Amazon AWS Certified Cloud Practitioner CLF-C02 Practice Test 15

Question 140

Three AWS decisions are needed in the order given. Finding 1: An organization wants a vetted third-party implementation partner to help plan its AWS deployment and manage agreed delivery work. Finding 2: A business identifies a suspected phishing campaign launched from AWS infrastructure and wants to send substantiated abuse evidence to AWS. Finding 3: An enterprise wants specialized AWS experts to help implement a migration and assumes the marketplace listing itself guarantees an AWS-delivered consulting engagement. Which complete response addresses all three findings in order?

(1) Evaluate suitable AWS Partner Network providers and verify their relevant skills and contractual scope. (2) Review the applicable AWS Health information and account-specific event notifications where available. (3) Evaluate AWS Professional Services or qualified partners and agree a specific statement of work and responsibilities.
(1) Review the applicable AWS Health information and account-specific event notifications where available. (2) Report the suspected abuse through the appropriate AWS Trust and Safety process with relevant evidence. (3) Evaluate AWS Professional Services or qualified partners and agree a specific statement of work and responsibilities.
(1) Evaluate suitable AWS Partner Network providers and verify their relevant skills and contractual scope. (2) Report the suspected abuse through the appropriate AWS Trust and Safety process with relevant evidence. (3) Evaluate AWS Professional Services or qualified partners and agree a specific statement of work and responsibilities.
(1) Evaluate suitable AWS Partner Network providers and verify their relevant skills and contractual scope. (2) Report the suspected abuse through the appropriate AWS Trust and Safety process with relevant evidence. (3) Review the applicable AWS Health information and account-specific event notifications where available.

Explanation

Correct Answer

For finding 1: APN partners can provide independent solutions and integration services under customer agreements. For finding 2: Abuse reporting is separate from local billing support or ordinary architectural documentation requests. For finding 3: Professional implementation assistance requires an appropriate engagement rather than simply purchasing an unrelated software listing. All three decisions are needed.

Incorrect Answers

For finding 2: Abuse reporting is separate from local billing support or ordinary architectural documentation requests. That action addresses a different situation: A service owner needs to learn whether an AWS service incident is affecting its resources, rather than infer outage status solely from application errors.

For finding 1: APN partners can provide independent solutions and integration services under customer agreements. That action addresses a different situation: A service owner needs to learn whether an AWS service incident is affecting its resources, rather than infer outage status solely from application errors.

For finding 3: Professional implementation assistance requires an appropriate engagement rather than simply purchasing an unrelated software listing. That action addresses a different situation: A service owner needs to learn whether an AWS service incident is affecting its resources, rather than infer outage status solely from application errors.

Question 141

Two cloud decisions must be made in the stated order. Finding 1: A finance analyst compares cloud compute price with hardware purchase price but ignores power, cooling, physical space, and maintenance. Finding 2: A product team assumes that using cloud services guarantees an always lower invoice without management or governance. Which two-part response addresses both findings in order?

(1) Compare total cost of ownership using facility, operations, staffing, and depreciation costs as well as infrastructure pricing. (2) Compare elastic storage consumption with the carrying cost of unused pre-purchased capacity.
(1) Compare total cost of ownership using facility, operations, staffing, and depreciation costs as well as infrastructure pricing. (2) Track actual utilization and configure cost controls because unused or oversized cloud resources still create charges.
(1) Compare AWS variable usage charges with the capital and fixed operating costs of owned infrastructure. (2) Track actual utilization and configure cost controls because unused or oversized cloud resources still create charges.
(1) Track actual utilization and configure cost controls because unused or oversized cloud resources still create charges. (2) Compare total cost of ownership using facility, operations, staffing, and depreciation costs as well as infrastructure pricing.

Explanation

Correct Answer

For finding 1: On-premises costs extend beyond the purchase cost of computing equipment. For finding 2: Cloud pricing introduces flexibility, but uncontrolled consumption can still waste money. Both actions are required.

Incorrect Answers

For finding 2: Cloud pricing introduces flexibility, but uncontrolled consumption can still waste money. That action addresses a different situation: An internal platform buys enough storage for predicted five-year growth and pays for all of it before any data is stored.

For finding 1: On-premises costs extend beyond the purchase cost of computing equipment. That action addresses a different situation: A company spends heavily on owned servers before projects start and wants a model with more consumption-linked spending.

