Question 650

A decision record states that the primary objective is to coordinate multi-step application workflows with managed state. Which AWS offering or principle should it name?

  1. AWS Step Functions
  2. AWS Developer Tools
  3. AWS CodePipeline
  4. Amazon SQS

Explanation

Correct Answer

A:

AWS Step Functions matches the goal to coordinate multi-step application workflows with managed state because step Functions orchestrates service integrations and branching steps over time. It does not itself replace the code executed by Lambda or containers. AWS CodePipeline is for the different objective to coordinate continuous delivery stages between tools.

Incorrect Answers

B:

AWS Developer Tools addresses the separate need to recognize the separation of build release deploy and tracing functions because AWS developer services specialize in different steps of software delivery; it is not as direct as AWS Step Functions for the actual requirement to coordinate multi-step application workflows with managed state.

C:

AWS CodePipeline addresses the separate need to coordinate continuous delivery stages between tools because codePipeline orchestrates source build test and deployment actions; it is not as direct as AWS Step Functions for the actual requirement to coordinate multi-step application workflows with managed state.

D:

Amazon SQS addresses the separate need to decouple systems with durable asynchronous message queues because sQS holds messages for consumers to process independently; it is not as direct as AWS Step Functions for the actual requirement to coordinate multi-step application workflows with managed state.

Question 651

During the analytics and AI review, the requirement is to translate text between supported human languages. Which option best addresses that exact requirement?

  1. Amazon Athena
  2. Amazon Lex
  3. Amazon Translate
  4. Amazon Rekognition

Explanation

Correct Answer

C:

Amazon Translate matches the goal to translate text between supported human languages because translate is a machine-translation service used by multilingual applications. Translation is different from identifying a speaker's sentiment. Amazon Rekognition is for the different objective to analyze image or video content for objects and visual attributes.

Incorrect Answers

A:

Amazon Athena addresses the separate need to query supported data in S3 using serverless SQL because athena runs interactive SQL queries without provisioning a dedicated database server; it is not as direct as Amazon Translate for the actual requirement to translate text between supported human languages.

B:

Amazon Lex addresses the separate need to build conversational chat or voice interfaces with intent recognition because lex supports conversational bots using natural language understanding; it is not as direct as Amazon Translate for the actual requirement to translate text between supported human languages.

D:

Amazon Rekognition addresses the separate need to analyze image or video content for objects and visual attributes because rekognition offers managed computer-vision detection and analysis APIs; it is not as direct as Amazon Translate for the actual requirement to translate text between supported human languages.

Question 652

A reviewer suggests Private subnet when asked how to establish dedicated private network connectivity from a site to AWS, although that offering is primarily used to place backend resources without a direct internet gateway route. Which alternative is the more precise choice?

  1. Amazon VPC
  2. AWS Direct Connect
  3. Private subnet
  4. VPC Flow Logs

Explanation

Correct Answer

B:

AWS Direct Connect addresses the new need to establish dedicated private network connectivity from a site to AWS because direct Connect provides a dedicated network connection through supported locations; Private subnet supports the different existing task to place backend resources without a direct internet gateway route.

Incorrect Answers

A:

Amazon VPC is intended to create a logically isolated IP network for AWS resources because a VPC defines virtual networking boundaries and hosts configurable subnets and routing; in this design the new outcome is to establish dedicated private network connectivity from a site to AWS, which calls for AWS Direct Connect rather than Amazon VPC or the earlier Private subnet.

C:

Private subnet primarily supports the earlier need to place backend resources without a direct internet gateway route because a private subnet can reach only the networks available through its route table, but the new task is to establish dedicated private network connectivity from a site to AWS; that is why AWS Direct Connect is preferable here.

D:

VPC Flow Logs is intended to capture metadata about traffic to and from network interfaces because VPC Flow Logs record accepted or rejected network-flow metadata in supported destinations; in this design the new outcome is to establish dedicated private network connectivity from a site to AWS, which calls for AWS Direct Connect rather than VPC Flow Logs or the earlier Private subnet.

