Amazon AWS Certified Cloud Practitioner CLF-C02 Practice Test 90
Question 890
Within the Cloud Technology and Services domain, which business example MOST clearly illustrates Amazon EFS, rather than a different AWS concept?
- An organization cannot accurately predict which stored objects will be accessed often next month
- Multiple Linux EC2 instances require a shared elastic file system supporting common file semantics
- A database server on EC2 needs persistent block storage beyond the life of one specific host
- A business stores images and documents as objects accessed using service APIs
Explanation
Correct Answer
B:The decisive requirement is: Use Amazon Elastic File System for managed shared file storage. This is the role of Amazon EFS. EFS is a managed elastic network file system for supported Linux workloads, unlike S3 object API storage.
Incorrect Answers
A:This describes a scenario for S3 Intelligent-Tiering: use S3 Intelligent-Tiering to optimize eligible data with changing access patterns. Intelligent-Tiering moves eligible objects among access tiers based on usage, with monitoring and other class terms. It is not the most direct example of Amazon EFS.
C:This describes a scenario for Amazon EBS block volumes: use Amazon EBS volumes for persistent EC2 block storage. EBS provides network-attached block volumes with persistence and snapshot capabilities subject to volume type and configuration. It is not the most direct example of Amazon EFS.
D:This describes a scenario for Amazon S3 object storage: use Amazon S3 for scalable object storage. S3 stores data as objects in buckets; it is not an attachable EC2 block device or shared POSIX file system. It is not the most direct example of Amazon EFS.
Question 891
A rendering workload needs high-performance temporary local scratch data that may be lost with its instance. Which AWS service or cloud concept is the MOST direct match for this need?
- AWS Storage Gateway
- Amazon S3
- EC2 instance store
- S3 Glacier Deep Archive
Explanation
Correct Answer
C:EC2 instance store fits the need because instance store provides temporary local storage whose data does not have the durability properties of an EBS volume. The relevant capability or responsibility is: Use instance store for eligible ephemeral EC2 local storage.
Incorrect Answers
A:AWS Storage Gateway is associated with a different use case: an on-premises application needs familiar file or storage interfaces connected to AWS cloud storage. Storage Gateway supports hybrid storage patterns and local caching for selected AWS-backed interfaces. The question instead focuses on a rendering workload needs high-performance temporary local scratch data that may be lost with its instance; EC2 instance store is the more direct match.
B:Amazon S3 object storage is associated with a different use case: a business stores images and documents as objects accessed using service APIs. S3 stores data as objects in buckets; it is not an attachable EC2 block device or shared POSIX file system. The question instead focuses on a rendering workload needs high-performance temporary local scratch data that may be lost with its instance; EC2 instance store is the more direct match.
D:S3 Glacier Deep Archive is associated with a different use case: a regulator requires long-term retention of records that will almost never be retrieved. Deep Archive prioritizes low storage cost and accepts retrieval delays, unlike immediately accessed S3 classes. The question instead focuses on a rendering workload needs high-performance temporary local scratch data that may be lost with its instance; EC2 instance store is the more direct match.
Question 892
A project manager compares AWS re:Post with other AWS concepts while considering this need: a developer wants to ask a public technical question and learn from AWS community answers. Which pairing assigns the responsibilities or benefits correctly?
- AWS re:Post: support eligible response and contact options; AWS Support plans: support community-based AWS technical discussions
- AWS re:Post: support service and account events; AWS Health Dashboard: support community-based AWS technical discussions
- AWS re:Post: identify AWS partners and offerings; AWS Partner Network: support community-based AWS technical discussions
- AWS re:Post: support community-based AWS technical discussions; AWS Partner Network: identify AWS partners and offerings
Explanation
Correct Answer
D:The first pairing identifies AWS re:Post with its actual role: use AWS re:Post for community-based AWS technical discussions. re:Post provides community questions and answers rather than guaranteed contractual support response times. The comparison is valid because AWS Partner Network instead addresses use AWS Partner Network resources to identify AWS partners and offerings.
Incorrect Answers
A:The roles are swapped. AWS Support plans is associated with review current AWS Support plans for eligible response and contact options; AWS re:Post instead has the role: Use AWS re:Post for community-based AWS technical discussions. re:Post provides community questions and answers rather than guaranteed contractual support response times.
