Amazon Web Services Updated CLF-C02 Exam Questions and Answers by simon

Moving servers from an on-premises data center to AWS allows the company to eliminate the direct costs of owning and operating the physical data center facilities used by those servers. These facility costs can include buildings or leased floor space, power, cooling systems, physical security, hardware maintenance areas, and other supporting infrastructure. AWS operates the facilities, hardware, networking, and foundational infrastructure of the AWS Cloud, and customers consume the required resources as services. Therefore, option B is correct. Application licensing costs are not necessarily eliminated because the company might continue paying for commercial operating systems, databases, or application software. Some AWS offerings include licenses, while others support Bring Your Own License. Network bandwidth costs also continue to exist because AWS may charge for certain outbound, inter-Region, or other data-transfer patterns. Storage likewise remains a metered cloud resource, and customers generally pay according to storage class, capacity, requests, retrievals, and applicable data transfer. The cost benefit is not that every IT expense disappears; instead, customers avoid purchasing and maintaining their own data center facilities and convert many infrastructure costs into usage-based cloud charges.

AWS recommends using tags to organize resources effectively and to activate cost allocation tags to enable detailed tracking of costs by categories such as department, environment, and application. This approach provides the granularity needed for tracking and managing AWS costs accurately. AWS Cost Management and Billing tools provide insights but do not inherently categorize costs without tags.

Based on AWS IAM documentation,inline policiesare policies that aredirectly embedded into a single IAM user, group, or role. When a company wants to create and apply a policy specifically for one user and does not intend to reuse it, inline policies are the most appropriate option.

AWS managed policies are created and maintained by AWS and are intended for general use cases. Customer managed policies are reusable policies created by customers and can be attached to multiple users, groups, or roles. Amazon S3 bucket policies are resource-based policies and apply only to S3 buckets, not directly to IAM users.

AWS documentation explains that inline policies maintain astrict one-to-one relationshipwith the entity to which they are attached. If the user is deleted, the inline policy is also deleted automatically. This makes inline policies ideal foruser-specific, tightly scoped permissions, which matches the requirement in the question exactly.