Amazon AWS Certified Cloud Practitioner CLF-C02 Practice Test 85
Question 840
A customer asks who maintains the physical storage systems used by Amazon S3. Which AWS service or cloud concept is the MOST direct match for this need?
- Shared responsibility varies by service
- Customer S3 bucket access
- Customer data classification
- AWS S3 infrastructure durability
Explanation
Correct Answer
D:AWS S3 infrastructure durability fits the need because aWS handles service infrastructure, while customers still control object permissions, classifications and retention requirements. The relevant capability or responsibility is: AWS operates and maintains the managed S3 storage infrastructure.
Incorrect Answers
A:Shared responsibility varies by service is associated with a different use case: a technology leader compares the management obligations of EC2, RDS and Lambda. Responsibility depends on the service model: managing an EC2 guest OS differs from managing application code on Lambda. The question instead focuses on a customer asks who maintains the physical storage systems used by Amazon S3; AWS S3 infrastructure durability is the more direct match.
B:Customer S3 bucket access is associated with a different use case: a team accidentally publishes an S3 bucket containing internal reports. AWS operates the S3 storage infrastructure, but customers configure authorized access to their buckets and objects. The question instead focuses on a customer asks who maintains the physical storage systems used by Amazon S3; AWS S3 infrastructure durability is the more direct match.
C:Customer data classification is associated with a different use case: a regulated company must identify which of its uploaded records contain sensitive personal information. AWS cannot determine the business sensitivity of customer content; data classification and applicable handling policies belong to the customer. The question instead focuses on a customer asks who maintains the physical storage systems used by Amazon S3; AWS S3 infrastructure durability is the more direct match.
Question 841
Which AWS service or cloud principle is the BEST fit for this outcome or responsibility: aWS manages the underlying compute infrastructure for Lambda execution?
- AWS Lambda runtime infrastructure
- AWS RDS database infrastructure
- Customer data classification
- AWS physical data center security
Explanation
Correct Answer
A:AWS Lambda runtime infrastructure directly addresses this outcome. Lambda abstracts away host provisioning and infrastructure operation, while customers remain accountable for their function code and permissions. A common relevant example is: a team adopts Lambda and asks who handles physical servers for function execution.
Incorrect Answers
B:AWS RDS database infrastructure instead focuses on a different requirement, such as a developer chooses Amazon RDS instead of installing a database engine on an EC2 virtual machine. RDS reduces operational work compared with a self-managed database, but does not remove customer responsibilities for data and access. It is not the primary match for the requirement described here: aWS manages the underlying compute infrastructure for Lambda execution.
C:Customer data classification instead focuses on a different requirement, such as a regulated company must identify which of its uploaded records contain sensitive personal information. AWS cannot determine the business sensitivity of customer content; data classification and applicable handling policies belong to the customer. It is not the primary match for the requirement described here: aWS manages the underlying compute infrastructure for Lambda execution.
D:AWS physical data center security instead focuses on a different requirement, such as an AWS customer asks who guards the buildings where AWS runs underlying server hardware. Physical facility access controls and provider-owned hardware protection fall under AWS security of the cloud. It is not the primary match for the requirement described here: aWS manages the underlying compute infrastructure for Lambda execution.
Question 842
A stakeholder is considering IAM Access Analyzer because a security team wants to identify unintended external access to supported AWS resources. What is the MOST relevant capability or benefit?
- Grant only the permissions necessary to perform approved duties
- Examine resource access and policy exposure
- Federate existing enterprise identities instead of issuing separate permanent credentials
- Use expiring session credentials through an approved role or federation
Explanation
Correct Answer
B:Use IAM Access Analyzer to examine resource access and policy exposure. Access Analyzer helps identify access findings; it does not by itself remove the underlying excessive permissions. The stated need is specifically a security team wants to identify unintended external access to supported AWS resources.
Incorrect Answers
A:This outcome fits Principle of least privilege: Least privilege restricts permissions to required actions and resources rather than granting broad administrator access. The stakeholder requires the more specific capability provided by IAM Access Analyzer, not that separate benefit.
C:This outcome fits Identity federation: Federation integrates identity-provider authentication with AWS access, supporting centralized workforce identity management. The stakeholder requires the more specific capability provided by IAM Access Analyzer, not that separate benefit.
D:This outcome fits Temporary security credentials: Short-lived credentials reduce the time a stolen credential can remain useful compared with persistent access keys. The stakeholder requires the more specific capability provided by IAM Access Analyzer, not that separate benefit.