Question 653

An AWS implementation has already addressed restore supported table data to a recent earlier point by using DynamoDB point-in-time recovery. Its remaining gap is to provide multi-Region active-active replication for a DynamoDB application. Which listed capability closes this gap?

  1. DynamoDB point-in-time recovery
  2. Amazon ElastiCache
  3. DynamoDB global tables
  4. Database connection management

Explanation

Correct Answer

C:

DynamoDB global tables addresses the new need to provide multi-Region active-active replication for a DynamoDB application because global tables replicate supported data across selected Regions for regional workloads; DynamoDB point-in-time recovery supports the different existing task to restore supported table data to a recent earlier point.

Incorrect Answers

A:

DynamoDB point-in-time recovery primarily supports the earlier need to restore supported table data to a recent earlier point because pITR continuously backs up eligible DynamoDB table data for point-in-time restore within its retention window, but the new task is to provide multi-Region active-active replication for a DynamoDB application; that is why DynamoDB global tables is preferable here.

B:

Amazon ElastiCache is intended to cache frequently accessed application data in memory because elastiCache offers managed in-memory caching engines to reduce repetitive backend reads; in this design the new outcome is to provide multi-Region active-active replication for a DynamoDB application, which calls for DynamoDB global tables rather than Amazon ElastiCache or the earlier DynamoDB point-in-time recovery.

D:

Database connection management is intended to reduce avoidable connection pressure on an RDS application backend because managed connection proxies such as RDS Proxy can pool connections for suitable engines; in this design the new outcome is to provide multi-Region active-active replication for a DynamoDB application, which calls for DynamoDB global tables rather than Database connection management or the earlier DynamoDB point-in-time recovery.

Question 654

The acceptance criteria for an AWS solution include the ability to recognize that many AWS resources exist only in a selected Region. Which item should the team choose?

  1. Amazon Route 53 DNS
  2. Regional service scope
  3. Data residency by Region
  4. Regional disaster recovery tests

Explanation

Correct Answer

B:

Regional service scope matches the goal to recognize that many AWS resources exist only in a selected Region because regional services require selecting the location where supported resources are created. Some identities and global services have different scopes. Regional disaster recovery tests is for the different objective to verify a workload can resume in its backup Region.

Incorrect Answers

A:

Amazon Route 53 DNS addresses the separate need to direct clients to an endpoint using managed domain name resolution because Route 53 answers DNS queries according to hosted-zone records and routing policies; it is not as direct as Regional service scope for the actual requirement to recognize that many AWS resources exist only in a selected Region.

C:

Data residency by Region addresses the separate need to keep stored customer data in a selected geography because region placement and configured replication determine where supported AWS workload data resides; it is not as direct as Regional service scope for the actual requirement to recognize that many AWS resources exist only in a selected Region.

D:

Regional disaster recovery tests addresses the separate need to verify a workload can resume in its backup Region because recovery exercises check replication, dependencies and traffic-routing procedures before a real incident; it is not as direct as Regional service scope for the actual requirement to recognize that many AWS resources exist only in a selected Region.

Question 655

A team has chosen AWS Elastic Beanstalk to deploy application code with managed environment provisioning. Which description explains the mechanism that makes this selection appropriate?

  1. This capability orchestrates supporting AWS resources for supported web application platforms.
  2. This capability runs build and test commands without operating dedicated build servers.
  3. These tools provide language libraries and request handling for application integrations with AWS APIs.
  4. Outposts extends selected AWS infrastructure and services to supported on-premises locations.

Explanation

Correct Answer

A:

AWS Elastic Beanstalk meets the goal to deploy application code with managed environment provisioning because elastic Beanstalk orchestrates supporting AWS resources for supported web application platforms. Developers still control application logic and configuration.

Incorrect Answers

B:

That description belongs to AWS CodeBuild because codeBuild runs build and test commands without operating dedicated build servers; it is used to compile and test software in a managed build environment, not to explain how AWS Elastic Beanstalk provides the function to deploy application code with managed environment provisioning.

