stores sensitive objects with required encryption settings.
Incorrect Answers
A:This outcome fits AWS Lambda runtime infrastructure: Lambda abstracts away host provisioning and infrastructure operation, while customers remain accountable for their function code and permissions. The stakeholder requires the more specific capability provided by Customer encryption choices, not that separate benefit.
B:This outcome fits Customer S3 bucket access: AWS operates the S3 storage infrastructure, but customers configure authorized access to their buckets and objects. The stakeholder requires the more specific capability provided by Customer encryption choices, not that separate benefit.
D:This outcome fits AWS EC2 host infrastructure: AWS is responsible for facilities, physical servers and underlying cloud infrastructure for EC2. The stakeholder requires the more specific capability provided by Customer encryption choices, not that separate benefit.
Question 796
A payment-processing workload must continue processing transactions when an individual component unexpectedly fails. Which AWS service or cloud concept is the MOST direct match for this need?
- Elasticity
- Edge content delivery
- Rapid experimentation
- Fault tolerance
Explanation
Correct Answer
D:Fault tolerance fits the need because fault tolerance keeps service functioning when failures happen, often through replicated or redundant components. The relevant capability or responsibility is: Maintain operation despite certain component failures.
Incorrect Answers
A:Elasticity is associated with a different use case: an online store has unpredictable weekend traffic spikes followed by quiet weekdays. Elasticity aligns live capacity with changing workload demand so idle peak-sized resources do not remain continuously allocated. The question instead focuses on a payment-processing workload must continue processing transactions when an individual component unexpectedly fails; Fault tolerance is the more direct match.
B:Edge content delivery is associated with a different use case: a media company serves static images to viewers in many countries and wants them delivered near viewers. An edge content delivery network reduces distance to cached content and can improve latency for geographically distributed users. The question instead focuses on a payment-processing workload must continue processing transactions when an individual component unexpectedly fails; Fault tolerance is the more direct match.
C:Rapid experimentation is associated with a different use case: a product group wants to run several short-lived proofs of concept at low initial commitment. On-demand cloud environments make experiments easier to start and stop as new ideas are evaluated. The question instead focuses on a payment-processing workload must continue processing transactions when an individual component unexpectedly fails; Fault tolerance is the more direct match.
Question 797
A monitoring event should send notifications to multiple subscribed endpoints. Which AWS service or cloud concept is the MOST direct match for this need?
- Amazon SNS
- AWS Step Functions
- Amazon EventBridge
- Amazon SES
Explanation
Correct Answer
A:Amazon SNS fits the need because sNS distributes published messages to subscribed destinations; it is not a relational database. The relevant capability or responsibility is: Use Amazon SNS for publish-subscribe notifications and fan-out.
Incorrect Answers
B:AWS Step Functions is associated with a different use case: a business process needs a coordinated sequence of several AWS service tasks with branching states. Step Functions models stateful application workflows and service coordination rather than storing the business records. The question instead focuses on a monitoring event should send notifications to multiple subscribed endpoints; Amazon SNS is the more direct match.
C:Amazon EventBridge is associated with a different use case: a SaaS app emits business events that must be routed to different AWS targets based on rules. EventBridge matches events against rules and directs them to supported targets. The question instead focuses on a monitoring event should send notifications to multiple subscribed endpoints; Amazon SNS is the more direct match.
D:Amazon SES is associated with a different use case: a company must send transactional confirmation emails from its application. SES provides email sending and related features for business application communications. The question instead focuses on a monitoring event should send notifications to multiple subscribed endpoints; Amazon SNS is the more direct match.
Question 798
Which AWS service or cloud principle is the BEST fit for this outcome or responsibility: provide part of a multi-Region continuity plan?
- AWS Region
- Multiple AWS Regions
- Multiple Availability Zones
- AWS edge location
Explanation
Correct Answer
B:Multiple AWS Regions directly addresses this outcome. Deploying across Regions can address geographic disruptions, customer latency and residency objectives at higher complexity. A common relevant example is: a business needs a disaster recovery location outside the primary Region.