The actions are reversed. The correct order is (1) Compare total cost of ownership using facility, operations, staffing, and depreciation costs as well as infrastructure pricing. (2) Track actual utilization and configure cost controls because unused or oversized cloud resources still create charges.

Question 142

A cloud readiness review raises three separate requirements. Finding 1: A finance analyst needs to inspect a few cloud resource settings interactively without writing an integration. Finding 2: A developer needs an application to request AWS service operations directly and assumes every workflow must run through a browser console. Finding 3: An operator wants to perform a scripted AWS resource query from a terminal as part of an approved runbook. Which complete response addresses all three findings in order?

(1) Use the AWS Management Console for authorized browser-based inspection and simple management tasks. (2) Use supported AWS APIs or SDKs with an appropriately permissioned execution identity. (3) Use an appropriate infrastructure-as-code solution such as AWS CloudFormation to define and provision the resources.
(1) Use the AWS Management Console for authorized browser-based inspection and simple management tasks. (2) Use supported AWS APIs or SDKs with an appropriately permissioned execution identity. (3) Use the AWS Command Line Interface with scoped credentials and validated commands.
(1) Use an appropriate infrastructure-as-code solution such as AWS CloudFormation to define and provision the resources. (2) Use supported AWS APIs or SDKs with an appropriately permissioned execution identity. (3) Use the AWS Command Line Interface with scoped credentials and validated commands.
(1) Use the AWS Management Console for authorized browser-based inspection and simple management tasks. (2) Use an appropriate infrastructure-as-code solution such as AWS CloudFormation to define and provision the resources. (3) Use the AWS Command Line Interface with scoped credentials and validated commands.

Explanation

Correct Answer

For finding 1: The console provides a graphical interface to supported AWS resources and account settings. For finding 2: Programmatic interfaces support application-driven AWS service access without manual console interactions. For finding 3: The AWS CLI provides a supported command-based interface to AWS service APIs. All three decisions are needed.

Incorrect Answers

For finding 3: The AWS CLI provides a supported command-based interface to AWS service APIs. That action addresses a different situation: An IT team repeats the same resource setup across several accounts and wants version-controlled, reproducible deployments.

For finding 1: The console provides a graphical interface to supported AWS resources and account settings. That action addresses a different situation: An IT team repeats the same resource setup across several accounts and wants version-controlled, reproducible deployments.

For finding 2: Programmatic interfaces support application-driven AWS service access without manual console interactions. That action addresses a different situation: An IT team repeats the same resource setup across several accounts and wants version-controlled, reproducible deployments.

Question 143

A security administrator wants to deploy a common set of WAF policies to eligible accounts but lacks a mechanism to govern central rule distribution. What should the team do?

Evaluate AWS Firewall Manager policy and organizational scope for consistent security administration.
Verify the network traffic path and approved routing so the designated inspection service receives the intended sessions.
Account for the stateless nature of network ACLs and configure the necessary inbound and outbound rules.
Evaluate AWS Network Firewall within a supported VPC routing design for the required inspection path.

Explanation

Correct Answer

Centralized policy governance can reduce rule drift across separately owned applications.

Incorrect Answers

Centralized policy governance can reduce rule drift across separately owned applications. That alternative applies to a different situation: A security officer assumes adding a firewall appliance automatically inspects every spoke VPC flow even though the routes bypass it.

Centralized policy governance can reduce rule drift across separately owned applications. That alternative applies to a different situation: A developer treats an Amazon VPC network ACL as stateful and expects return traffic to be automatically permitted like a security group.

Centralized policy governance can reduce rule drift across separately owned applications. That alternative applies to a different situation: A company needs stateful inspection of traffic crossing managed VPC network boundaries rather than only a basic subnet access list.

Question 144

A team identifies three independent cloud planning needs. Finding 1: A small team encounters an unexpected AWS service issue and needs to know which available Support plan offers the required response scope. Finding 2: An engineer needs an authoritative explanation of a cloud service's documented limits and cannot rely on an old forum answer. Finding 3: A company wants published architectural guidance for common migration and modernization decisions, not a service interruption ticket. Which complete response addresses all three findings in order?

