Amazon AWS Certified Cloud Practitioner CLF-C02 Practice Test 9
Question 80
A learner is explaining EC2 On-Demand Instances to colleagues facing this situation: a company needs compute capacity for a short unpredictable project and does not want a long commitment. Which explanation is MOST accurate?
- An On-Demand Capacity Reservation addresses EC2 capacity availability rather than by itself providing a commitment pricing reduction.
- Savings Plans provide discounts for covered usage in exchange for a one- or three-year commitment to an hourly spend amount.
- Dedicated Hosts supply dedicated EC2 physical server capacity with characteristics useful for supported bring-your-own-license needs.
- On-Demand pricing gives flexible capacity for irregular or new workloads, generally without the discounts of eligible commitments.
Explanation
Correct Answer
D:On-Demand pricing gives flexible capacity for irregular or new workloads, generally without the discounts of eligible commitments. The explanation directly connects EC2 On-Demand Instances to pay for eligible compute usage without a long-term purchase commitment for the stated requirement.
Incorrect Answers
A:This statement is true of On-Demand Capacity Reservations, which addresses a business needs assurance that EC2 capacity will be available in a chosen Availability Zone for a planned event. It does not explain the particular role of EC2 On-Demand Instances; On-Demand pricing gives flexible capacity for irregular or new workloads, generally without the discounts of eligible commitments.
B:This statement is true of Savings Plans, which addresses a business expects steady eligible compute spending and can commit to a consistent hourly amount. It does not explain the particular role of EC2 On-Demand Instances; On-Demand pricing gives flexible capacity for irregular or new workloads, generally without the discounts of eligible commitments.
C:This statement is true of Dedicated Hosts, which addresses an organization needs a physical host dedicated to its account for certain licensing or compliance needs. It does not explain the particular role of EC2 On-Demand Instances; On-Demand pricing gives flexible capacity for irregular or new workloads, generally without the discounts of eligible commitments.
Question 81
A company wants staff to authenticate to AWS using its existing corporate identity provider. Which AWS service or cloud concept is the MOST direct match for this need?
- Identity federation
- IAM users
- Principle of least privilege
- Temporary security credentials
Explanation
Correct Answer
A:Identity federation fits the need because federation integrates identity-provider authentication with AWS access, supporting centralized workforce identity management. The relevant capability or responsibility is: Federate existing enterprise identities instead of issuing separate permanent credentials.
Incorrect Answers
B:IAM users is associated with a different use case: an organization must represent an individual with long-term credentials in one AWS account. IAM users are identities within an account; organizations generally favor federation and short-lived credentials where suitable. The question instead focuses on a company wants staff to authenticate to AWS using its existing corporate identity provider; Identity federation is the more direct match.
C:Principle of least privilege is associated with a different use case: a developer only needs read access to one object storage bucket for a project. Least privilege restricts permissions to required actions and resources rather than granting broad administrator access. The question instead focuses on a company wants staff to authenticate to AWS using its existing corporate identity provider; Identity federation is the more direct match.
D:Temporary security credentials is associated with a different use case: a contractor needs access for a limited session without receiving a permanent AWS key. Short-lived credentials reduce the time a stolen credential can remain useful compared with persistent access keys. The question instead focuses on a company wants staff to authenticate to AWS using its existing corporate identity provider; Identity federation is the more direct match.
Question 82
A project manager compares Compute commitment flexibility with other AWS concepts while considering this need: finance wants to compare flexible compute consumption with paying less under a usage commitment. Which pairing assigns the responsibilities or benefits correctly?
- Compute commitment flexibility: pay for eligible compute usage without a long-term purchase commitment; EC2 On-Demand Instances: trade some flexibility for eligible discounted capacity or spending commitments
- Compute commitment flexibility: trade some flexibility for eligible discounted capacity or spending commitments; Amazon S3 storage class selection: compare storage duration, retrieval charges and access characteristics of S3 classes
- Compute commitment flexibility: meet this requirement: a research team runs flexible batch processing jobs that can tolerate interruption; EC2 Spot Instances: trade some flexibility for eligible discounted capacity or spending commitments
- Compute commitment flexibility: compare storage duration, retrieval charges and access characteristics of S3 classes; Amazon S3 storage class selection: trade some flexibility for eligible discounted capacity or spending commitments
Explanation
Correct Answer
B:The first pairing identifies Compute commitment flexibility with its actual role: trade some flexibility for eligible discounted capacity or spending commitments. Commitment options can lower qualifying compute costs, but suitability depends on sustained predictable usage and terms. The comparison is valid because S3 storage-class pricing instead addresses compare storage duration, retrieval charges and access characteristics of S3 classes.
