CLF-C02 Exam Dumps - AWS Certified Cloud Practitioner

One of the main advantages of cloud computing is the ability to trade fixed capital expenditures for variable operating expenses. By moving to the AWS Cloud, the company pays only for the resources it uses on a per-usage basis, reducing the need for large upfront investments in data center infrastructure. This benefit allows for more flexible and cost-effective spending based on actual usage. Other options, such as increased speed and agility or global reach, are also cloud benefits but do not specifically address the shift from fixed to variable expenses.

On-Demand Instances are recommended for short-term, irregular workloads that cannot be interrupted. The company needs capacity for only 24 hours once per year, so it would not be economical to make a one-year or three-year Reserved Instance commitment for such limited usage. With On-Demand pricing, the company pays only while the instances are running, without a long-term commitment. Therefore, option A is correct. Spot Instances can provide significant discounts but use spare EC2 capacity that AWS can interrupt. Because the workload explicitly cannot be interrupted, Spot Instances do not meet the requirement. Reserved Instances can reduce costs for steady, predictable, long-running usage, but paying for a commitment to cover an annual 24-hour workload would generally be less economical than paying the On-Demand rate for that brief period. Dedicated Instances run on hardware dedicated to one customer and normally cost more; the question includes no compliance, tenancy, or licensing requirement that would justify dedicated hardware. The decisive combination is “cannot be interrupted” plus “short-term and infrequent,” which maps directly to the documented On-Demand use case.

AWS CloudTrail records account activity and API actions as events, allowing customers to review who performed an action, what action was performed, when it occurred, and relevant request details. CloudTrail captures activity originating from sources such as the AWS Management Console, AWS CLI, AWS SDKs, APIs, IAM identities, and AWS services. This provides the audit history described in the question, so option A is correct. Amazon Inspector scans supported workloads, including EC2 instances, container images, and Lambda functions, for software vulnerabilities and unintended network exposure. AWS WAF protects web applications by inspecting and controlling HTTP and HTTPS requests. AWS Config records resource configurations, configuration changes, and compliance against rules; it answers questions about how resources were configured over time rather than serving as the primary audit trail for all account API activity. CloudTrail and AWS Config can complement each other, but their roles are different. For foundational exam questions, associate CloudTrail with governance, compliance, operational auditing, risk auditing, and a history of user and API actions across the AWS account.

DynamoDB global tables provide a fully managed, multi-Region, multi-active database capability. Global tables automatically replicate DynamoDB table data across the AWS Regions selected by the customer. Applications can perform local reads and writes against replica tables, and DynamoDB propagates changes to the other replicas without requiring the customer to build a separate cross-Region replication system. Therefore, option A is correct. DynamoDB Accelerator is an in-memory cache designed to reduce DynamoDB response times for read-intensive workloads. It does not synchronize complete tables across Regions. A global secondary index provides an alternative partition key and optional sort key for querying data within a DynamoDB table; despite the word “global,” it is not a cross-Region replication feature. A service-linked IAM role allows DynamoDB to perform specified actions on behalf of a customer but does not independently replicate table data. Global tables are designed for globally distributed applications, business continuity, high availability, and low-latency access by users in different geographic locations. The direct exam association is DynamoDB global tables for automatic multi-Region table synchronization and replication.

Customers are responsible for configuring and maintaining guest operating systems and applications on services where the customer controls those components, such as Amazon EC2. This includes security settings, software updates, application configuration, and guest operating system patching. Customers are also responsible for managing their data, including choosing and configuring appropriate encryption options. Therefore, options C and D are correct. AWS is responsible for maintaining the configuration of its underlying infrastructure devices, patching and updating the physical and foundational infrastructure, and maintaining the servers, storage devices, networking equipment, and facilities that operate AWS services. These AWS responsibilities are collectively described as securityofthe cloud. Customer responsibilities vary according to the service selected. For highly abstracted services such as Amazon S3, AWS also manages the operating system and platform, while the customer manages data, permissions, encryption choices, and service configuration. For infrastructure services such as EC2, the customer assumes more responsibility for the guest operating system and installed software. The question’s distinction is between AWS-owned infrastructure and customer-controlled workloads, configurations, applications, and data-protection decisions.