Amazon AWS Certified Cloud Practitioner CLF-C02 Practice Test 98
Question 970
Which AWS service or cloud principle is the BEST fit for this outcome or responsibility: identify AWS partners and offerings?
- AWS Trusted Advisor
- AWS Partner Network
- AWS Support plans
- AWS re:Post
Explanation
Correct Answer
B:AWS Partner Network directly addresses this outcome. APN connects customers with AWS partners, such as system integrators and independent software vendors. A common relevant example is: a company needs help finding qualified AWS consulting or software partners.
Incorrect Answers
A:AWS Trusted Advisor instead focuses on a different requirement, such as an operations team wants recommendations for AWS best practices in areas such as costs and security. Trusted Advisor provides advisory findings in supported categories; available checks and features depend on account arrangements. It is not the primary match for the requirement described here: identify AWS partners and offerings.
C:AWS Support plans instead focuses on a different requirement, such as a business wants to compare the support response options included with different AWS support tiers. Support benefits and service-level commitments depend on the chosen plan and current AWS support terms. It is not the primary match for the requirement described here: identify AWS partners and offerings.
D:AWS re:Post instead focuses on a different requirement, such as a developer wants to ask a public technical question and learn from AWS community answers. re:Post provides community questions and answers rather than guaranteed contractual support response times. It is not the primary match for the requirement described here: identify AWS partners and offerings.
Question 971
Within the Cloud Concepts domain, which business example MOST clearly illustrates Sustainability pillar, rather than a different AWS concept?
- A team compares computing approaches to meet response-time goals without unnecessary resources
- A business wants to protect data, identities, and systems while maintaining risk controls
- A company wants to reduce the environmental impact of its cloud workloads
- An application needs to recover predictably from failures and adapt when demand changes
Explanation
Correct Answer
C:The decisive requirement is: Minimize energy consumption and environmental impact per unit of work. This is the role of Sustainability pillar. The Sustainability pillar encourages efficient resource use and reduced environmental impact of running workloads.
Incorrect Answers
A:This describes a scenario for Performance Efficiency pillar: use computing resources efficiently as requirements change. The Performance Efficiency pillar focuses on choosing and adapting resources to match workload performance needs. It is not the most direct example of Sustainability pillar.
B:This describes a scenario for Security pillar: protect information and systems using risk-aware controls. The Security pillar addresses identity, detection, infrastructure and data protection in the AWS Well-Architected Framework. It is not the most direct example of Sustainability pillar.
D:This describes a scenario for Reliability pillar: recover from disruptions and perform the intended function consistently. The Reliability pillar emphasizes recovery, distributed design, and meeting availability requirements. It is not the most direct example of Sustainability pillar.
Question 972
A learner is explaining AWS Lambda to colleagues facing this situation: an online form should run short application code only when events occur without managing servers. Which explanation is MOST accurate?
- Compute-optimized instances provide a high ratio of compute performance for suitable CPU-bound applications.
- ECS manages deployment and scheduling of containers, with eligible EC2 or Fargate capacity options.
- EC2 Auto Scaling can add or remove instances based on policies to help meet capacity and availability needs.
- Lambda executes event-triggered code without the customer managing underlying servers, subject to service limits.
Explanation
Correct Answer
D:Lambda executes event-triggered code without the customer managing underlying servers, subject to service limits. The explanation directly connects AWS Lambda to use AWS Lambda for event-driven serverless function execution for the stated requirement.
Incorrect Answers
A:This statement is true of Compute-optimized EC2, which addresses a simulation workload spends most of its time performing CPU-intensive numerical calculations. It does not explain the particular role of AWS Lambda; Lambda executes event-triggered code without the customer managing underlying servers, subject to service limits.
B:This statement is true of Amazon ECS, which addresses an application team needs AWS-native orchestration of container workloads. It does not explain the particular role of AWS Lambda; Lambda executes event-triggered code without the customer managing underlying servers, subject to service limits.