(1) Review current AWS Support plan capabilities, eligibility, and response options before choosing a plan. (2) Use AWS re:Post or another appropriate official community knowledge resource for peer discussion. (3) Consult AWS Prescriptive Guidance and applicable AWS architecture materials for documented patterns.
(1) Review current AWS Support plan capabilities, eligibility, and response options before choosing a plan. (2) Consult current AWS service documentation and applicable service quotas or best-practice guidance. (3) Use AWS re:Post or another appropriate official community knowledge resource for peer discussion.
(1) Review current AWS Support plan capabilities, eligibility, and response options before choosing a plan. (2) Consult current AWS service documentation and applicable service quotas or best-practice guidance. (3) Consult AWS Prescriptive Guidance and applicable AWS architecture materials for documented patterns.
(1) Use AWS re:Post or another appropriate official community knowledge resource for peer discussion. (2) Consult current AWS service documentation and applicable service quotas or best-practice guidance. (3) Consult AWS Prescriptive Guidance and applicable AWS architecture materials for documented patterns.

Explanation

Correct Answer

For finding 1: AWS Support plans differ in included technical assistance and should be matched to operational need. For finding 2: Official documentation is the proper starting point for supported features and constraints. For finding 3: Prescriptive Guidance provides reusable architecture and migration practices rather than live incident triage. All three decisions are needed.

Incorrect Answers

For finding 2: Official documentation is the proper starting point for supported features and constraints. That action addresses a different situation: A developer wants to exchange AWS implementation experiences with other practitioners without opening a formal account support case.

For finding 3: Prescriptive Guidance provides reusable architecture and migration practices rather than live incident triage. That action addresses a different situation: A developer wants to exchange AWS implementation experiences with other practitioners without opening a formal account support case.

For finding 1: AWS Support plans differ in included technical assistance and should be matched to operational need. That action addresses a different situation: A developer wants to exchange AWS implementation experiences with other practitioners without opening a formal account support case.

Question 145

A cloud adoption review identifies two separate needs. Finding 1: A development account gives all application workers administrator privileges because that is easier than defining their roles. Finding 2: A public API becomes slow because one server processes all requests even though demand varies by time of day. Which two-part response addresses both findings in order?

(1) Compare performance, reliability, security, and costs together against the documented business requirement. (2) Apply the Performance Efficiency pillar to select suitable services and use measured elastic scaling where appropriate.
(1) Apply the Security pillar by limiting permissions to each workload's approved functions and protecting credentials. (2) Apply the Performance Efficiency pillar to select suitable services and use measured elastic scaling where appropriate.
(1) Apply the Performance Efficiency pillar to select suitable services and use measured elastic scaling where appropriate. (2) Apply the Security pillar by limiting permissions to each workload's approved functions and protecting credentials.
(1) Apply the Security pillar by limiting permissions to each workload's approved functions and protecting credentials. (2) Review the selected service's customer-controlled identity and data settings under the shared responsibility model.

Explanation

Correct Answer

For finding 1: Security architecture favors least privilege and layered protections over broad convenience access. For finding 2: Performance efficiency matches capacity and architectural choices to the actual workload rather than a fixed assumption. Both actions are required.

Incorrect Answers

For finding 1: Security architecture favors least privilege and layered protections over broad convenience access. That action addresses a different situation: A team evaluates a new database service by its cheapest hourly rate alone, ignoring operational effort and service constraints.

The actions are reversed. The correct order is (1) Apply the Security pillar by limiting permissions to each workload's approved functions and protecting credentials. (2) Apply the Performance Efficiency pillar to select suitable services and use measured elastic scaling where appropriate.

For finding 2: Performance efficiency matches capacity and architectural choices to the actual workload rather than a fixed assumption. That action addresses a different situation: An application is moved to a managed platform, but the security team assumes the service provider automatically grants only appropriate user access.

Question 146

A team creates infrastructure resources manually in each account and cannot determine why production differs from staging. What should the team do?

Evaluate suitable managed or serverless services that match the process's event and execution requirements.
Evaluate a hybrid architecture linking the on-premises systems to eligible AWS services under the required connectivity controls.
Adopt approved repeatable deployment definitions and configuration reviews across environments.
Evaluate supported networking and integration approaches that allow authorized hybrid application dependencies.

Explanation

Correct Answer

Consistent infrastructure definitions help reduce differences introduced by unrecorded manual changes.

Incorrect Answers

Consistent infrastructure definitions help reduce differences introduced by unrecorded manual changes. That alternative applies to a different situation: A company migrates a simple approval process and wants it to run without a team maintaining application servers.