Incorrect Answers
A:The roles are swapped. EC2 On-Demand Instances is associated with pay for eligible compute usage without a long-term purchase commitment; Compute commitment flexibility instead has the role: Trade some flexibility for eligible discounted capacity or spending commitments. Commitment options can lower qualifying compute costs, but suitability depends on sustained predictable usage and terms.
C:The roles are swapped. EC2 Spot Instances is associated with use spare EC2 capacity at a discount with interruption risk; Compute commitment flexibility instead has the role: Trade some flexibility for eligible discounted capacity or spending commitments. Commitment options can lower qualifying compute costs, but suitability depends on sustained predictable usage and terms.
D:The roles are swapped. Amazon S3 storage class selection is associated with compare storage duration, retrieval charges and access characteristics of S3 classes; Compute commitment flexibility instead has the role: Trade some flexibility for eligible discounted capacity or spending commitments. Commitment options can lower qualifying compute costs, but suitability depends on sustained predictable usage and terms.
Question 83
Which AWS service or cloud principle is the BEST fit for this outcome or responsibility: meet this requirement: an organization must represent an individual with long-term credentials in one AWS account?
- AWS STS
- IAM groups
- IAM users
- Cross-account role access
Explanation
Correct Answer
C:IAM users directly addresses this outcome. IAM users are identities within an account; organizations generally favor federation and short-lived credentials where suitable. A common relevant example is: an organization must represent an individual with long-term credentials in one AWS account.
Incorrect Answers
A:AWS STS role assumption instead focuses on a different requirement, such as an application needs temporary AWS credentials after assuming an authorized IAM role. STS provides temporary credentials for permitted role or federated sessions; it does not issue physical security tokens. It is not the primary match for the requirement described here: meet this requirement: an organization must represent an individual with long-term credentials in one AWS account.
B:IAM groups instead focuses on a different requirement, such as a team needs to assign the same AWS permissions to several IAM users. IAM groups collect IAM users for permissions management; they are not assumed identities like IAM roles. It is not the primary match for the requirement described here: meet this requirement: an organization must represent an individual with long-term credentials in one AWS account.
D:Cross-account role access instead focuses on a different requirement, such as an auditor from a separate AWS account needs time-limited access to approved audit resources. Cross-account role trust enables authorized temporary access without copying long-term keys to the external account. It is not the primary match for the requirement described here: meet this requirement: an organization must represent an individual with long-term credentials in one AWS account.
Question 84
A stakeholder is considering AWS Support Center because a company needs to open and manage a support case through its applicable AWS plan. What is the MOST relevant capability or benefit?
- Identify AWS partners and offerings
- Support eligible response and contact options
- Support service and account events
- Support eligible technical or account support cases
Explanation
Correct Answer
D:Use the AWS Support Center for eligible technical or account support cases. Support Center is the AWS interface for support cases and related help according to the account's plan. The stated need is specifically a company needs to open and manage a support case through its applicable AWS plan.
Incorrect Answers
A:This outcome fits AWS Partner Network: APN connects customers with AWS partners, such as system integrators and independent software vendors. The stakeholder requires the more specific capability provided by AWS Support Center, not that separate benefit.
B:This outcome fits AWS Support plans: Support benefits and service-level commitments depend on the chosen plan and current AWS support terms. The stakeholder requires the more specific capability provided by AWS Support Center, not that separate benefit.
C:This outcome fits AWS Health Dashboard: AWS Health provides information about relevant service disruptions and scheduled changes; it is distinct from an application metric alarm. The stakeholder requires the more specific capability provided by AWS Support Center, not that separate benefit.
