Question 990

For this AWS project, 2 outcomes are required: first, retain direct control of database host OS and engine installation; second, reduce avoidable connection pressure on an RDS application backend. Which TWO options provide the most direct matches? Choose TWO.

  1. Database on Amazon EC2
  2. Database connection management
  3. Amazon ElastiCache
  4. Amazon DocumentDB
  5. Amazon RDS

Explanation

Correct Answers

A:

Database on Amazon EC2 covers the listed need to retain direct control of database host OS and engine installation because self-managing a database on EC2 leaves patching, backups and high availability largely to the customer; it belongs in the keyed set alongside Database connection management to reduce avoidable connection pressure on an RDS application backend.

B:

Database connection management covers the listed need to reduce avoidable connection pressure on an RDS application backend because managed connection proxies such as RDS Proxy can pool connections for suitable engines; it belongs in the keyed set alongside Database on Amazon EC2 to retain direct control of database host OS and engine installation.

Incorrect Answers

C:

Amazon ElastiCache addresses a different objective, to cache frequently accessed application data in memory, because elastiCache offers managed in-memory caching engines to reduce repetitive backend reads; the checklist instead requires the distinct outcomes to retain direct control of database host OS and engine installation; reduce avoidable connection pressure on an RDS application backend.

D:

Amazon DocumentDB addresses a different objective, to run JSON document workloads using MongoDB-compatible APIs, because documentDB offers managed document database capabilities for suitable MongoDB workloads; the checklist instead requires the distinct outcomes to retain direct control of database host OS and engine installation; reduce avoidable connection pressure on an RDS application backend.

E:

Amazon RDS addresses a different objective, to operate a managed relational database engine, because RDS automates selected relational database operations including backup and patching; the checklist instead requires the distinct outcomes to retain direct control of database host OS and engine installation; reduce avoidable connection pressure on an RDS application backend.

Question 991

In the global architecture review, the team must address 2 distinct tasks: first, reduce time to download reusable web assets in different countries; second, maintain copies of selected data outside its source Region. Select the TWO most suitable services or concepts. Choose TWO.

  1. Cross-Region replication
  2. Data residency by Region
  3. Content delivery latency
  4. Regional service availability check
  5. Route 53 failover routing

Explanation

Correct Answers

A:

Cross-Region replication covers the listed need to maintain copies of selected data outside its source Region because cross-Region replication moves eligible objects or database data into a different geography when configured; it belongs in the keyed set alongside Content delivery latency to reduce time to download reusable web assets in different countries.

C:

Content delivery latency covers the listed need to reduce time to download reusable web assets in different countries because cDN caching stores content nearer viewers and lowers repeat retrieval distance; it belongs in the keyed set alongside Cross-Region replication to maintain copies of selected data outside its source Region.

Incorrect Answers

B:

Data residency by Region addresses a different objective, to keep stored customer data in a selected geography, because region placement and configured replication determine where supported AWS workload data resides; the checklist instead requires the distinct outcomes to reduce time to download reusable web assets in different countries; maintain copies of selected data outside its source Region.

D:

Regional service availability check addresses a different objective, to verify a particular offering is available in the chosen Region, because AWS service availability varies by Region and sometimes by instance family or feature; the checklist instead requires the distinct outcomes to reduce time to download reusable web assets in different countries; maintain copies of selected data outside its source Region.

E:

Route 53 failover routing addresses a different objective, to redirect DNS responses when monitored endpoint health changes, because Route 53 health checks and failover policies can influence which healthy target a client resolves; the checklist instead requires the distinct outcomes to reduce time to download reusable web assets in different countries; maintain copies of selected data outside its source Region.

Question 992

A team already uses Availability Zone to separate redundant application components across isolated facilities within one Region. It now must separate immediate service accessibility from long-term data survival, which is a separate requirement. What should it select for that new objective?

  1. Application availability versus data durability
  2. Availability Zone
  3. Data residency by Region
  4. AZ failure-domain separation

Explanation

Correct Answer

A:

Application availability versus data durability addresses the new need to separate immediate service accessibility from long-term data survival because availability concerns whether a service is usable; durability concerns retaining stored data; Availability Zone supports the different existing task to separate redundant application components across isolated facilities within one Region.

Incorrect Answers

B:

Availability Zone primarily supports the earlier need to separate redundant application components across isolated facilities within one Region because an Availability Zone is one or more discrete data centers with independent infrastructure in a Region, but the new task is to separate immediate service accessibility from long-term data survival; that is why Application availability versus data durability is preferable here.