C:This statement is true of EC2 Auto Scaling, which addresses a retail site needs more EC2 instances during traffic spikes and fewer when usage falls. It does not explain the particular role of AWS Lambda; Lambda executes event-triggered code without the customer managing underlying servers, subject to service limits.
Question 973
A security team wants more than a single network restriction protecting sensitive records. Which AWS service or cloud concept is the MOST direct match for this need?
- Defense in depth
- AWS Artifact compliance reports
- AWS Audit Manager
- Amazon GuardDuty
Explanation
Correct Answer
A:Defense in depth fits the need because defense in depth reduces dependence on a single security mechanism by using multiple complementary safeguards. The relevant capability or responsibility is: Apply layered identity, network and data-protection controls.
Incorrect Answers
B:AWS Artifact compliance reports is associated with a different use case: an auditor asks a company for AWS third-party compliance and assurance documentation. AWS Artifact gives customers on-demand access to available AWS assurance reports and selected compliance agreements. The question instead focuses on a security team wants more than a single network restriction protecting sensitive records; Defense in depth is the more direct match.
C:AWS Audit Manager evidence is associated with a different use case: a compliance team needs help collecting evidence against a recurring internal control assessment. AWS Audit Manager can collect evidence for assessments but does not replace an organization's compliance decisions. The question instead focuses on a security team wants more than a single network restriction protecting sensitive records; Defense in depth is the more direct match.
D:Amazon GuardDuty threat detection is associated with a different use case: a security team wants managed detection of suspicious activity from AWS account and workload signals. GuardDuty analyzes signals for suspicious or malicious behavior rather than acting as a general-purpose firewall. The question instead focuses on a security team wants more than a single network restriction protecting sensitive records; Defense in depth is the more direct match.
Question 974
A stakeholder is considering EC2 On-Demand Instances because a company needs compute capacity for a short unpredictable project and does not want a long commitment. What is the MOST relevant capability or benefit?
- Account for service- and route-dependent data transfer pricing
- Pay for eligible compute usage without a long-term purchase commitment
- Compare storage duration, retrieval charges and access characteristics of S3 classes
- Trade some flexibility for eligible discounted capacity or spending commitments
Explanation
Correct Answer
B:Pay for eligible compute usage without a long-term purchase commitment. On-Demand pricing gives flexible capacity for irregular or new workloads, generally without the discounts of eligible commitments. The stated need is specifically a company needs compute capacity for a short unpredictable project and does not want a long commitment.
Incorrect Answers
A:This outcome fits AWS data transfer charges: Data entering AWS is often priced differently from outbound or cross-Region traffic; actual charges depend on service and path. The stakeholder requires the more specific capability provided by EC2 On-Demand Instances, not that separate benefit.
C:This outcome fits S3 storage-class pricing: S3 storage classes have distinct storage, retrieval and minimum-duration attributes that influence total cost. The stakeholder requires the more specific capability provided by EC2 On-Demand Instances, not that separate benefit.
D:This outcome fits Compute commitment flexibility: Commitment options can lower qualifying compute costs, but suitability depends on sustained predictable usage and terms. The stakeholder requires the more specific capability provided by EC2 On-Demand Instances, not that separate benefit.
Question 975
A project manager compares Multiple Availability Zones with other AWS concepts while considering this need: an application must remain available if one Availability Zone experiences an outage. Which pairing assigns the responsibilities or benefits correctly?
- Multiple Availability Zones: select a geographic cloud infrastructure location; AWS Region: place redundant application components across different AZs within a Region
- Multiple Availability Zones: meet this requirement: a government customer requires that certain datasets be stored in a specified legal jurisdiction; Data sovereignty Region choice: place redundant application components across different AZs within a Region
- Multiple Availability Zones: place redundant application components across different AZs within a Region; AWS Region: select a geographic cloud infrastructure location
- Multiple Availability Zones: support global network traffic entry and endpoint routing; AWS Global Accelerator: place redundant application components across different AZs within a Region
Explanation
Correct Answer
C:The first pairing identifies Multiple Availability Zones with its actual role: place redundant application components across different AZs within a Region. Multi-AZ deployments can avoid a single-AZ failure taking down the whole application. The comparison is valid because AWS Region instead addresses choose an AWS Region to select a geographic cloud infrastructure location.
