Question 280

A team already uses Avoid single points of failure to remove a single component whose outage would take down the whole system. It now must avoid tying service availability to one Availability Zone, which is a separate requirement. What should it select for that new objective?

  1. Multi-AZ redundancy
  2. Resource-efficient software
  3. Cost optimization pillar
  4. Avoid single points of failure

Explanation

Correct Answer

A:

Multi-AZ redundancy addresses the new need to avoid tying service availability to one Availability Zone because deploying suitable redundant resources in multiple AZs isolates many facility-level failures; Avoid single points of failure supports the different existing task to remove a single component whose outage would take down the whole system.

Incorrect Answers

B:

Resource-efficient software is intended to avoid unnecessary processing and storage when delivering the same output because reducing wasted computation contributes to performance and sustainability objectives; in this design the new outcome is to avoid tying service availability to one Availability Zone, which calls for Multi-AZ redundancy rather than Resource-efficient software or the earlier Avoid single points of failure.

C:

Cost optimization pillar is intended to avoid unnecessary expenditure while achieving business outcomes because cost optimization focuses on understanding spend and delivering value at the right cost; in this design the new outcome is to avoid tying service availability to one Availability Zone, which calls for Multi-AZ redundancy rather than Cost optimization pillar or the earlier Avoid single points of failure.

D:

Avoid single points of failure primarily supports the earlier need to remove a single component whose outage would take down the whole system because redundancy across failure boundaries helps keep a service available when one part fails, but the new task is to avoid tying service availability to one Availability Zone; that is why Multi-AZ redundancy is preferable here.

Question 281

The workload already uses Vertical scaling to increase the capacity of an existing compute resource. A second workstream needs to make system behavior visible through meaningful operational metrics and logs. Which AWS choice fits the second workstream?

  1. Avoid single points of failure
  2. Automate recovery
  3. Vertical scaling
  4. Infrastructure observability

Explanation

Correct Answer

D:

Infrastructure observability addresses the new need to make system behavior visible through meaningful operational metrics and logs because useful telemetry helps teams detect performance changes and failures early; Vertical scaling supports the different existing task to increase the capacity of an existing compute resource.

Incorrect Answers

A:

Avoid single points of failure is intended to remove a single component whose outage would take down the whole system because redundancy across failure boundaries helps keep a service available when one part fails; in this design the new outcome is to make system behavior visible through meaningful operational metrics and logs, which calls for Infrastructure observability rather than Avoid single points of failure or the earlier Vertical scaling.

B:

Automate recovery is intended to restore normal application behavior without waiting for routine manual intervention because automated detection and recovery reduce the time needed to handle predictable failure conditions; in this design the new outcome is to make system behavior visible through meaningful operational metrics and logs, which calls for Infrastructure observability rather than Automate recovery or the earlier Vertical scaling.

C:

Vertical scaling primarily supports the earlier need to increase the capacity of an existing compute resource because vertical scaling changes the size or power of one instance or server, but the new task is to make system behavior visible through meaningful operational metrics and logs; that is why Infrastructure observability is preferable here.

Question 282

A decision record states that the primary objective is to spread work across additional independent resources. Which AWS offering or principle should it name?

  1. Multi-AZ redundancy
  2. Horizontal scaling
  3. Small reversible changes
  4. Cost optimization pillar

Explanation

Correct Answer

B:

Horizontal scaling matches the goal to spread work across additional independent resources because horizontal scaling increases the number of workers or instances serving a workload. It differs from vertical scaling, which enlarges a single resource. Cost optimization pillar is for the different objective to avoid unnecessary expenditure while achieving business outcomes.

Incorrect Answers

A:

Multi-AZ redundancy addresses the separate need to avoid tying service availability to one Availability Zone because deploying suitable redundant resources in multiple AZs isolates many facility-level failures; it is not as direct as Horizontal scaling for the actual requirement to spread work across additional independent resources.

C:

Small reversible changes addresses the separate need to reduce the blast radius and rollback effort of deployments because frequent controlled changes are easier to diagnose and reverse than large simultaneous releases; it is not as direct as Horizontal scaling for the actual requirement to spread work across additional independent resources.

D:

Cost optimization pillar addresses the separate need to avoid unnecessary expenditure while achieving business outcomes because cost optimization focuses on understanding spend and delivering value at the right cost; it is not as direct as Horizontal scaling for the actual requirement to spread work across additional independent resources.

