Question 980

A reviewer suggests Amazon SageMaker AI when asked how to identify positive negative or neutral tone in a document, although that offering is primarily used to build train and deploy custom machine learning models. Which alternative is the more precise choice?

  1. Amazon Textract
  2. Amazon SageMaker AI
  3. Amazon OpenSearch Service
  4. Text sentiment classification

Explanation

Correct Answer

D:

Text sentiment classification addresses the new need to identify positive negative or neutral tone in a document because managed NLP sentiment analysis assesses the emotional polarity of text; Amazon SageMaker AI supports the different existing task to build train and deploy custom machine learning models.

Incorrect Answers

A:

Amazon Textract is intended to extract printed and handwritten text and document structure because textract reads forms tables and text from supported document inputs; in this design the new outcome is to identify positive negative or neutral tone in a document, which calls for Text sentiment classification rather than Amazon Textract or the earlier Amazon SageMaker AI.

B:

Amazon SageMaker AI primarily supports the earlier need to build train and deploy custom machine learning models because sageMaker AI offers managed tooling for ML data preparation training and inference workflows, but the new task is to identify positive negative or neutral tone in a document; that is why Text sentiment classification is preferable here.

C:

Amazon OpenSearch Service is intended to search and analyze indexed logs and document collections because openSearch Service supports search analytics and log exploration; in this design the new outcome is to identify positive negative or neutral tone in a document, which calls for Text sentiment classification rather than Amazon OpenSearch Service or the earlier Amazon SageMaker AI.

Question 981

A solution has 2 separate requirements: first, hold scratch data temporarily on host-attached disks; second, centrally manage backup plans across supported AWS resources. Which TWO choices correspond most directly to these needs? Choose TWO.

  1. EBS volume encryption
  2. EC2 instance store
  3. Amazon S3
  4. Amazon EFS
  5. AWS Backup

Explanation

Correct Answers

B:

EC2 instance store covers the listed need to hold scratch data temporarily on host-attached disks because instance store provides fast ephemeral data storage tied to the host; it belongs in the keyed set alongside AWS Backup to centrally manage backup plans across supported AWS resources.

E:

AWS Backup covers the listed need to centrally manage backup plans across supported AWS resources because AWS Backup coordinates scheduled backup and retention policies for eligible services; it belongs in the keyed set alongside EC2 instance store to hold scratch data temporarily on host-attached disks.

Incorrect Answers

A:

EBS volume encryption addresses a different objective, to protect block storage with supported at-rest encryption, because encrypted EBS volumes use integrated key management for data at rest; the checklist instead requires the distinct outcomes to hold scratch data temporarily on host-attached disks; centrally manage backup plans across supported AWS resources.

C:

Amazon S3 addresses a different objective, to store durable objects and retrieve them by bucket and key, because S3 is an object storage service for files and data blobs rather than mounted block devices; the checklist instead requires the distinct outcomes to hold scratch data temporarily on host-attached disks; centrally manage backup plans across supported AWS resources.

D:

Amazon EFS addresses a different objective, to mount elastic shared file storage from multiple Linux workloads, because eFS supplies managed NFS file systems that can be accessed concurrently by supported clients; the checklist instead requires the distinct outcomes to hold scratch data temporarily on host-attached disks; centrally manage backup plans across supported AWS resources.

Question 982

In a design comparison, Heterogeneous database migration is associated with the objective to move between dissimilar database engines with possible schema translation. For the distinct objective to translate supported database schemas and code for heterogeneous migrations, which option should be preferred?

  1. Heterogeneous database migration
  2. AWS Schema Conversion Tool
  3. RDS Multi-AZ configuration
  4. Amazon RDS

Explanation

Correct Answer

B:

AWS Schema Conversion Tool addresses the new need to translate supported database schemas and code for heterogeneous migrations because AWS SCT helps assess and convert compatible schema objects between database engines; Heterogeneous database migration supports the different existing task to move between dissimilar database engines with possible schema translation.

Incorrect Answers

A:

Heterogeneous database migration primarily supports the earlier need to move between dissimilar database engines with possible schema translation because heterogeneous migration may require converting schema objects and application SQL, but the new task is to translate supported database schemas and code for heterogeneous migrations; that is why AWS Schema Conversion Tool is preferable here.

C:

RDS Multi-AZ configuration is intended to improve database availability using a standby in another Availability Zone because RDS Multi-AZ options support failover when the primary or supporting infrastructure fails; in this design the new outcome is to translate supported database schemas and code for heterogeneous migrations, which calls for AWS Schema Conversion Tool rather than RDS Multi-AZ configuration or the earlier Heterogeneous database migration.