B:The roles are swapped. AWS Health Dashboard is associated with review AWS Health Dashboard for service and account events; AWS re:Post instead has the role: Use AWS re:Post for community-based AWS technical discussions. re:Post provides community questions and answers rather than guaranteed contractual support response times.
C:The roles are swapped. AWS Partner Network is associated with use AWS Partner Network resources to identify AWS partners and offerings; AWS re:Post instead has the role: Use AWS re:Post for community-based AWS technical discussions. re:Post provides community questions and answers rather than guaranteed contractual support response times.
Question 893
A developer wants a Java application to interact with AWS services using language libraries. Which AWS service or cloud concept is the MOST direct match for this need?
- AWS SDKs
- AWS CloudFormation
- AWS Outposts
- AWS Management Console
Explanation
Correct Answer
A:AWS SDKs fits the need because aWS SDKs provide language-specific APIs and tooling for integrating application software with AWS. The relevant capability or responsibility is: Use an AWS SDK to call service APIs from application code.
Incorrect Answers
B:AWS CloudFormation is associated with a different use case: a cloud team must define a repeatable infrastructure configuration under version control. CloudFormation uses templates and stacks to create and manage supported AWS resources consistently. The question instead focuses on a developer wants a Java application to interact with AWS services using language libraries; AWS SDKs is the more direct match.
C:AWS Outposts is associated with a different use case: a manufacturer needs AWS-managed hardware and selected cloud services in its own facility. Outposts extends supported AWS infrastructure and services to customer locations where local processing or data needs apply. The question instead focuses on a developer wants a Java application to interact with AWS services using language libraries; AWS SDKs is the more direct match.
D:AWS Management Console is associated with a different use case: a business analyst occasionally needs to view AWS resources through a browser interface. The AWS Management Console is a browser-based entry point for authorized AWS account users. The question instead focuses on a developer wants a Java application to interact with AWS services using language libraries; AWS SDKs is the more direct match.
Question 894
A learner is explaining IAM users to colleagues facing this situation: an organization must represent an individual with long-term credentials in one AWS account. Which explanation is MOST accurate?
- Cross-account role trust enables authorized temporary access without copying long-term keys to the external account.
- IAM users are identities within an account; organizations generally favor federation and short-lived credentials where suitable.
- IAM groups collect IAM users for permissions management; they are not assumed identities like IAM roles.
- The root user has highly privileged account-wide capabilities and should be protected and used only when necessary.
Explanation
Correct Answer
B:IAM users are identities within an account; organizations generally favor federation and short-lived credentials where suitable. The explanation directly connects IAM users to use an IAM user where that identity model is specifically required for the stated requirement.
Incorrect Answers
A:This statement is true of Cross-account role access, which addresses an auditor from a separate AWS account needs time-limited access to approved audit resources. It does not explain the particular role of IAM users; IAM users are identities within an account; organizations generally favor federation and short-lived credentials where suitable.
C:This statement is true of IAM groups, which addresses a team needs to assign the same AWS permissions to several IAM users. It does not explain the particular role of IAM users; IAM users are identities within an account; organizations generally favor federation and short-lived credentials where suitable.
D:This statement is true of Root user protection, which addresses a newly created AWS account still has its root user's password and no extra protection. It does not explain the particular role of IAM users; IAM users are identities within an account; organizations generally favor federation and short-lived credentials where suitable.
Question 895
A learner is explaining Availability Zone to colleagues facing this situation: a service must use separate isolated locations within one selected AWS Region. Which explanation is MOST accurate?
- Region choice is a customer decision for residency compliance, subject to service availability and contractual requirements.
- Deploying across Regions can address geographic disruptions, customer latency and residency objectives at higher complexity.
- Availability Zones are distinct locations within a Region designed to reduce shared failure risks.
- AWS edge locations support services such as CloudFront and reduce delivery distance for content or requests.
Explanation
Correct Answer
C:Availability Zones are distinct locations within a Region designed to reduce shared failure risks. The explanation directly connects Availability Zone to distribute components across Availability Zones for fault isolation for the stated requirement.