C:

Data residency by Region is intended to keep stored customer data in a selected geography because region placement and configured replication determine where supported AWS workload data resides; in this design the new outcome is to separate immediate service accessibility from long-term data survival, which calls for Application availability versus data durability rather than Data residency by Region or the earlier Availability Zone.

D:

AZ failure-domain separation is intended to reduce correlated failures between redundant service nodes because independent power, networking and facility boundaries help isolate Availability Zones; in this design the new outcome is to separate immediate service accessibility from long-term data survival, which calls for Application availability versus data durability rather than AZ failure-domain separation or the earlier Availability Zone.

Question 993

For a new AWS implementation, a team must spread inbound traffic across multiple eligible targets. Which available choice is most specifically intended for that function?

  1. Application Load Balancer
  2. EC2 instance store
  3. Amazon EC2
  4. Elastic Load Balancing

Explanation

Correct Answer

D:

Elastic Load Balancing matches the goal to spread inbound traffic across multiple eligible targets because eLB directs client traffic toward configured healthy application targets. Routing across targets alone does not create new instances when capacity runs short. Application Load Balancer is for the different objective to route HTTP and HTTPS requests using application-layer rules; the requested capability is Elastic Load Balancing to spread inbound traffic across multiple eligible targets, in contrast with Application Load Balancer to route HTTP and HTTPS requests using application-layer rules.

Incorrect Answers

A:

Application Load Balancer addresses the separate need to route HTTP and HTTPS requests using application-layer rules because aLB supports layer 7 routing by host names or URL paths to target groups; it is not as direct as Elastic Load Balancing for the actual requirement to spread inbound traffic across multiple eligible targets.

B:

EC2 instance store addresses the separate need to use temporary host-attached storage with very low latency because instance store volumes are physically associated with the host and have ephemeral characteristics; it is not as direct as Elastic Load Balancing for the actual requirement to spread inbound traffic across multiple eligible targets.

C:

Amazon EC2 addresses the separate need to operate virtual servers with explicit OS and instance management because EC2 provides configurable compute instances where customers manage guest OS and application software; it is not as direct as Elastic Load Balancing for the actual requirement to spread inbound traffic across multiple eligible targets.

Question 994

A decision record states that the primary objective is to offload eligible read queries from a relational database primary. Which AWS offering or principle should it name?

  1. AWS Schema Conversion Tool
  2. RDS read replica
  3. DynamoDB point-in-time recovery
  4. Amazon ElastiCache

Explanation

Correct Answer

B:

RDS read replica matches the goal to offload eligible read queries from a relational database primary because read replicas provide copies usable to serve read traffic with replication behavior. They are not the same as a synchronous high-availability standby. Amazon ElastiCache is for the different objective to cache frequently accessed application data in memory.

Incorrect Answers

A:

AWS Schema Conversion Tool addresses the separate need to translate supported database schemas and code for heterogeneous migrations because AWS SCT helps assess and convert compatible schema objects between database engines; it is not as direct as RDS read replica for the actual requirement to offload eligible read queries from a relational database primary.

C:

DynamoDB point-in-time recovery addresses the separate need to restore supported table data to a recent earlier point because pITR continuously backs up eligible DynamoDB table data for point-in-time restore within its retention window; it is not as direct as RDS read replica for the actual requirement to offload eligible read queries from a relational database primary.

D:

Amazon ElastiCache addresses the separate need to cache frequently accessed application data in memory because elastiCache offers managed in-memory caching engines to reduce repetitive backend reads; it is not as direct as RDS read replica for the actual requirement to offload eligible read queries from a relational database primary.

Question 995

The next step in the storage design is to serve frequently accessed objects with low-latency retrieval. Which AWS feature, practice, or service is the clearest choice?

  1. Amazon S3 Inventory
  2. S3 request and retrieval pricing
  3. Amazon S3 Standard
  4. AWS Elastic Disaster Recovery

Explanation

Correct Answer

C:

Amazon S3 Standard matches the goal to serve frequently accessed objects with low-latency retrieval because S3 Standard is appropriate for data requiring regular access across multiple AZs. Storage charges are higher than some infrequent or archival tiers. AWS Elastic Disaster Recovery is for the different objective to restore servers and workloads in AWS after an infrastructure disaster.