D:

Amazon RDS is intended to operate a managed relational database engine because RDS automates selected relational database operations including backup and patching; in this design the new outcome is to translate supported database schemas and code for heterogeneous migrations, which calls for AWS Schema Conversion Tool rather than Amazon RDS or the earlier Heterogeneous database migration.

Question 983

In an architecture review, Regional disaster recovery tests was selected to verify a workload can resume in its backup Region. Which account of its behavior justifies this decision?

  1. An AWS Region is a distinct geographic location containing multiple Availability Zones.
  2. Recovery exercises check replication, dependencies and traffic-routing procedures before a real incident.
  3. AWS service availability varies by Region and sometimes by instance family or feature.
  4. Regional services require selecting the location where supported resources are created.

Explanation

Correct Answer

B:

Regional disaster recovery tests meets the goal to verify a workload can resume in its backup Region because recovery exercises check replication, dependencies and traffic-routing procedures before a real incident. A copy of data alone does not prove end-to-end recovery.

Incorrect Answers

A:

That description belongs to AWS Region because an AWS Region is a distinct geographic location containing multiple Availability Zones; it is used to select a geographic area in which to place a workload, not to explain how Regional disaster recovery tests provides the function to verify a workload can resume in its backup Region.

C:

That description belongs to Regional service availability check because AWS service availability varies by Region and sometimes by instance family or feature; it is used to verify a particular offering is available in the chosen Region, not to explain how Regional disaster recovery tests provides the function to verify a workload can resume in its backup Region.

D:

That description belongs to Regional service scope because regional services require selecting the location where supported resources are created; it is used to recognize that many AWS resources exist only in a selected Region, not to explain how Regional disaster recovery tests provides the function to verify a workload can resume in its backup Region.

Question 984

While reviewing a design, an architect identifies a gap: the workload needs to distinguish outbound address translation from direct public routing. Which option closes that gap most directly?

  1. NAT versus internet gateway
  2. Route table
  3. AWS Site-to-Site VPN
  4. AWS Global Accelerator

Explanation

Correct Answer

A:

NAT versus internet gateway matches the goal to distinguish outbound address translation from direct public routing because NAT gateways enable private egress; internet gateways provide the VPC's internet attachment. A public-facing server normally requires a public route and suitable public addressing. AWS Site-to-Site VPN is for the different objective to connect office networks to AWS through encrypted tunnels over IP networks.

Incorrect Answers

B:

Route table addresses the separate need to decide where traffic from a subnet should be directed because VPC route tables contain destination-prefix routing entries for network traffic; it is not as direct as NAT versus internet gateway for the actual requirement to distinguish outbound address translation from direct public routing.

C:

AWS Site-to-Site VPN addresses the separate need to connect office networks to AWS through encrypted tunnels over IP networks because site-to-Site VPN establishes IPsec tunnels between a customer network and AWS connectivity endpoints; it is not as direct as NAT versus internet gateway for the actual requirement to distinguish outbound address translation from direct public routing.

D:

AWS Global Accelerator addresses the separate need to improve global network paths and health-based endpoint selection using anycast IPs because global Accelerator uses the AWS global network to route traffic to regional endpoints; it is not as direct as NAT versus internet gateway for the actual requirement to distinguish outbound address translation from direct public routing.

Question 985

An AWS workload is being designed to accelerate and automate transfers between supported storage locations. What is the most appropriate capability or approach?

  1. S3 Same-Region Replication
  2. Amazon EFS
  3. AWS DataSync
  4. S3 Glacier Instant Retrieval
  5. S3 server-side encryption
  6. EBS snapshot

Explanation

Correct Answer

C:

AWS DataSync matches the goal to accelerate and automate transfers between supported storage locations because dataSync moves files or objects between on-premises and AWS storage systems with verification. It differs from a long-term application caching gateway. S3 Glacier Instant Retrieval is for the different objective to keep rarely accessed archives with millisecond access when requested; the requested capability is AWS DataSync to accelerate and automate transfers between supported storage locations, in contrast with S3 Glacier Instant Retrieval to keep rarely accessed archives with millisecond access when requested.

Incorrect Answers

A:

S3 Same-Region Replication addresses the separate need to replicate eligible objects between buckets within the same AWS Region because same-Region Replication can support same-region copy and ownership workflows; it is not as direct as AWS DataSync for the actual requirement to accelerate and automate transfers between supported storage locations.

B:

Amazon EFS addresses the separate need to mount elastic shared file storage from multiple Linux workloads because eFS supplies managed NFS file systems that can be accessed concurrently by supported clients; it is not as direct as AWS DataSync for the actual requirement to accelerate and automate transfers between supported storage locations.