Question 283

The solution currently handles its need to allow application components to fail or scale with less direct dependency on each other with Loose coupling. A new requirement is to plan for individual components or zones becoming unavailable instead. Which service or principle addresses that different need?

  1. Design for failure
  2. Security pillar
  3. Loose coupling
  4. Operational excellence pillar

Explanation

Correct Answer

A:

Design for failure addresses the new need to plan for individual components or zones becoming unavailable because resilient cloud designs anticipate disruption and use isolation and recovery behavior; Loose coupling supports the different existing task to allow application components to fail or scale with less direct dependency on each other.

Incorrect Answers

B:

Security pillar is intended to protect information, systems and assets using risk-aware controls because the security pillar addresses identities, detection, infrastructure and data protection, and incident response; in this design the new outcome is to plan for individual components or zones becoming unavailable, which calls for Design for failure rather than Security pillar or the earlier Loose coupling.

C:

Loose coupling primarily supports the earlier need to allow application components to fail or scale with less direct dependency on each other because queues and asynchronous communication can decouple component lifecycles, but the new task is to plan for individual components or zones becoming unavailable; that is why Design for failure is preferable here.

D:

Operational excellence pillar is intended to improve how teams operate, monitor and continually refine workloads because operational excellence focuses on delivering business value through effective operations and continuous learning; in this design the new outcome is to plan for individual components or zones becoming unavailable, which calls for Design for failure rather than Operational excellence pillar or the earlier Loose coupling.

Question 284

A solution has 2 separate requirements: first, restore normal application behavior without waiting for routine manual intervention; second, increase the capacity of an existing compute resource. Which TWO choices correspond most directly to these needs? Choose TWO.

  1. Horizontal scaling
  2. Automate recovery
  3. Capacity awareness
  4. Vertical scaling
  5. Operational excellence pillar

Explanation

Correct Answers

B:

Automate recovery covers the listed need to restore normal application behavior without waiting for routine manual intervention because automated detection and recovery reduce the time needed to handle predictable failure conditions; it belongs in the keyed set alongside Vertical scaling to increase the capacity of an existing compute resource.

D:

Vertical scaling covers the listed need to increase the capacity of an existing compute resource because vertical scaling changes the size or power of one instance or server; it belongs in the keyed set alongside Automate recovery to restore normal application behavior without waiting for routine manual intervention.

Incorrect Answers

A:

Horizontal scaling addresses a different objective, to spread work across additional independent resources, because horizontal scaling increases the number of workers or instances serving a workload; the checklist instead requires the distinct outcomes to restore normal application behavior without waiting for routine manual intervention; increase the capacity of an existing compute resource.

C:

Capacity awareness addresses a different objective, to understand resource demand and quotas before workload demand exceeds limits, because good reliability planning accounts for capacity needs and service quotas; the checklist instead requires the distinct outcomes to restore normal application behavior without waiting for routine manual intervention; increase the capacity of an existing compute resource.

E:

Operational excellence pillar addresses a different objective, to improve how teams operate, monitor and continually refine workloads, because operational excellence focuses on delivering business value through effective operations and continuous learning; the checklist instead requires the distinct outcomes to restore normal application behavior without waiting for routine manual intervention; increase the capacity of an existing compute resource.

Question 285

An AWS implementation has already addressed minimize environmental impact associated with running workloads by using Sustainability pillar. Its remaining gap is to avoid unnecessary expenditure while achieving business outcomes. Which listed capability closes this gap?

  1. Resource-efficient software
  2. Sustainability pillar
  3. Multi-AZ redundancy
  4. Cost optimization pillar

Explanation

Correct Answer

D:

Cost optimization pillar addresses the new need to avoid unnecessary expenditure while achieving business outcomes because cost optimization focuses on understanding spend and delivering value at the right cost; Sustainability pillar supports the different existing task to minimize environmental impact associated with running workloads.

Incorrect Answers

A:

Resource-efficient software is intended to avoid unnecessary processing and storage when delivering the same output because reducing wasted computation contributes to performance and sustainability objectives; in this design the new outcome is to avoid unnecessary expenditure while achieving business outcomes, which calls for Cost optimization pillar rather than Resource-efficient software or the earlier Sustainability pillar.