Incorrect Answers
A:This statement is true of Data sovereignty Region choice, which addresses a government customer requires that certain datasets be stored in a specified legal jurisdiction. It does not explain the particular role of Availability Zone; Availability Zones are distinct locations within a Region designed to reduce shared failure risks.
B:This statement is true of Multiple AWS Regions, which addresses a business needs a disaster recovery location outside the primary Region. It does not explain the particular role of Availability Zone; Availability Zones are distinct locations within a Region designed to reduce shared failure risks.
D:This statement is true of AWS edge location, which addresses a global website wants cached content served closer to its end users. It does not explain the particular role of Availability Zone; Availability Zones are distinct locations within a Region designed to reduce shared failure risks.
Question 896
Which AWS service or cloud principle is the BEST fit for this outcome or responsibility: support community-based AWS technical discussions?
- AWS Support Center
- AWS Trusted Advisor
- AWS Health Dashboard
- AWS re:Post
Explanation
Correct Answer
D:AWS re:Post directly addresses this outcome. re:Post provides community questions and answers rather than guaranteed contractual support response times. A common relevant example is: a developer wants to ask a public technical question and learn from AWS community answers.
Incorrect Answers
A:AWS Support Center instead focuses on a different requirement, such as a company needs to open and manage a support case through its applicable AWS plan. Support Center is the AWS interface for support cases and related help according to the account's plan. It is not the primary match for the requirement described here: support community-based AWS technical discussions.
B:AWS Trusted Advisor instead focuses on a different requirement, such as an operations team wants recommendations for AWS best practices in areas such as costs and security. Trusted Advisor provides advisory findings in supported categories; available checks and features depend on account arrangements. It is not the primary match for the requirement described here: support community-based AWS technical discussions.
C:AWS Health Dashboard instead focuses on a different requirement, such as a team wants to understand AWS service events that may affect its account or Region. AWS Health provides information about relevant service disruptions and scheduled changes; it is distinct from an application metric alarm. It is not the primary match for the requirement described here: support community-based AWS technical discussions.
Question 897
A project manager compares Relocating a workload with other AWS concepts while considering this need: a company can move a supported virtualized environment to AWS while maintaining its familiar virtualization stack. Which pairing assigns the responsibilities or benefits correctly?
- Relocating a workload: move compatible virtual machines or virtualized infrastructure with minimal change; Refactoring migration: make significant application changes to use cloud-native capabilities
- Relocating a workload: organize organizational readiness across AWS CAF perspectives; AWS Cloud Adoption Framework: move compatible virtual machines or virtualized infrastructure with minimal change
- Relocating a workload: move the existing workload largely as-is to cloud infrastructure; Rehosting migration: move compatible virtual machines or virtualized infrastructure with minimal change
- Relocating a workload: make significant application changes to use cloud-native capabilities; Refactoring migration: move compatible virtual machines or virtualized infrastructure with minimal change
Explanation
Correct Answer
A:The first pairing identifies Relocating a workload with its actual role: move compatible virtual machines or virtualized infrastructure with minimal change. Relocating retains much of the underlying virtualization model while shifting where it runs. The comparison is valid because Refactoring migration instead addresses make significant application changes to use cloud-native capabilities.
Incorrect Answers
B:The roles are swapped. AWS Cloud Adoption Framework is associated with organize organizational readiness across AWS CAF perspectives; Relocating a workload instead has the role: Move compatible virtual machines or virtualized infrastructure with minimal change. Relocating retains much of the underlying virtualization model while shifting where it runs.
C:The roles are swapped. Rehosting migration is associated with move the existing workload largely as-is to cloud infrastructure; Relocating a workload instead has the role: Move compatible virtual machines or virtualized infrastructure with minimal change. Relocating retains much of the underlying virtualization model while shifting where it runs.
D:The roles are swapped. Refactoring migration is associated with make significant application changes to use cloud-native capabilities; Relocating a workload instead has the role: Move compatible virtual machines or virtualized infrastructure with minimal change. Relocating retains much of the underlying virtualization model while shifting where it runs.
Question 898
A cloud team cannot tell whether a change improved customer-facing performance. Which AWS service or cloud concept is the MOST direct match for this need?