Question 843
A learner is explaining AWS Health Dashboard to colleagues facing this situation: a team wants to understand AWS service events that may affect its account or Region. Which explanation is MOST accurate?
- Support Center is the AWS interface for support cases and related help according to the account's plan.
- APN connects customers with AWS partners, such as system integrators and independent software vendors.
- AWS Health provides information about relevant service disruptions and scheduled changes; it is distinct from an application metric alarm.
- Trusted Advisor provides advisory findings in supported categories; available checks and features depend on account arrangements.
Explanation
Correct Answer
C:AWS Health provides information about relevant service disruptions and scheduled changes; it is distinct from an application metric alarm. The explanation directly connects AWS Health Dashboard to review AWS Health Dashboard for service and account events for the stated requirement.
Incorrect Answers
A:This statement is true of AWS Support Center, which addresses a company needs to open and manage a support case through its applicable AWS plan. It does not explain the particular role of AWS Health Dashboard; AWS Health provides information about relevant service disruptions and scheduled changes; it is distinct from an application metric alarm.
B:This statement is true of AWS Partner Network, which addresses a company needs help finding qualified AWS consulting or software partners. It does not explain the particular role of AWS Health Dashboard; AWS Health provides information about relevant service disruptions and scheduled changes; it is distinct from an application metric alarm.
D:This statement is true of AWS Trusted Advisor, which addresses an operations team wants recommendations for AWS best practices in areas such as costs and security. It does not explain the particular role of AWS Health Dashboard; AWS Health provides information about relevant service disruptions and scheduled changes; it is distinct from an application metric alarm.
Question 844
Within the Cloud Concepts domain, which business example MOST clearly illustrates Operating expenditure, rather than a different AWS concept?
- A finance director compares AWS migration with building another private data center
- A department repeatedly creates and deletes temporary test environments by hand
- A retailer wants lower cloud expenses during months with fewer transactions
- A business pays recurring usage charges for AWS resources it uses this month
Explanation
Correct Answer
D:The decisive requirement is: Classify cloud usage-based service payments as operating spending. This is the role of Operating expenditure. Variable cloud charges generally align with operating expense rather than a customer buying provider hardware.
Incorrect Answers
A:This describes a scenario for Total cost of ownership: include facilities, hardware, operations, and staffing in a long-term cost comparison. Total cost of ownership considers direct and indirect costs, not only an instance hourly price. It is not the most direct example of Operating expenditure.
B:This describes a scenario for Automation savings: reduce repetitive administrative work through consistent automation. Automation can reduce manual effort and mistakes while making temporary resources easier to retire. It is not the most direct example of Operating expenditure.
C:This describes a scenario for Variable costs: let eligible costs rise and fall with actual resource consumption. Variable cost follows utilization or usage rather than remaining fixed at a pre-purchased capacity level. It is not the most direct example of Operating expenditure.
Question 845
A learner is explaining AWS Lambda runtime infrastructure to colleagues facing this situation: a team adopts Lambda and asks who handles physical servers for function execution. Which explanation is MOST accurate?
- Lambda abstracts away host provisioning and infrastructure operation, while customers remain accountable for their function code and permissions.
- Physical facility access controls and provider-owned hardware protection fall under AWS security of the cloud.
- AWS cannot determine the business sensitivity of customer content; data classification and applicable handling policies belong to the customer.
- Customers control security-group configuration for their EC2 workloads even though AWS operates the network infrastructure.
Explanation
Correct Answer
A:Lambda abstracts away host provisioning and infrastructure operation, while customers remain accountable for their function code and permissions. The explanation directly connects AWS Lambda runtime infrastructure to aWS manages the underlying compute infrastructure for Lambda execution for the stated requirement.
Incorrect Answers
B:This statement is true of AWS physical data center security, which addresses an AWS customer asks who guards the buildings where AWS runs underlying server hardware. It does not explain the particular role of AWS Lambda runtime infrastructure; Lambda abstracts away host provisioning and infrastructure operation, while customers remain accountable for their function code and permissions.
C:This statement is true of Customer data classification, which addresses a regulated company must identify which of its uploaded records contain sensitive personal information. It does not explain the particular role of AWS Lambda runtime infrastructure; Lambda abstracts away host provisioning and infrastructure operation, while customers remain accountable for their function code and permissions.