Question 85
A stakeholder is considering Scalability because a research portal expects sustained growth from thousands to millions of visitors over several years. What is the MOST relevant capability or benefit?
- Increase a system's capacity to handle a larger ongoing workload
- Provision capacity when requested rather than waiting for hardware ordering
- Keep the application accessible by using redundant resources and eliminating single points of failure
- Share provider-managed infrastructure while retaining logical workload isolation
Explanation
Correct Answer
A:Increase a system's capacity to handle a larger ongoing workload. Scalability is the ability to handle greater load by adding resources or increasing their capacity as an organization grows. The stated need is specifically a research portal expects sustained growth from thousands to millions of visitors over several years.
Incorrect Answers
B:This outcome fits On-demand provisioning: AWS self-service resource provisioning reduces procurement lead time for many workloads. The stakeholder requires the more specific capability provided by Scalability, not that separate benefit.
C:This outcome fits High availability: High availability focuses on minimizing service interruptions through redundancy and service continuity. The stakeholder requires the more specific capability provided by Scalability, not that separate benefit.
D:This outcome fits Resource pooling: Cloud resource pooling supports multiple customers and workloads through provider-managed shared infrastructure with isolation controls. The stakeholder requires the more specific capability provided by Scalability, not that separate benefit.
Question 86
A company is selecting a separate geographic AWS location for a workload with residency requirements. Which AWS service or cloud concept is the MOST direct match for this need?
- AWS edge location
- AWS Region
- Multiple AWS Regions
- Availability Zone
Explanation
Correct Answer
B:AWS Region fits the need because a Region is a geographically separate area containing multiple Availability Zones; customers select deployment Regions. The relevant capability or responsibility is: Choose an AWS Region to select a geographic cloud infrastructure location.
Incorrect Answers
A:AWS edge location is associated with a different use case: a global website wants cached content served closer to its end users. AWS edge locations support services such as CloudFront and reduce delivery distance for content or requests. The question instead focuses on a company is selecting a separate geographic AWS location for a workload with residency requirements; AWS Region is the more direct match.
C:Multiple AWS Regions is associated with a different use case: a business needs a disaster recovery location outside the primary Region. Deploying across Regions can address geographic disruptions, customer latency and residency objectives at higher complexity. The question instead focuses on a company is selecting a separate geographic AWS location for a workload with residency requirements; AWS Region is the more direct match.
D:Availability Zone is associated with a different use case: a service must use separate isolated locations within one selected AWS Region. Availability Zones are distinct locations within a Region designed to reduce shared failure risks. The question instead focuses on a company is selecting a separate geographic AWS location for a workload with residency requirements; AWS Region is the more direct match.
Question 87
A learner is explaining Customer Lambda function code to colleagues facing this situation: a Lambda function processes user data using application code written by a development team. Which explanation is MOST accurate?
- AWS provides available Regions, while the customer chooses deployment locations to meet its legal and organizational obligations.
- AWS operates the S3 storage infrastructure, but customers configure authorized access to their buckets and objects.
- Serverless eliminates server administration for the customer, not their responsibility for their own application code and data handling.
- For EC2 the customer manages the guest OS, applications and their configuration while AWS manages underlying physical hosts.
Explanation
Correct Answer
C:Serverless eliminates server administration for the customer, not their responsibility for their own application code and data handling. The explanation directly connects Customer Lambda function code to the customer is responsible for the function code and its business logic for the stated requirement.
Incorrect Answers
A:This statement is true of Customer choice of AWS Region, which addresses a business contract requires some client records to remain in a specified geographic jurisdiction. It does not explain the particular role of Customer Lambda function code; Serverless eliminates server administration for the customer, not their responsibility for their own application code and data handling.
B:This statement is true of Customer S3 bucket access, which addresses a team accidentally publishes an S3 bucket containing internal reports. It does not explain the particular role of Customer Lambda function code; Serverless eliminates server administration for the customer, not their responsibility for their own application code and data handling.
D:This statement is true of Customer EC2 guest operating system, which addresses a business runs its own Linux installation on an Amazon EC2 virtual machine. It does not explain the particular role of Customer Lambda function code; Serverless eliminates server administration for the customer, not their responsibility for their own application code and data handling.