- Test recovery assumptions
- Measure outcomes
- Operational Excellence pillar
- Sustainability pillar
Explanation
Correct Answer
B:Measure outcomes fits the need because the Well-Architected approach encourages observing real workload outcomes rather than relying only on resource existence. The relevant capability or responsibility is: Use operational metrics and business outcomes to evaluate improvements.
Incorrect Answers
A:Test recovery assumptions is associated with a different use case: a service owner has a written recovery plan but does not know whether it would work in practice. Regular recovery testing reveals gaps in backup, dependency, and restoration plans before a real disruption. The question instead focuses on a cloud team cannot tell whether a change improved customer-facing performance; Measure outcomes is the more direct match.
C:Operational Excellence pillar is associated with a different use case: a team wants to improve routine operations through measurement, incident learning, and repeatable processes. The Operational Excellence pillar focuses on running and monitoring workloads effectively and improving operational processes. The question instead focuses on a cloud team cannot tell whether a change improved customer-facing performance; Measure outcomes is the more direct match.
D:Sustainability pillar is associated with a different use case: a company wants to reduce the environmental impact of its cloud workloads. The Sustainability pillar encourages efficient resource use and reduced environmental impact of running workloads. The question instead focuses on a cloud team cannot tell whether a change improved customer-facing performance; Measure outcomes is the more direct match.
Question 899
A learner is explaining Amazon Cognito to colleagues facing this situation: a mobile application needs sign-up and authentication for its end users. Which explanation is MOST accurate?
- An IAM policy expresses permissions; it is not itself a human identity or a network firewall.
- IAM Identity Center connects workforce identities and assigns access across AWS accounts and compatible applications.
- Cognito focuses on end-user identity for web and mobile applications, not AWS workforce account administration.
- IAM users are identities within an account; organizations generally favor federation and short-lived credentials where suitable.
Explanation
Correct Answer
C:Cognito focuses on end-user identity for web and mobile applications, not AWS workforce account administration. The explanation directly connects Amazon Cognito to use Amazon Cognito for application-user authentication and identity features for the stated requirement.
Incorrect Answers
A:This statement is true of IAM policies, which addresses a company needs a document specifying allowed or denied AWS actions on selected resources. It does not explain the particular role of Amazon Cognito; Cognito focuses on end-user identity for web and mobile applications, not AWS workforce account administration.
B:This statement is true of AWS IAM Identity Center, which addresses employees need centralized workforce access to multiple AWS accounts using corporate identities. It does not explain the particular role of Amazon Cognito; Cognito focuses on end-user identity for web and mobile applications, not AWS workforce account administration.
D:This statement is true of IAM users, which addresses an organization must represent an individual with long-term credentials in one AWS account. It does not explain the particular role of Amazon Cognito; Cognito focuses on end-user identity for web and mobile applications, not AWS workforce account administration.
Question 900
A learner is explaining AWS CloudFormation to colleagues facing this situation: a cloud team must define a repeatable infrastructure configuration under version control. Which explanation is MOST accurate?
- Outposts extends supported AWS infrastructure and services to customer locations where local processing or data needs apply.
- The AWS CLI exposes AWS service operations through command-line commands suitable for controlled automation.
- A hybrid deployment model uses both on-premises environments and cloud infrastructure rather than moving every workload immediately.
- CloudFormation uses templates and stacks to create and manage supported AWS resources consistently.
Explanation
Correct Answer
D:CloudFormation uses templates and stacks to create and manage supported AWS resources consistently. The explanation directly connects AWS CloudFormation to use AWS CloudFormation for infrastructure as code provisioning for the stated requirement.
Incorrect Answers
A:This statement is true of AWS Outposts, which addresses a manufacturer needs AWS-managed hardware and selected cloud services in its own facility. It does not explain the particular role of AWS CloudFormation; CloudFormation uses templates and stacks to create and manage supported AWS resources consistently.
B:This statement is true of AWS CLI, which addresses an operations engineer wants to run repeatable AWS service commands from a terminal script. It does not explain the particular role of AWS CloudFormation; CloudFormation uses templates and stacks to create and manage supported AWS resources consistently.
C:This statement is true of Hybrid cloud deployment, which addresses a bank must keep some applications on its own premises while using AWS for other services. It does not explain the particular role of AWS CloudFormation; CloudFormation uses templates and stacks to create and manage supported AWS resources consistently.