Incorrect Answers
A:The roles are swapped. AWS Region is associated with choose an AWS Region to select a geographic cloud infrastructure location; Multiple Availability Zones instead has the role: Place redundant application components across different AZs within a Region. Multi-AZ deployments can avoid a single-AZ failure taking down the whole application.
B:The roles are swapped. Data sovereignty Region choice is associated with select an appropriate available AWS Region and check service data-location behavior; Multiple Availability Zones instead has the role: Place redundant application components across different AZs within a Region. Multi-AZ deployments can avoid a single-AZ failure taking down the whole application.
D:The roles are swapped. AWS Global Accelerator is associated with use AWS Global Accelerator for global network traffic entry and endpoint routing; Multiple Availability Zones instead has the role: Place redundant application components across different AZs within a Region. Multi-AZ deployments can avoid a single-AZ failure taking down the whole application.
Question 976
An application team needs centralized control of encryption key use and auditability. Which AWS service or cloud concept is the MOST direct match for this need?
- Security logging retention
- Amazon GuardDuty
- AWS Organizations
- AWS KMS
Explanation
Correct Answer
D:AWS KMS fits the need because aWS KMS manages keys and enforces key-use controls for integrated services; it is not a general database service. The relevant capability or responsibility is: Use AWS Key Management Service for supported cryptographic key management.
Incorrect Answers
A:Security logging retention is associated with a different use case: an organization wants security logs available for internal investigations for a defined period. Collecting logs alone is insufficient unless their access, preservation and lifecycle align with organizational policy. The question instead focuses on an application team needs centralized control of encryption key use and auditability; AWS KMS is the more direct match.
B:Amazon GuardDuty threat detection is associated with a different use case: a security team wants managed detection of suspicious activity from AWS account and workload signals. GuardDuty analyzes signals for suspicious or malicious behavior rather than acting as a general-purpose firewall. The question instead focuses on an application team needs centralized control of encryption key use and auditability; AWS KMS is the more direct match.
C:AWS Organizations governance is associated with a different use case: a company needs centralized governance across many separate AWS accounts. Organizations groups accounts and supports policies and billing consolidation; it does not itself analyze threats. The question instead focuses on an application team needs centralized control of encryption key use and auditability; AWS KMS is the more direct match.
Question 977
A stakeholder is considering Multiple Availability Zones because an application must remain available if one Availability Zone experiences an outage. What is the MOST relevant capability or benefit?
- Place redundant application components across different AZs within a Region
- Support global network traffic entry and endpoint routing
- Meet this requirement: a government customer requires that certain datasets be stored in a specified legal jurisdiction
- Select a geographic cloud infrastructure location
Explanation
Correct Answer
A:Place redundant application components across different AZs within a Region. Multi-AZ deployments can avoid a single-AZ failure taking down the whole application. The stated need is specifically an application must remain available if one Availability Zone experiences an outage.
Incorrect Answers
B:This outcome fits AWS Global Accelerator: Global Accelerator provides static anycast IP addresses and routes traffic over the AWS global network to healthy endpoints. The stakeholder requires the more specific capability provided by Multiple Availability Zones, not that separate benefit.
C:This outcome fits Data sovereignty Region choice: Region choice is a customer decision for residency compliance, subject to service availability and contractual requirements. The stakeholder requires the more specific capability provided by Multiple Availability Zones, not that separate benefit.
D:This outcome fits AWS Region: A Region is a geographically separate area containing multiple Availability Zones; customers select deployment Regions. The stakeholder requires the more specific capability provided by Multiple Availability Zones, not that separate benefit.
Question 978
An analyst needs to query data already stored in S3 using SQL without provisioning a database server. Which AWS service or cloud concept is the MOST direct match for this need?