Incorrect Answers

A:

Amazon S3 Inventory addresses the separate need to generate lists of objects and associated metadata for analysis because S3 Inventory produces scheduled reports about bucket objects and properties; it is not as direct as Amazon S3 Standard for the actual requirement to serve frequently accessed objects with low-latency retrieval.

B:

S3 request and retrieval pricing addresses the separate need to assess storage cost beyond the gigabyte-month charge because S3 charges can include requests and retrievals in addition to stored capacity; it is not as direct as Amazon S3 Standard for the actual requirement to serve frequently accessed objects with low-latency retrieval.

D:

AWS Elastic Disaster Recovery addresses the separate need to restore servers and workloads in AWS after an infrastructure disaster because elastic Disaster Recovery uses continuous block replication and orchestrated recovery; it is not as direct as Amazon S3 Standard for the actual requirement to serve frequently accessed objects with low-latency retrieval.

Question 996

A reviewer suggests VPC subnet CIDR planning when asked how to connect two VPCs privately for their routable address ranges, although that offering is primarily used to allocate non-overlapping address ranges for interconnected environments. Which alternative is the more precise choice?

  1. NAT versus internet gateway
  2. VPC subnet CIDR planning
  3. AWS Site-to-Site VPN
  4. VPC peering

Explanation

Correct Answer

D:

VPC peering addresses the new need to connect two VPCs privately for their routable address ranges because peering allows traffic between eligible VPCs with non-overlapping CIDRs and appropriate routes; VPC subnet CIDR planning supports the different existing task to allocate non-overlapping address ranges for interconnected environments.

Incorrect Answers

A:

NAT versus internet gateway is intended to distinguish outbound address translation from direct public routing because NAT gateways enable private egress; internet gateways provide the VPC's internet attachment; in this design the new outcome is to connect two VPCs privately for their routable address ranges, which calls for VPC peering rather than NAT versus internet gateway or the earlier VPC subnet CIDR planning.

B:

VPC subnet CIDR planning primarily supports the earlier need to allocate non-overlapping address ranges for interconnected environments because vPCs and subnets use address ranges that affect future peering and routing options, but the new task is to connect two VPCs privately for their routable address ranges; that is why VPC peering is preferable here.

C:

AWS Site-to-Site VPN is intended to connect office networks to AWS through encrypted tunnels over IP networks because site-to-Site VPN establishes IPsec tunnels between a customer network and AWS connectivity endpoints; in this design the new outcome is to connect two VPCs privately for their routable address ranges, which calls for VPC peering rather than AWS Site-to-Site VPN or the earlier VPC subnet CIDR planning.

Question 997

A project owner needs a practical way to encrypt S3 object data at rest using supported key arrangements. Which selection most closely aligns with that objective?

  1. AWS Elastic Disaster Recovery
  2. S3 server-side encryption
  3. EBS volume encryption
  4. Amazon S3

Explanation

Correct Answer

B:

S3 server-side encryption matches the goal to encrypt S3 object data at rest using supported key arrangements because S3 encrypts stored object data at rest and supports key-management choices. Encryption at rest does not by itself enforce correct object authorization. EBS volume encryption is for the different objective to protect block storage with supported at-rest encryption.

Incorrect Answers

A:

AWS Elastic Disaster Recovery addresses the separate need to restore servers and workloads in AWS after an infrastructure disaster because elastic Disaster Recovery uses continuous block replication and orchestrated recovery; it is not as direct as S3 server-side encryption for the actual requirement to encrypt S3 object data at rest using supported key arrangements.

C:

EBS volume encryption addresses the separate need to protect block storage with supported at-rest encryption because encrypted EBS volumes use integrated key management for data at rest; it is not as direct as S3 server-side encryption for the actual requirement to encrypt S3 object data at rest using supported key arrangements.

D:

Amazon S3 addresses the separate need to store durable objects and retrieve them by bucket and key because S3 is an object storage service for files and data blobs rather than mounted block devices; it is not as direct as S3 server-side encryption for the actual requirement to encrypt S3 object data at rest using supported key arrangements.

Question 998

In a design comparison, Storage optimized EC2 instance is associated with the objective to run applications needing high local storage IOPS or throughput. For the distinct objective to provide comparatively more CPU resources for CPU-intensive applications, which option should be preferred?