C:

That description belongs to AWS SDKs because sDKs provide language libraries and request handling for application integrations with AWS APIs; it is used to integrate AWS service requests directly into application source code, not to explain how AWS Elastic Beanstalk provides the function to deploy application code with managed environment provisioning.

D:

That description belongs to AWS Outposts because outposts extends selected AWS infrastructure and services to supported on-premises locations; it is used to run AWS-managed infrastructure at a customer premises for local requirements, not to explain how AWS Elastic Beanstalk provides the function to deploy application code with managed environment provisioning.

Question 656

While reviewing a design, an architect identifies a gap: the workload needs to run applications needing high local storage IOPS or throughput. Which option closes that gap most directly?

  1. Compute optimized EC2 instance
  2. Amazon ECS
  3. Storage optimized EC2 instance
  4. Network Load Balancer

Explanation

Correct Answer

C:

Storage optimized EC2 instance matches the goal to run applications needing high local storage IOPS or throughput because storage-optimized families offer specialized local storage performance for eligible workloads. Local performance does not imply durable storage across host failure. Amazon ECS is for the different objective to orchestrate containerized applications using AWS-managed control capabilities.

Incorrect Answers

A:

Compute optimized EC2 instance addresses the separate need to provide comparatively more CPU resources for CPU-intensive applications because compute-optimized instance families emphasize processing power for compute-bound tasks; it is not as direct as Storage optimized EC2 instance for the actual requirement to run applications needing high local storage IOPS or throughput.

B:

Amazon ECS addresses the separate need to orchestrate containerized applications using AWS-managed control capabilities because eCS schedules and manages containers in clusters on supported launch types; it is not as direct as Storage optimized EC2 instance for the actual requirement to run applications needing high local storage IOPS or throughput.

D:

Network Load Balancer addresses the separate need to handle high-performance connection-level TCP or UDP traffic because nLB routes connections at the transport layer and supports static IP behavior; it is not as direct as Storage optimized EC2 instance for the actual requirement to run applications needing high local storage IOPS or throughput.

Question 657

Engineers are documenting how Amazon WorkSpaces fulfills an objective to provide managed cloud virtual desktop environments. Which technical explanation belongs in that document?

  1. API Gateway exposes managed API endpoints with routing and controls.
  2. AppStream 2.0 streams supported applications through a browser or client.
  3. This capability orchestrates service integrations and branching steps over time.
  4. This capability delivers desktop computing to remote users.

Explanation

Correct Answer

D:

Amazon WorkSpaces meets the goal to provide managed cloud virtual desktop environments because workSpaces delivers desktop computing to remote users. Virtual desktop delivery is distinct from publishing one application stream.

Incorrect Answers

A:

That description belongs to Amazon API Gateway because aPI Gateway exposes managed API endpoints with routing and controls; it is used to create a managed front door for application APIs, not to explain how Amazon WorkSpaces provides the function to provide managed cloud virtual desktop environments.

B:

That description belongs to Amazon AppStream 2.0 because appStream 2.0 streams supported applications through a browser or client; it is used to stream hosted desktop applications to end users, not to explain how Amazon WorkSpaces provides the function to provide managed cloud virtual desktop environments.

C:

That description belongs to AWS Step Functions because step Functions orchestrates service integrations and branching steps over time; it is used to coordinate multi-step application workflows with managed state, not to explain how Amazon WorkSpaces provides the function to provide managed cloud virtual desktop environments.

Question 658

An AWS workload is being designed to enforce supported WORM retention against object deletion or modification. What is the most appropriate capability or approach?

  1. AWS Storage Gateway
  2. EBS snapshot
  3. Amazon FSx for Windows File Server
  4. S3 pre-signed URL
  5. Amazon S3 Object Lock

Explanation

Correct Answer

E:

Amazon S3 Object Lock matches the goal to enforce supported WORM retention against object deletion or modification because object Lock supports retention modes and legal holds on eligible S3 object versions. Retention protection is distinct from a routine lifecycle deletion rule. EBS snapshot is for the different objective to back up an EBS volume to durable AWS-managed snapshot storage.