D:

S3 Glacier Instant Retrieval addresses the separate need to keep rarely accessed archives with millisecond access when requested because glacier Instant Retrieval combines archival pricing characteristics with immediate retrieval; it is not as direct as AWS DataSync for the actual requirement to accelerate and automate transfers between supported storage locations.

E:

S3 server-side encryption addresses the separate need to encrypt S3 object data at rest using supported key arrangements because S3 encrypts stored object data at rest and supports key-management choices; it is not as direct as AWS DataSync for the actual requirement to accelerate and automate transfers between supported storage locations.

F:

EBS snapshot addresses the separate need to back up an EBS volume to durable AWS-managed snapshot storage because EBS snapshots capture volume data and can support recovery or creating new volumes; it is not as direct as AWS DataSync for the actual requirement to accelerate and automate transfers between supported storage locations.

Question 986

A solution uses Accelerated computing EC2 instance for the requirement to handle workloads requiring GPUs or specialized hardware acceleration. Which operating behavior underlies that use?

  1. Accelerated instance families provide processors suited to parallel graphics or ML workloads.
  2. Spot capacity may be interrupted by AWS, so tasks should checkpoint or retry.
  3. EKS integrates managed Kubernetes cluster control plane services with AWS infrastructure.
  4. General-purpose instances provide a balanced resource profile without specializing in one bottleneck.

Explanation

Correct Answer

A:

Accelerated computing EC2 instance meets the goal to handle workloads requiring GPUs or specialized hardware acceleration because accelerated instance families provide processors suited to parallel graphics or ML workloads. General-purpose CPU capacity may be less efficient for accelerator-suitable code.

Incorrect Answers

B:

That description belongs to Spot interruption handling because Spot capacity may be interrupted by AWS, so tasks should checkpoint or retry; it is used to design flexible EC2 workloads to withstand capacity reclamation, not to explain how Accelerated computing EC2 instance provides the function to handle workloads requiring GPUs or specialized hardware acceleration.

C:

That description belongs to Amazon EKS because eKS integrates managed Kubernetes cluster control plane services with AWS infrastructure; it is used to run Kubernetes-based container workloads using an AWS-managed control plane, not to explain how Accelerated computing EC2 instance provides the function to handle workloads requiring GPUs or specialized hardware acceleration.

D:

That description belongs to General purpose EC2 instance because general-purpose instances provide a balanced resource profile without specializing in one bottleneck; it is used to balance CPU memory and networking for broadly mixed workloads, not to explain how Accelerated computing EC2 instance provides the function to handle workloads requiring GPUs or specialized hardware acceleration.

Question 987

For a new AWS implementation, a team must enforce stateful inbound and outbound rules on supported resources. Which available choice is most specifically intended for that function?

  1. NAT versus internet gateway
  2. AWS Site-to-Site VPN
  3. Security group
  4. Stateless versus stateful filtering

Explanation

Correct Answer

C:

Security group matches the goal to enforce stateful inbound and outbound rules on supported resources because security groups act as virtual firewalls associated with network interfaces. Allowing traffic in one direction handles matching return traffic statefully. NAT versus internet gateway is for the different objective to distinguish outbound address translation from direct public routing.

Incorrect Answers

A:

NAT versus internet gateway addresses the separate need to distinguish outbound address translation from direct public routing because NAT gateways enable private egress; internet gateways provide the VPC's internet attachment; it is not as direct as Security group for the actual requirement to enforce stateful inbound and outbound rules on supported resources.

B:

AWS Site-to-Site VPN addresses the separate need to connect office networks to AWS through encrypted tunnels over IP networks because site-to-Site VPN establishes IPsec tunnels between a customer network and AWS connectivity endpoints; it is not as direct as Security group for the actual requirement to enforce stateful inbound and outbound rules on supported resources.

D:

Stateless versus stateful filtering addresses the separate need to select whether connection return traffic needs independent explicit rules because security groups track allowed connections while network ACLs evaluate both directions without state; it is not as direct as Security group for the actual requirement to enforce stateful inbound and outbound rules on supported resources.

Question 988

A reviewer suggests Amazon CloudWatch EC2 metrics when asked how to obtain eligible EC2 billing discounts for committed usage attributes, although that offering is primarily used to monitor resource behavior to inform scaling and alerts. Which alternative is the more precise choice?

  1. AWS Fargate
  2. Amazon CloudWatch EC2 metrics
  3. EC2 Auto Scaling
  4. Reserved Instances

Explanation

Correct Answer

D:

Reserved Instances addresses the new need to obtain eligible EC2 billing discounts for committed usage attributes because reserved Instances are a pricing mechanism for eligible instance usage commitments; Amazon CloudWatch EC2 metrics supports the different existing task to monitor resource behavior to inform scaling and alerts.