B:

Sustainability pillar primarily supports the earlier need to minimize environmental impact associated with running workloads because sustainability emphasizes efficient consumption and reduction of energy and resource waste, but the new task is to avoid unnecessary expenditure while achieving business outcomes; that is why Cost optimization pillar is preferable here.

C:

Multi-AZ redundancy is intended to avoid tying service availability to one Availability Zone because deploying suitable redundant resources in multiple AZs isolates many facility-level failures; in this design the new outcome is to avoid unnecessary expenditure while achieving business outcomes, which calls for Cost optimization pillar rather than Multi-AZ redundancy or the earlier Sustainability pillar.

Question 286

A solution uses Vertical scaling for the requirement to increase the capacity of an existing compute resource. Which operating behavior underlies that use?

  1. Good reliability planning accounts for capacity needs and service quotas.
  2. Vertical scaling changes the size or power of one instance or server.
  3. Performance-efficient architectures update technology choices and capacity based on evidence.
  4. Operational excellence focuses on delivering business value through effective operations and continuous learning.

Explanation

Correct Answer

B:

Vertical scaling meets the goal to increase the capacity of an existing compute resource because vertical scaling changes the size or power of one instance or server. It may remain constrained by that instance's maximum size and failure domain.

Incorrect Answers

A:

That description belongs to Capacity awareness because good reliability planning accounts for capacity needs and service quotas; it is used to understand resource demand and quotas before workload demand exceeds limits, not to explain how Vertical scaling provides the function to increase the capacity of an existing compute resource.

C:

That description belongs to Continuous performance tuning because performance-efficient architectures update technology choices and capacity based on evidence; it is used to revisit resource choices as application demand evolves, not to explain how Vertical scaling provides the function to increase the capacity of an existing compute resource.

D:

That description belongs to Operational excellence pillar because operational excellence focuses on delivering business value through effective operations and continuous learning; it is used to improve how teams operate, monitor and continually refine workloads, not to explain how Vertical scaling provides the function to increase the capacity of an existing compute resource.

Question 287

For the design decision to use Experiment-driven performance choices to benchmark workload alternatives before standardizing a configuration, which implementation boundary should the team remember?

  1. Increasing instance power does not resolve every account-level quota or dependency.
  2. An instance family label alone cannot guarantee optimal performance for every application.
  3. It differs from performance efficiency, which emphasizes appropriate resource use.
  4. It is not the same as purchasing the largest instance for peak theoretical demand.

Explanation

Correct Answer

B:

An instance family label alone cannot guarantee optimal performance for every application; this qualification applies directly to Experiment-driven performance choices when the intended outcome is to benchmark workload alternatives before standardizing a configuration, rather than to another capability.

Incorrect Answers

A:

Increasing instance power does not resolve every account-level quota or dependency; that caveat is associated more closely with Capacity awareness for the need to understand resource demand and quotas before workload demand exceeds limits than with Experiment-driven performance choices for the requirement to benchmark workload alternatives before standardizing a configuration.

C:

It differs from performance efficiency, which emphasizes appropriate resource use; that caveat is associated more closely with Reliability pillar for the need to help a workload recover from failures and continue functioning correctly than with Experiment-driven performance choices for the requirement to benchmark workload alternatives before standardizing a configuration.

D:

It is not the same as purchasing the largest instance for peak theoretical demand; that caveat is associated more closely with Right-sized architecture for the need to match provisioned resources to measured workload requirements than with Experiment-driven performance choices for the requirement to benchmark workload alternatives before standardizing a configuration.

Question 288

A team already uses Automate recovery to restore normal application behavior without waiting for routine manual intervention. It now must make system behavior visible through meaningful operational metrics and logs, which is a separate requirement. What should it select for that new objective?

  1. Operational excellence pillar
  2. Infrastructure observability
  3. Automate recovery
  4. Avoid single points of failure

Explanation

Correct Answer

B:

Infrastructure observability addresses the new need to make system behavior visible through meaningful operational metrics and logs because useful telemetry helps teams detect performance changes and failures early; Automate recovery supports the different existing task to restore normal application behavior without waiting for routine manual intervention.