Question 88
Which AWS service or cloud principle is the BEST fit for this outcome or responsibility: reduce routine infrastructure management by consuming a managed service?
- High availability
- Resource pooling
- Edge content delivery
- Managed service operations
Explanation
Correct Answer
D:Managed service operations directly addresses this outcome. Managed AWS offerings take on selected provisioning and maintenance tasks while customers remain responsible for their data and access policies. A common relevant example is: an analytics team prefers a managed database rather than operating its own database host.
Incorrect Answers
A:High availability instead focuses on a different requirement, such as a hospital booking service must remain accessible even when one hosting location becomes unavailable. High availability focuses on minimizing service interruptions through redundancy and service continuity. It is not the primary match for the requirement described here: reduce routine infrastructure management by consuming a managed service.
B:Resource pooling instead focuses on a different requirement, such as several departments need separate virtual workloads without each purchasing dedicated physical machines. Cloud resource pooling supports multiple customers and workloads through provider-managed shared infrastructure with isolation controls. It is not the primary match for the requirement described here: reduce routine infrastructure management by consuming a managed service.
C:Edge content delivery instead focuses on a different requirement, such as a media company serves static images to viewers in many countries and wants them delivered near viewers. An edge content delivery network reduces distance to cached content and can improve latency for geographically distributed users. It is not the primary match for the requirement described here: reduce routine infrastructure management by consuming a managed service.
Question 89
Which AWS service or cloud principle is the BEST fit for this outcome or responsibility: identify potential threats from supported telemetry?
- Amazon GuardDuty
- AWS KMS
- AWS Config
- Encryption in transit
Explanation
Correct Answer
A:Amazon GuardDuty directly addresses this outcome. GuardDuty analyzes signals for suspicious or malicious behavior rather than acting as a general-purpose firewall. A common relevant example is: a security team wants managed detection of suspicious activity from AWS account and workload signals.
Incorrect Answers
B:AWS KMS managed keys instead focuses on a different requirement, such as an application team needs centralized control of encryption key use and auditability. AWS KMS manages keys and enforces key-use controls for integrated services; it is not a general database service. It is not the primary match for the requirement described here: identify potential threats from supported telemetry.
C:AWS Config resource history instead focuses on a different requirement, such as an organization must inspect how an AWS resource configuration changed over time. AWS Config tracks supported resource configuration history and rules rather than serving as a generic application log service. It is not the primary match for the requirement described here: identify potential threats from supported telemetry.
D:Encryption in transit instead focuses on a different requirement, such as a company wants to protect data while it moves between clients and an online service. Encryption in transit protects communications over networks; it differs from encryption of data stored on disks. It is not the primary match for the requirement described here: identify potential threats from supported telemetry.
Question 90
Within the Cloud Technology and Services domain, which business example MOST clearly illustrates Amazon CloudFront, rather than a different AWS concept?
- A company is selecting a separate geographic AWS location for a workload with residency requirements
- Users worldwide download the same publicly available product images from an origin
- An internet-facing app has regional endpoints and needs stable global entry points for traffic routing
- A service must use separate isolated locations within one selected AWS Region
Explanation
Correct Answer
B:The decisive requirement is: Deliver cacheable content through Amazon CloudFront edge locations. This is the role of Amazon CloudFront. CloudFront is AWS's content delivery network and can reduce latency by caching copies near viewers.
Incorrect Answers
A:This describes a scenario for AWS Region: choose an AWS Region to select a geographic cloud infrastructure location. A Region is a geographically separate area containing multiple Availability Zones; customers select deployment Regions. It is not the most direct example of Amazon CloudFront.
C:This describes a scenario for AWS Global Accelerator: use AWS Global Accelerator for global network traffic entry and endpoint routing. Global Accelerator provides static anycast IP addresses and routes traffic over the AWS global network to healthy endpoints. It is not the most direct example of Amazon CloudFront.
D:This describes a scenario for Availability Zone: distribute components across Availability Zones for fault isolation. Availability Zones are distinct locations within a Region designed to reduce shared failure risks. It is not the most direct example of Amazon CloudFront.