  1. Storage optimized EC2 instance
  2. Compute optimized EC2 instance
  3. Amazon ECS
  4. Memory optimized EC2 instance

Explanation

Correct Answer

B:

Compute optimized EC2 instance addresses the new need to provide comparatively more CPU resources for CPU-intensive applications because compute-optimized instance families emphasize processing power for compute-bound tasks; Storage optimized EC2 instance supports the different existing task to run applications needing high local storage IOPS or throughput.

Incorrect Answers

A:

Storage optimized EC2 instance primarily supports the earlier need to run applications needing high local storage IOPS or throughput because storage-optimized families offer specialized local storage performance for eligible workloads, but the new task is to provide comparatively more CPU resources for CPU-intensive applications; that is why Compute optimized EC2 instance is preferable here.

C:

Amazon ECS is intended to orchestrate containerized applications using AWS-managed control capabilities because eCS schedules and manages containers in clusters on supported launch types; in this design the new outcome is to provide comparatively more CPU resources for CPU-intensive applications, which calls for Compute optimized EC2 instance rather than Amazon ECS or the earlier Storage optimized EC2 instance.

D:

Memory optimized EC2 instance is intended to support applications with large in-memory working sets because memory-optimized families provide higher RAM-to-vCPU ratios for memory-bound applications; in this design the new outcome is to provide comparatively more CPU resources for CPU-intensive applications, which calls for Compute optimized EC2 instance rather than Memory optimized EC2 instance or the earlier Storage optimized EC2 instance.

Question 999

When assessing Amazon RDS for a workload that must operate a managed relational database engine, which warning is the best fit for that capability rather than for nearby options?

  1. Customers still design schemas and control who may access the data.
  2. An in-memory cache by itself is not the authoritative transactional record.
  3. A standby is designed primarily for availability rather than arbitrary read scaling.
  4. It does not itself replace continuous transfer of live transaction data.

Explanation

Correct Answer

A:

Customers still design schemas and control who may access the data; this qualification applies directly to Amazon RDS when the intended outcome is to operate a managed relational database engine, rather than to another capability.

Incorrect Answers

B:

An in-memory cache by itself is not the authoritative transactional record; that caveat is associated more closely with ACID relational transactions for the need to preserve multi-step data consistency in a relational workload than with Amazon RDS for the requirement to operate a managed relational database engine.

C:

A standby is designed primarily for availability rather than arbitrary read scaling; that caveat is associated more closely with RDS Multi-AZ configuration for the need to improve database availability using a standby in another Availability Zone than with Amazon RDS for the requirement to operate a managed relational database engine.

D:

It does not itself replace continuous transfer of live transaction data; that caveat is associated more closely with AWS Schema Conversion Tool for the need to translate supported database schemas and code for heterogeneous migrations than with Amazon RDS for the requirement to operate a managed relational database engine.

Question 1000

A team has chosen VPC peering to connect two VPCs privately for their routable address ranges. Which description explains the mechanism that makes this selection appropriate?

  1. Transit Gateway simplifies hub-and-spoke network connectivity at scale.
  2. VPC endpoints provide service connectivity without requiring a public internet path.
  3. Peering allows traffic between eligible VPCs with non-overlapping CIDRs and appropriate routes.
  4. VPCs and subnets use address ranges that affect future peering and routing options.

Explanation

Correct Answer

C:

VPC peering meets the goal to connect two VPCs privately for their routable address ranges because peering allows traffic between eligible VPCs with non-overlapping CIDRs and appropriate routes. Peering does not automatically provide transitive routing through a third VPC.

Incorrect Answers

A:

That description belongs to AWS Transit Gateway because transit Gateway simplifies hub-and-spoke network connectivity at scale; it is used to connect many VPCs and supported on-premises networks through a central hub, not to explain how VPC peering provides the function to connect two VPCs privately for their routable address ranges.

B:

That description belongs to VPC endpoint because VPC endpoints provide service connectivity without requiring a public internet path; it is used to connect supported VPC workloads privately to selected AWS services, not to explain how VPC peering provides the function to connect two VPCs privately for their routable address ranges.

D:

That description belongs to VPC subnet CIDR planning because vPCs and subnets use address ranges that affect future peering and routing options; it is used to allocate non-overlapping address ranges for interconnected environments, not to explain how VPC peering provides the function to connect two VPCs privately for their routable address ranges.

AWS Certified Cloud Practitioner CLF-C02 Practice Tests