Incorrect Answers

A:

AWS Fargate is intended to run container tasks without managing EC2 container hosts because fargate supplies serverless compute for supported ECS and EKS workloads; in this design the new outcome is to obtain eligible EC2 billing discounts for committed usage attributes, which calls for Reserved Instances rather than AWS Fargate or the earlier Amazon CloudWatch EC2 metrics.

B:

Amazon CloudWatch EC2 metrics primarily supports the earlier need to monitor resource behavior to inform scaling and alerts because cloudWatch collects supported measurements such as CPU utilization from EC2, but the new task is to obtain eligible EC2 billing discounts for committed usage attributes; that is why Reserved Instances is preferable here.

C:

EC2 Auto Scaling is intended to adjust the number of matching EC2 instances as demand changes because EC2 Auto Scaling can launch and terminate instances according to configured scaling policies; in this design the new outcome is to obtain eligible EC2 billing discounts for committed usage attributes, which calls for Reserved Instances rather than EC2 Auto Scaling or the earlier Amazon CloudWatch EC2 metrics.

Question 989

An AWS implementation has already addressed serve frequently accessed objects with low-latency retrieval by using Amazon S3 Standard. Its remaining gap is to transition or expire objects automatically based on age and criteria. Which listed capability closes this gap?

  1. S3 lifecycle rule
  2. S3 bucket policy
  3. Amazon S3 Inventory
  4. Amazon S3 Standard

Explanation

Correct Answer

A:

S3 lifecycle rule addresses the new need to transition or expire objects automatically based on age and criteria because lifecycle configuration can move objects into eligible classes or delete them on schedule; Amazon S3 Standard supports the different existing task to serve frequently accessed objects with low-latency retrieval.

Incorrect Answers

B:

S3 bucket policy is intended to control allowed and denied access to an S3 bucket and its objects because bucket policies are resource-based JSON permissions for supported S3 actions; in this design the new outcome is to transition or expire objects automatically based on age and criteria, which calls for S3 lifecycle rule rather than S3 bucket policy or the earlier Amazon S3 Standard.

C:

Amazon S3 Inventory is intended to generate lists of objects and associated metadata for analysis because S3 Inventory produces scheduled reports about bucket objects and properties; in this design the new outcome is to transition or expire objects automatically based on age and criteria, which calls for S3 lifecycle rule rather than Amazon S3 Inventory or the earlier Amazon S3 Standard.

D:

Amazon S3 Standard primarily supports the earlier need to serve frequently accessed objects with low-latency retrieval because S3 Standard is appropriate for data requiring regular access across multiple AZs, but the new task is to transition or expire objects automatically based on age and criteria; that is why S3 lifecycle rule is preferable here.

Question 990

For this AWS project, 2 outcomes are required: first, retain direct control of database host OS and engine installation; second, reduce avoidable connection pressure on an RDS application backend. Which TWO options provide the most direct matches? Choose TWO.

  1. Database on Amazon EC2
  2. Database connection management
  3. Amazon ElastiCache
  4. Amazon DocumentDB
  5. Amazon RDS

Explanation

Correct Answers

A:

Database on Amazon EC2 covers the listed need to retain direct control of database host OS and engine installation because self-managing a database on EC2 leaves patching, backups and high availability largely to the customer; it belongs in the keyed set alongside Database connection management to reduce avoidable connection pressure on an RDS application backend.

B:

Database connection management covers the listed need to reduce avoidable connection pressure on an RDS application backend because managed connection proxies such as RDS Proxy can pool connections for suitable engines; it belongs in the keyed set alongside Database on Amazon EC2 to retain direct control of database host OS and engine installation.

Incorrect Answers

C:

Amazon ElastiCache addresses a different objective, to cache frequently accessed application data in memory, because elastiCache offers managed in-memory caching engines to reduce repetitive backend reads; the checklist instead requires the distinct outcomes to retain direct control of database host OS and engine installation; reduce avoidable connection pressure on an RDS application backend.

D:

Amazon DocumentDB addresses a different objective, to run JSON document workloads using MongoDB-compatible APIs, because documentDB offers managed document database capabilities for suitable MongoDB workloads; the checklist instead requires the distinct outcomes to retain direct control of database host OS and engine installation; reduce avoidable connection pressure on an RDS application backend.

E:

Amazon RDS addresses a different objective, to operate a managed relational database engine, because RDS automates selected relational database operations including backup and patching; the checklist instead requires the distinct outcomes to retain direct control of database host OS and engine installation; reduce avoidable connection pressure on an RDS application backend.

AWS Certified Cloud Practitioner CLF-C02 Practice Tests