- Amazon SageMaker AI
- Amazon Athena
- AWS Glue
- Amazon EMR
Explanation
Correct Answer
B:Amazon Athena fits the need because athena is a serverless interactive query service for supported data sources such as S3. The relevant capability or responsibility is: Use Amazon Athena for interactive SQL analysis over data in S3.
Incorrect Answers
A:Amazon SageMaker AI is associated with a different use case: a machine learning team needs tools to build and deploy custom ML models. SageMaker AI supports building, training and deploying ML models rather than simply translating text. The question instead focuses on an analyst needs to query data already stored in S3 using SQL without provisioning a database server; Amazon Athena is the more direct match.
C:AWS Glue is associated with a different use case: a data team needs managed data integration and metadata catalog features for analytics workloads. Glue supports preparing and cataloging data; it is not the primary object storage service. The question instead focuses on an analyst needs to query data already stored in S3 using SQL without provisioning a database server; Amazon Athena is the more direct match.
D:Amazon EMR is associated with a different use case: a team wants managed compute for large-scale big-data frameworks such as Apache Spark. EMR runs supported distributed analytics frameworks and is not a relational transaction service. The question instead focuses on an analyst needs to query data already stored in S3 using SQL without provisioning a database server; Amazon Athena is the more direct match.
Question 979
Within the Security and Compliance domain, which business example MOST clearly illustrates Amazon Detective, rather than a different AWS concept?
- A governance team asks where to review public AWS security documentation and service compliance information
- An organization needs general recommendations to harden AWS workloads
- An analyst wants to investigate relationships among security findings after suspicious activity is detected
- A company wants to evaluate a third-party security product compatible with AWS workloads
Explanation
Correct Answer
C:The decisive requirement is: Use Amazon Detective to assist security investigations. This is the role of Amazon Detective. Detective correlates supported signals for investigation; GuardDuty focuses on finding potential threats.
Incorrect Answers
A:This describes a scenario for AWS Certified security documentation: consult official AWS security documentation and compliance resources. AWS official security and compliance pages provide reference material; the customer's own compliance assessment remains necessary. It is not the most direct example of Amazon Detective.
B:This describes a scenario for AWS security best practices: use AWS security best-practice resources and service-specific recommendations. AWS security guidance supports safe decisions, while controls still need deliberate configuration by the customer. It is not the most direct example of Amazon Detective.
D:This describes a scenario for AWS Marketplace security software: find third-party software offerings through AWS Marketplace. Marketplace lets customers discover and procure partner solutions; it is not the same as an AWS native security monitoring service. It is not the most direct example of Amazon Detective.
Question 980
A learner is explaining Scalability to colleagues facing this situation: a research portal expects sustained growth from thousands to millions of visitors over several years. Which explanation is MOST accurate?
- AWS handles the facilities and underlying physical infrastructure, freeing customers from those data-center tasks.
- Elasticity aligns live capacity with changing workload demand so idle peak-sized resources do not remain continuously allocated.
- AWS Regions enable deployment in multiple geographies without building and operating a physical data center in each market.
- Scalability is the ability to handle greater load by adding resources or increasing their capacity as an organization grows.
Explanation
Correct Answer
D:Scalability is the ability to handle greater load by adding resources or increasing their capacity as an organization grows. The explanation directly connects Scalability to increase a system's capacity to handle a larger ongoing workload for the stated requirement.
Incorrect Answers
A:This statement is true of Reduced infrastructure maintenance, which addresses a small team prefers to focus on application features instead of replacing failed server hardware. It does not explain the particular role of Scalability; Scalability is the ability to handle greater load by adding resources or increasing their capacity as an organization grows.
B:This statement is true of Elasticity, which addresses an online store has unpredictable weekend traffic spikes followed by quiet weekdays. It does not explain the particular role of Scalability; Scalability is the ability to handle greater load by adding resources or increasing their capacity as an organization grows.
C:This statement is true of Global reach, which addresses a software provider wants to serve customers from multiple continents without building overseas data centers. It does not explain the particular role of Scalability; Scalability is the ability to handle greater load by adding resources or increasing their capacity as an organization grows.