Consistent infrastructure definitions help reduce differences introduced by unrecorded manual changes. That alternative applies to a different situation: A manufacturer keeps equipment controls on site but wants to send selected analytics events to cloud services for processing.

Consistent infrastructure definitions help reduce differences introduced by unrecorded manual changes. That alternative applies to a different situation: An application owner assumes that moving a workload into AWS prohibits all interaction with databases that remain on premises.

Question 147

An AWS planning meeting highlights two independent requirements. Finding 1: A team wants to encrypt objects stored in Amazon S3 and manage permissions for the encryption keys centrally. Finding 2: A web application sends sensitive credentials over a plain HTTP connection and assumes S3 server-side encryption will protect them in transit. Which two-part response addresses both findings in order?

(1) Evaluate supported S3 server-side encryption integrated with AWS Key Management Service and appropriate key policies. (2) Use appropriate TLS-protected application connections in addition to any storage-at-rest encryption.
(1) Apply tightly scoped permissions and key lifecycle controls to limit which principals can use and administer the key. (2) Use appropriate TLS-protected application connections in addition to any storage-at-rest encryption.
(1) Use appropriate TLS-protected application connections in addition to any storage-at-rest encryption. (2) Evaluate supported S3 server-side encryption integrated with AWS Key Management Service and appropriate key policies.
(1) Evaluate supported S3 server-side encryption integrated with AWS Key Management Service and appropriate key policies. (2) Keep sensitive credentials in AWS Secrets Manager or another approved protected credential store with controlled retrieval.

Explanation

Correct Answer

For finding 1: KMS helps manage cryptographic keys used by supported AWS service encryption features. For finding 2: Encryption at rest and encryption in transit protect different stages of the data lifecycle. Both actions are required.

Incorrect Answers

For finding 1: KMS helps manage cryptographic keys used by supported AWS service encryption features. That action addresses a different situation: A security officer says a customer-managed KMS key can be shared freely because no plaintext data is visible in the key console.

The actions are reversed. The correct order is (1) Evaluate supported S3 server-side encryption integrated with AWS Key Management Service and appropriate key policies. (2) Use appropriate TLS-protected application connections in addition to any storage-at-rest encryption.

For finding 2: Encryption at rest and encryption in transit protect different stages of the data lifecycle. That action addresses a different situation: A software team wants to store database passwords in environment variables checked into a public sample repository.

Question 148

A cloud readiness review raises three separate requirements. Finding 1: A file service sends large quantities of data to customers across the internet, but its budget assumes every transferred byte costs the same as inbound upload. Finding 2: An application communicates between two AWS Regions and the team assumes there can be no networking charges because both Regions belong to AWS. Finding 3: A finance analyst assumes Capacity Reservations and Savings Plans are identical products with the same capacity guarantees and discounts. Which complete response addresses all three findings in order?

(1) Check the applicable outbound and cross-boundary data transfer pricing rather than assuming it matches inbound transfer. (2) Review the relevant inter-Region data transfer pricing and architecture before estimating recurring costs. (3) Include retrieval, minimum-duration, and access-pattern considerations when comparing eligible S3 storage classes.
(1) Check the applicable outbound and cross-boundary data transfer pricing rather than assuming it matches inbound transfer. (2) Include retrieval, minimum-duration, and access-pattern considerations when comparing eligible S3 storage classes. (3) Distinguish compute capacity reservation needs from savings commitments and evaluate their supported combinations.
(1) Include retrieval, minimum-duration, and access-pattern considerations when comparing eligible S3 storage classes. (2) Review the relevant inter-Region data transfer pricing and architecture before estimating recurring costs. (3) Distinguish compute capacity reservation needs from savings commitments and evaluate their supported combinations.
(1) Check the applicable outbound and cross-boundary data transfer pricing rather than assuming it matches inbound transfer. (2) Review the relevant inter-Region data transfer pricing and architecture before estimating recurring costs. (3) Distinguish compute capacity reservation needs from savings commitments and evaluate their supported combinations.

Explanation

Correct Answer

For finding 1: Data transfer charges can vary by direction and path, so inbound and outbound traffic are not necessarily priced alike. For finding 2: Transfers between AWS locations can incur charges even when the endpoints are both AWS-hosted. For finding 3: Reserving capacity and committing to spend address different business needs. All three decisions are needed.