D:This statement is true of Customer EC2 security groups, which addresses a project owner must restrict which network connections can reach an EC2 instance. It does not explain the particular role of AWS Lambda runtime infrastructure; Lambda abstracts away host provisioning and infrastructure operation, while customers remain accountable for their function code and permissions.
Question 846
Within the Cloud Technology and Services domain, which business example MOST clearly illustrates AWS Storage Gateway, rather than a different AWS concept?
- A rendering workload needs high-performance temporary local scratch data that may be lost with its instance
- An on-premises application needs familiar file or storage interfaces connected to AWS cloud storage
- Multiple Linux EC2 instances require a shared elastic file system supporting common file semantics
- A company needs centralized policies and visibility across supported AWS resource backups
Explanation
Correct Answer
B:The decisive requirement is: Use AWS Storage Gateway to bridge local storage access to AWS. This is the role of AWS Storage Gateway. Storage Gateway supports hybrid storage patterns and local caching for selected AWS-backed interfaces.
Incorrect Answers
A:This describes a scenario for EC2 instance store: use instance store for eligible ephemeral EC2 local storage. Instance store provides temporary local storage whose data does not have the durability properties of an EBS volume. It is not the most direct example of AWS Storage Gateway.
C:This describes a scenario for Amazon EFS shared files: use Amazon Elastic File System for managed shared file storage. EFS is a managed elastic network file system for supported Linux workloads, unlike S3 object API storage. It is not the most direct example of AWS Storage Gateway.
D:This describes a scenario for AWS Backup: use AWS Backup to manage backup plans and retention for supported services. AWS Backup centralizes backup administration across supported resources; it is separate from normal object lifecycle transitions. It is not the most direct example of AWS Storage Gateway.
Question 847
A learner is explaining AWS Budgets to colleagues facing this situation: a project manager wants an alert when forecast monthly cloud spending will exceed a set threshold. Which explanation is MOST accurate?
- The billing console presents charges and payment information; budget alerts and granular reports are separate tools.
- AWS Free Tier offers depend on account eligibility, service and current pricing terms; excess usage can still produce charges.
- Budgets supports cost and usage alerts relative to planned thresholds; it is distinct from an invoice payment processor.
- Pricing Calculator models estimated charges from selected assumptions rather than reading an existing account's actual spending.
Explanation
Correct Answer
C:Budgets supports cost and usage alerts relative to planned thresholds; it is distinct from an invoice payment processor. The explanation directly connects AWS Budgets to use AWS Budgets to track spending or usage against defined budget thresholds for the stated requirement.
Incorrect Answers
A:This statement is true of AWS Billing console, which addresses an account administrator wants to inspect current billing information and payment-related account details. It does not explain the particular role of AWS Budgets; Budgets supports cost and usage alerts relative to planned thresholds; it is distinct from an invoice payment processor.
B:This statement is true of AWS Free Tier, which addresses a new learner wants to understand eligible introductory usage offers and their limits. It does not explain the particular role of AWS Budgets; Budgets supports cost and usage alerts relative to planned thresholds; it is distinct from an invoice payment processor.
D:This statement is true of AWS Pricing Calculator, which addresses a solutions advisor wants to estimate charges for a proposed AWS environment before it is created. It does not explain the particular role of AWS Budgets; Budgets supports cost and usage alerts relative to planned thresholds; it is distinct from an invoice payment processor.
Question 848
Within the Cloud Technology and Services domain, which business example MOST clearly illustrates Amazon Lightsail, rather than a different AWS concept?
- An online form should run short application code only when events occur without managing servers
- A simulation workload spends most of its time performing CPU-intensive numerical calculations
- A website needs inbound requests distributed among several healthy application targets
- A small business wants a straightforward virtual private server with bundled resources
Explanation
Correct Answer
D:The decisive requirement is: Use Amazon Lightsail for simplified cloud hosting. This is the role of Amazon Lightsail. Lightsail offers simple virtual server and related resource plans for common small applications and websites.
Incorrect Answers
A:This describes a scenario for AWS Lambda: use AWS Lambda for event-driven serverless function execution. Lambda executes event-triggered code without the customer managing underlying servers, subject to service limits. It is not the most direct example of Amazon Lightsail.
B:This describes a scenario for Compute-optimized EC2: choose an EC2 compute-optimized instance family for CPU-heavy work. Compute-optimized instances provide a high ratio of compute performance for suitable CPU-bound applications. It is not the most direct example of Amazon Lightsail.