Incorrect Answers
A:AWS Region instead focuses on a different requirement, such as a company is selecting a separate geographic AWS location for a workload with residency requirements. A Region is a geographically separate area containing multiple Availability Zones; customers select deployment Regions. It is not the primary match for the requirement described here: provide part of a multi-Region continuity plan.
C:Multiple Availability Zones instead focuses on a different requirement, such as an application must remain available if one Availability Zone experiences an outage. Multi-AZ deployments can avoid a single-AZ failure taking down the whole application. It is not the primary match for the requirement described here: provide part of a multi-Region continuity plan.
D:AWS edge location instead focuses on a different requirement, such as a global website wants cached content served closer to its end users. AWS edge locations support services such as CloudFront and reduce delivery distance for content or requests. It is not the primary match for the requirement described here: provide part of a multi-Region continuity plan.
Question 799
A learner is explaining AWS security best practices to colleagues facing this situation: an organization needs general recommendations to harden AWS workloads. Which explanation is MOST accurate?
- Shield provides managed DDoS protection rather than classifying sensitive objects or managing IAM identities.
- Detective correlates supported signals for investigation; GuardDuty focuses on finding potential threats.
- AWS security guidance supports safe decisions, while controls still need deliberate configuration by the customer.
- Marketplace lets customers discover and procure partner solutions; it is not the same as an AWS native security monitoring service.
Explanation
Correct Answer
C:AWS security guidance supports safe decisions, while controls still need deliberate configuration by the customer. The explanation directly connects AWS security best practices to use AWS security best-practice resources and service-specific recommendations for the stated requirement.
Incorrect Answers
A:This statement is true of AWS Shield DDoS protection, which addresses a public application is concerned about distributed denial-of-service traffic. It does not explain the particular role of AWS security best practices; AWS security guidance supports safe decisions, while controls still need deliberate configuration by the customer.
B:This statement is true of Amazon Detective investigations, which addresses an analyst wants to investigate relationships among security findings after suspicious activity is detected. It does not explain the particular role of AWS security best practices; AWS security guidance supports safe decisions, while controls still need deliberate configuration by the customer.
D:This statement is true of AWS Marketplace security software, which addresses a company wants to evaluate a third-party security product compatible with AWS workloads. It does not explain the particular role of AWS security best practices; AWS security guidance supports safe decisions, while controls still need deliberate configuration by the customer.
Question 800
Which AWS service or cloud principle is the BEST fit for this outcome or responsibility: meet this requirement: a company wants to evaluate a third-party security product compatible with AWS workloads?
- Amazon Detective
- AWS Resource Access Manager
- AWS Knowledge Center
- AWS Marketplace
Explanation
Correct Answer
D:AWS Marketplace directly addresses this outcome. Marketplace lets customers discover and procure partner solutions; it is not the same as an AWS native security monitoring service. A common relevant example is: a company wants to evaluate a third-party security product compatible with AWS workloads.
Incorrect Answers
A:Amazon Detective investigations instead focuses on a different requirement, such as an analyst wants to investigate relationships among security findings after suspicious activity is detected. Detective correlates supported signals for investigation; GuardDuty focuses on finding potential threats. It is not the primary match for the requirement described here: meet this requirement: a company wants to evaluate a third-party security product compatible with AWS workloads.
B:AWS Resource Access Manager instead focuses on a different requirement, such as two AWS accounts in one organization need to share supported resources without duplicating them. AWS RAM manages sharing of eligible AWS resources with other accounts or organizational units, subject to permissions. It is not the primary match for the requirement described here: meet this requirement: a company wants to evaluate a third-party security product compatible with AWS workloads.
C:AWS Knowledge Center instead focuses on a different requirement, such as an AWS user wants AWS-authored answers to common service troubleshooting and account questions. Knowledge Center provides guidance and answers; it is an information resource, not an active security enforcement tool. It is not the primary match for the requirement described here: meet this requirement: a company wants to evaluate a third-party security product compatible with AWS workloads.