Incorrect Answers

For finding 3: Reserving capacity and committing to spend address different business needs. That action addresses a different situation: A backup team chooses the cheapest advertised S3 archival storage rate but expects thousands of immediate restores each day.

For finding 2: Transfers between AWS locations can incur charges even when the endpoints are both AWS-hosted. That action addresses a different situation: A backup team chooses the cheapest advertised S3 archival storage rate but expects thousands of immediate restores each day.

For finding 1: Data transfer charges can vary by direction and path, so inbound and outbound traffic are not necessarily priced alike. That action addresses a different situation: A backup team chooses the cheapest advertised S3 archival storage rate but expects thousands of immediate restores each day.

Question 149

A publishing company wants employees to access the same approved service in multiple countries while retaining central operational standards. What is the most appropriate next step?

Use AWS global infrastructure and common deployment configurations across authorized Regions.
Clarify that AWS manages cloud infrastructure while customers still govern their applications, data, and chosen configurations.
Start with measured cloud capacity and adjust resource allocation as demand becomes observable.
Create short-lived self-service test resources under controlled AWS account and budget guardrails.

Explanation

Correct Answer

Global infrastructure enables geographically distributed delivery while teams reuse governance and operational patterns.

Incorrect Answers

Global infrastructure enables geographically distributed delivery while teams reuse governance and operational patterns. That alternative applies to a different situation: A business describes cloud adoption as eliminating every remaining operational task for its employees.

Global infrastructure enables geographically distributed delivery while teams reuse governance and operational patterns. That alternative applies to a different situation: A startup expects an unpredictable launch date and wants to avoid predicting its exact server count a year in advance.

Global infrastructure enables geographically distributed delivery while teams reuse governance and operational patterns. That alternative applies to a different situation: A product team wants to test a new feature, but its private lab provides only one shared environment and long reservation queues.

Question 150

A cloud adoption review identifies two separate needs. Finding 1: A team needs to run occasional SQL analysis on files stored in S3 without operating a permanent database server. Finding 2: A company needs a managed stream ingestion service to capture real-time application events for downstream consumers. Which two-part response addresses both findings in order?

(1) Evaluate Amazon Athena for supported query-on-data-in-S3 workloads. (2) Evaluate Amazon Kinesis for an appropriate streaming data capture or processing use case.
(1) Evaluate Amazon Athena for supported query-on-data-in-S3 workloads. (2) Evaluate Amazon QuickSight for governed business intelligence dashboards and visualizations.
(1) Evaluate Amazon Kinesis for an appropriate streaming data capture or processing use case. (2) Evaluate Amazon Athena for supported query-on-data-in-S3 workloads.
(1) Evaluate AWS Glue for supported data integration, catalog, and ETL workflows. (2) Evaluate Amazon Kinesis for an appropriate streaming data capture or processing use case.

Explanation

Correct Answer

For finding 1: Athena enables serverless queries against eligible stored datasets. For finding 2: Kinesis services support ingestion and handling of streaming event data. Both actions are required.

Incorrect Answers

For finding 2: Kinesis services support ingestion and handling of streaming event data. That action addresses a different situation: A business user wants interactive dashboards built from approved analytics datasets rather than direct access to raw service logs.

The actions are reversed. The correct order is (1) Evaluate Amazon Athena for supported query-on-data-in-S3 workloads. (2) Evaluate Amazon Kinesis for an appropriate streaming data capture or processing use case.

For finding 1: Athena enables serverless queries against eligible stored datasets. That action addresses a different situation: A data engineering group needs a managed integration service to catalog, transform, and prepare datasets for analytics.

Pass Your Amazon AWS Certified Cloud Practitioner CLF-C02 Exam Easy!

Question 140

Explanation

Correct Answer

Incorrect Answers

Question 141

Explanation

Correct Answer

Incorrect Answers

Question 142

Explanation

Correct Answer

Incorrect Answers

Question 143

Explanation

Correct Answer

Incorrect Answers

Question 144

Explanation

Correct Answer

Incorrect Answers

Question 145

Explanation

Correct Answer

Incorrect Answers

Question 146

Explanation

Correct Answer

Incorrect Answers

Question 147

Explanation

Correct Answer

Incorrect Answers

Question 148

Explanation

Correct Answer

Incorrect Answers

Question 149

Explanation

Correct Answer

Incorrect Answers

Question 150

Explanation

Correct Answer

Incorrect Answers

AWS Certified Cloud Practitioner CLF-C02 Practice Tests