Incorrect Answers

A:

Operational excellence pillar is intended to improve how teams operate, monitor and continually refine workloads because operational excellence focuses on delivering business value through effective operations and continuous learning; in this design the new outcome is to make system behavior visible through meaningful operational metrics and logs, which calls for Infrastructure observability rather than Operational excellence pillar or the earlier Automate recovery.

C:

Automate recovery primarily supports the earlier need to restore normal application behavior without waiting for routine manual intervention because automated detection and recovery reduce the time needed to handle predictable failure conditions, but the new task is to make system behavior visible through meaningful operational metrics and logs; that is why Infrastructure observability is preferable here.

D:

Avoid single points of failure is intended to remove a single component whose outage would take down the whole system because redundancy across failure boundaries helps keep a service available when one part fails; in this design the new outcome is to make system behavior visible through meaningful operational metrics and logs, which calls for Infrastructure observability rather than Avoid single points of failure or the earlier Automate recovery.

Question 289

The workload already uses AWS Secrets Manager to securely store supported credentials and coordinate secret rotation. A second workstream needs to identify changes in supported AWS resource settings over time. Which AWS choice fits the second workstream?

  1. AWS Secrets Manager
  2. Amazon Macie
  3. AWS Config
  4. AWS Shield Standard

Explanation

Correct Answer

C:

AWS Config addresses the new need to identify changes in supported AWS resource settings over time because config maintains resource configuration history and compliance evaluations; AWS Secrets Manager supports the different existing task to securely store supported credentials and coordinate secret rotation.

Incorrect Answers

A:

AWS Secrets Manager primarily supports the earlier need to securely store supported credentials and coordinate secret rotation because secrets Manager reduces the need to embed passwords and tokens in application source code, but the new task is to identify changes in supported AWS resource settings over time; that is why AWS Config is preferable here.

B:

Amazon Macie is intended to identify potentially sensitive data stored in Amazon S3 because macie discovers and classifies sensitive information in supported S3 data; in this design the new outcome is to identify changes in supported AWS resource settings over time, which calls for AWS Config rather than Amazon Macie or the earlier AWS Secrets Manager.

D:

AWS Shield Standard is intended to provide baseline DDoS protections for supported AWS resources because shield Standard supplies automatic DDoS protection to supported resources; in this design the new outcome is to identify changes in supported AWS resource settings over time, which calls for AWS Config rather than AWS Shield Standard or the earlier AWS Secrets Manager.

Question 290

A decision meeting distinguishes between two outcomes: record selected IP network-flow information for VPC resources, and identify software vulnerabilities and unintended network exposure on supported workloads. The first is handled using Amazon VPC Flow Logs traffic metadata. Which option directly supports the second?

  1. AWS Certificate Manager TLS certificates
  2. AWS KMS managed keys
  3. Amazon VPC Flow Logs traffic metadata
  4. Amazon Inspector vulnerability findings

Explanation

Correct Answer

D:

Amazon Inspector vulnerability findings addresses the new need to identify software vulnerabilities and unintended network exposure on supported workloads because inspector continuously assesses supported resources for vulnerabilities and exposure; Amazon VPC Flow Logs traffic metadata supports the different existing task to record selected IP network-flow information for VPC resources.

Incorrect Answers

A:

AWS Certificate Manager TLS certificates is intended to provision and manage certificates for supported TLS endpoints because aCM manages public or imported certificates for use with integrated services; in this design the new outcome is to identify software vulnerabilities and unintended network exposure on supported workloads, which calls for Amazon Inspector vulnerability findings rather than AWS Certificate Manager TLS certificates or the earlier Amazon VPC Flow Logs traffic metadata.

B:

AWS KMS managed keys is intended to control encryption keys for supported AWS integrated services because kMS supports managed cryptographic key lifecycle and access controls for integrated workloads; in this design the new outcome is to identify software vulnerabilities and unintended network exposure on supported workloads, which calls for Amazon Inspector vulnerability findings rather than AWS KMS managed keys or the earlier Amazon VPC Flow Logs traffic metadata.

C:

Amazon VPC Flow Logs traffic metadata primarily supports the earlier need to record selected IP network-flow information for VPC resources because VPC Flow Logs capture metadata about accepted or rejected traffic at supported interfaces, but the new task is to identify software vulnerabilities and unintended network exposure on supported workloads; that is why Amazon Inspector vulnerability findings is preferable here.

AWS Certified Cloud Practitioner CLF-C02 Practice Tests