Incorrect Answers

A:

AWS Storage Gateway addresses the separate need to connect on-premises applications to cloud-backed storage interfaces because storage Gateway supports hybrid file volume and tape integration scenarios; it is not as direct as Amazon S3 Object Lock for the actual requirement to enforce supported WORM retention against object deletion or modification.

B:

EBS snapshot addresses the separate need to back up an EBS volume to durable AWS-managed snapshot storage because EBS snapshots capture volume data and can support recovery or creating new volumes; it is not as direct as Amazon S3 Object Lock for the actual requirement to enforce supported WORM retention against object deletion or modification.

C:

Amazon FSx for Windows File Server addresses the separate need to provide managed SMB file shares for Windows workloads because fSx for Windows File Server supports Windows file protocols and Active Directory integration; it is not as direct as Amazon S3 Object Lock for the actual requirement to enforce supported WORM retention against object deletion or modification.

D:

S3 pre-signed URL addresses the separate need to grant time-limited access to a specific object operation under signing credentials because a pre-signed URL encodes a limited request authorization with expiration; it is not as direct as Amazon S3 Object Lock for the actual requirement to enforce supported WORM retention against object deletion or modification.

Question 659

While reviewing a design, an architect identifies a gap: the workload needs to select whether connection return traffic needs independent explicit rules. Which option closes that gap most directly?

  1. Public subnet
  2. AWS Site-to-Site VPN
  3. Stateless versus stateful filtering
  4. Interface VPC endpoint

Explanation

Correct Answer

C:

Stateless versus stateful filtering matches the goal to select whether connection return traffic needs independent explicit rules because security groups track allowed connections while network ACLs evaluate both directions without state. Mixing these models can inadvertently block response packets. Public subnet is for the different objective to place resources in a subnet with a route toward an internet gateway.

Incorrect Answers

A:

Public subnet addresses the separate need to place resources in a subnet with a route toward an internet gateway because a public subnet has a route to an attached internet gateway where applicable; it is not as direct as Stateless versus stateful filtering for the actual requirement to select whether connection return traffic needs independent explicit rules.

B:

AWS Site-to-Site VPN addresses the separate need to connect office networks to AWS through encrypted tunnels over IP networks because site-to-Site VPN establishes IPsec tunnels between a customer network and AWS connectivity endpoints; it is not as direct as Stateless versus stateful filtering for the actual requirement to select whether connection return traffic needs independent explicit rules.

D:

Interface VPC endpoint addresses the separate need to reach supported services through private network interfaces in a subnet because privateLink-backed endpoints create private IP endpoints with associated security groups; it is not as direct as Stateless versus stateful filtering for the actual requirement to select whether connection return traffic needs independent explicit rules.

Question 660

A decision record states that the primary objective is to identify positive negative or neutral tone in a document. Which AWS offering or principle should it name?

  1. AWS Glue
  2. Amazon Textract
  3. Amazon Polly
  4. Text sentiment classification

Explanation

Correct Answer

D:

Text sentiment classification matches the goal to identify positive negative or neutral tone in a document because managed NLP sentiment analysis assesses the emotional polarity of text. Speech recognition and language translation answer different questions. Amazon Polly is for the different objective to convert written text into natural-sounding spoken audio.

Incorrect Answers

A:

AWS Glue addresses the separate need to discover prepare and integrate data across supported sources because glue provides data integration workflows and a metadata Data Catalog; it is not as direct as Text sentiment classification for the actual requirement to identify positive negative or neutral tone in a document.

B:

Amazon Textract addresses the separate need to extract printed and handwritten text and document structure because textract reads forms tables and text from supported document inputs; it is not as direct as Text sentiment classification for the actual requirement to identify positive negative or neutral tone in a document.

C:

Amazon Polly addresses the separate need to convert written text into natural-sounding spoken audio because polly provides text-to-speech generation for applications; it is not as direct as Text sentiment classification for the actual requirement to identify positive negative or neutral tone in a document.

AWS Certified Cloud Practitioner CLF-C02 Practice Tests