C:This describes a scenario for Elastic Load Balancing: use Elastic Load Balancing to distribute incoming workload traffic. Elastic Load Balancing routes requests or connections to available targets rather than relying on one application instance. It is not the most direct example of Amazon Lightsail.
Question 849
A project manager compares Total cost of ownership with other AWS concepts while considering this need: a finance director compares AWS migration with building another private data center. Which pairing assigns the responsibilities or benefits correctly?
- Total cost of ownership: include facilities, hardware, operations, and staffing in a long-term cost comparison; Bring Your Own License: evaluate use of qualifying existing software licenses subject to vendor and AWS terms
- Total cost of ownership: classify cloud usage-based service payments as operating spending; Operating expenditure: include facilities, hardware, operations, and staffing in a long-term cost comparison
- Total cost of ownership: evaluate use of qualifying existing software licenses subject to vendor and AWS terms; Bring Your Own License: include facilities, hardware, operations, and staffing in a long-term cost comparison
- Total cost of ownership: avoid paying for unnecessary always-on capacity by managing idle resources; Idle resource spending: include facilities, hardware, operations, and staffing in a long-term cost comparison
Explanation
Correct Answer
A:The first pairing identifies Total cost of ownership with its actual role: include facilities, hardware, operations, and staffing in a long-term cost comparison. Total cost of ownership considers direct and indirect costs, not only an instance hourly price. The comparison is valid because Bring Your Own License instead addresses evaluate use of qualifying existing software licenses subject to vendor and AWS terms.
Incorrect Answers
B:The roles are swapped. Operating expenditure is associated with classify cloud usage-based service payments as operating spending; Total cost of ownership instead has the role: Include facilities, hardware, operations, and staffing in a long-term cost comparison. Total cost of ownership considers direct and indirect costs, not only an instance hourly price.
C:The roles are swapped. Bring Your Own License is associated with evaluate use of qualifying existing software licenses subject to vendor and AWS terms; Total cost of ownership instead has the role: Include facilities, hardware, operations, and staffing in a long-term cost comparison. Total cost of ownership considers direct and indirect costs, not only an instance hourly price.
D:The roles are swapped. Idle resource spending is associated with avoid paying for unnecessary always-on capacity by managing idle resources; Total cost of ownership instead has the role: Include facilities, hardware, operations, and staffing in a long-term cost comparison. Total cost of ownership considers direct and indirect costs, not only an instance hourly price.
Question 850
A project manager compares AWS Global Accelerator with other AWS concepts while considering this need: an internet-facing app has regional endpoints and needs stable global entry points for traffic routing. Which pairing assigns the responsibilities or benefits correctly?
- AWS Global Accelerator: distribute components across isolated locations inside one geographic Region; Availability Zone: support global network traffic entry and endpoint routing
- AWS Global Accelerator: support global network traffic entry and endpoint routing; Multiple Availability Zones: place redundant application components across different AZs within a Region
- AWS Global Accelerator: place redundant application components across different AZs within a Region; Multiple Availability Zones: support global network traffic entry and endpoint routing
- AWS Global Accelerator: provide part of a multi-Region continuity plan; Multiple AWS Regions: support global network traffic entry and endpoint routing
Explanation
Correct Answer
B:The first pairing identifies AWS Global Accelerator with its actual role: use AWS Global Accelerator for global network traffic entry and endpoint routing. Global Accelerator provides static anycast IP addresses and routes traffic over the AWS global network to healthy endpoints. The comparison is valid because Multiple Availability Zones instead addresses place redundant application components across different AZs within a Region.
Incorrect Answers
A:The roles are swapped. Availability Zone is associated with distribute components across Availability Zones for fault isolation; AWS Global Accelerator instead has the role: Use AWS Global Accelerator for global network traffic entry and endpoint routing. Global Accelerator provides static anycast IP addresses and routes traffic over the AWS global network to healthy endpoints.
C:The roles are swapped. Multiple Availability Zones is associated with place redundant application components across different AZs within a Region; AWS Global Accelerator instead has the role: Use AWS Global Accelerator for global network traffic entry and endpoint routing. Global Accelerator provides static anycast IP addresses and routes traffic over the AWS global network to healthy endpoints.
D:The roles are swapped. Multiple AWS Regions is associated with use a separate AWS Region as part of a multi-Region continuity plan; AWS Global Accelerator instead has the role: Use AWS Global Accelerator for global network traffic entry and endpoint routing. Global Accelerator provides static anycast IP addresses and routes traffic over the AWS global network to healthy endpoints.