Amazon CLF-C02 Practice Test - Questions Answers, Page 48

The Operations perspective helps you monitor and manage your cloud workloads to ensure that they are delivered at a level that meets your business needs.Common stakeholders include chief operations officer (COO), cloud director, cloud operations manager, and cloud operations engineers1.The Operations perspective covers capabilities such as workload health monitoring, incident management, change management, release management, configuration management, and disaster recovery2.

The Business perspective helps ensure that your cloud investments accelerate your digital transformation ambitions and business outcomes. Common stakeholders include chief executive officer (CEO), chief financial officer (CFO), chief information officer (CIO), and chief technology officer (CTO).The Business perspective covers capabilities such as business case development, value realization, portfolio management, and stakeholder management3.

The Governance perspective helps you orchestrate your cloud initiatives while maximizing organizational benefits and minimizing transformation-related risks. Common stakeholders include chief transformation officer, CIO, CTO, CFO, chief data officer (CDO), and chief risk officer (CRO).The Governance perspective covers capabilities such as governance framework, budget and cost management, compliance management, and data governance4.

The Platform perspective helps you build an enterprise-grade, scalable, hybrid cloud platform, modernize existing workloads, and implement new cloud-native solutions. Common stakeholders include CTO, technology leaders, architects, and engineers.The Platform perspective covers capabilities such as platform design and implementation, workload migration and modernization, cloud-native development, and DevOps5.

AWS Cloud Adoption Framework: Operations Perspective

AWS Cloud Adoption Framework - Operations Perspective

AWS Cloud Adoption Framework: Business Perspective

AWS Cloud Adoption Framework: Governance Perspective

AWS Cloud Adoption Framework: Platform Perspective

The correct answer is B. Amazon Inspector.

Amazon Inspector is an automated vulnerability management service that continually scans AWS workloads for software vulnerabilities and unintended network exposure. Amazon Inspector automatically discovers workloads, such as Amazon EC2 instances, containers, and Lambda functions, and scans them for software vulnerabilities and unintended network exposure12.

Amazon GuardDuty is a threat detection service that monitors your AWS accounts and workloads for malicious or unauthorized activity. Amazon GuardDuty does not scan for software vulnerabilities, but rather analyzes AWS CloudTrail, Amazon VPC Flow Logs, and DNS logs to detect threats such as compromised credentials, backdoors, or crypto mining3.

AWS Security Hub is a security and compliance service that aggregates and prioritizes security findings from multiple AWS services and partner solutions. AWS Security Hub does not scan for software vulnerabilities, but rather provides a comprehensive view of your security posture across your AWS accounts4.

AWS Shield is a managed service that protects your web applications and network resources from distributed denial-of-service (DDoS) attacks. AWS Shield does not scan for software vulnerabilities, but rather provides detection and mitigation of DDoS attacks at the network and application layers5.

1: Automated Software Vulnerability Management - Amazon Inspector - AWS 3: [Amazon GuardDuty -- Intelligent Threat Detection Made Easy] 2: AWS Re-Launches Amazon Inspector with New Architecture and Features - InfoQ 4: [AWS Security Hub -- Unified Security and Compliance Center] 5: [AWS Shield -- Managed DDoS Protection]

The additional benefit that the company will receive with AWS Enterprise Support is C. A designated technical account manager (TAM) to assist in monitoring and optimization.

A TAM is a dedicated point of contact who works with the customer to understand their use cases, applications, and goals, and provides proactive guidance and best practices to help them optimize their AWS environment. A TAM also helps the customer with case management, escalations, service updates, and feature requests12.

A full set of AWS Trusted Advisor checks is available for customers with Business, Enterprise On-Ramp, or Enterprise Support plans1. Phone, email, and chat access to cloud support engineers 24/7 is available for customers with Business, Enterprise On-Ramp, or Enterprise Support plans1. A consultative review and architecture guidance for the company's applications is available for customers with Enterprise On-Ramp or Enterprise Support plans1. Therefore, these benefits are not exclusive to AWS Enterprise Support.

1: AWS Support Plan Comparison | Developer, Business, Enterprise ...

IAM credential report is a feature that allows you to generate and download a report that lists all IAM users in your AWS account and the status of their various credentials, including access keys and MFA devices.You can use this report to audit the security status of your IAM users and ensure that they follow the best practices for using AWS1.

AWS Key Management Service (AWS KMS) is a service that allows you to create and manage encryption keys to protect your data.It does not provide information about IAM users or their credentials2.

IAM Access Analyzer is a feature that helps you identify the resources in your AWS account, such as S3 buckets or IAM roles, that are shared with an external entity.It does not provide information about IAM users or their credentials3.

Amazon CloudWatch is a service that monitors and collects metrics, logs, and events from your AWS resources and applications.It does not provide information about IAM users or their credentials4.

Getting credential reports for your AWS account - AWS Identity and Access Management

AWS Key Management Service - Amazon Web Services

IAM Access Analyzer - AWS Identity and Access Management

Amazon CloudWatch - Amazon Web Services

Amazon Simple Queue Service (Amazon SQS) and AWS Step Functions are AWS services that can be used to achieve a loosely coupled architecture. Amazon SQS is a fully managed message queuing service that enables you to decouple and scale microservices, distributed systems, and serverless applications. AWS Step Functions lets you coordinate multiple AWS services into serverless workflows so you can build and update apps quickly. Using Step Functions, you can design and run workflows that stitch together services such as AWS Lambda and Amazon SNS into feature-rich applications.Reference:Amazon SQS,AWS Step Functions

AWS Snow Family is a group of devices that transport data in and out of AWS. AWS Snow Family devices are physical devices that can transfer up to exabytes of data. One exabyte is 1 000 000 000 000 megabytes. AWS Snow Family devices are designed for use in remote locations where internet connectivity is limited or unavailable. You can use these devices to collect and process data at the edge, and then ship them back to AWS for data upload.AWS Snow Family consists of three types of devices: AWS Snowcone, AWS Snowball, and AWS Snowmobile1234.Reference:1:Edge Computing Devices, Secure Data Transfer - AWS Snow Family - AWS,2:AWS Snow Family Documentation,3:AWS Snow Family - W3Schools,4:AWS Snow Family: Data Storage, Migration, and Computation

Consolidated billing is a feature of AWS Organizations that enables customers to consolidate billing and payment for multiple AWS accounts. With consolidated billing, customers can group multiple AWS accounts under one payer account, making it easier to manage billing and track costs across multiple accounts. Consolidated billing also offers benefits such as volume discounts, Reserved Instance discounts, and Savings Plans discounts.Consolidated billing is offered at no additional cost.

Multiple AWS accounts is a feature of AWS Organizations that enables customers to create and manage multiple AWS accounts from a central location. With multiple AWS accounts, customers can isolate workloads for different departments, projects, or environments, and apply granular access controls and policies to each account.Multiple AWS accounts also helps customers improve security, compliance, and governance of their AWS resources56.Reference:5:Consolidated billing for AWS Organizations - AWS Billing,6:Understanding Consolidated Bills - AWS Billing,7:AWS Consolidated Billing: Tutorial & Best Practices,8:Simplifying Your Bills With Consolidated Billing on AWS - Aimably,9:AWS Consolidated Billing - W3Schools

AWS Artifact is a service that provides on-demand access to security and compliance reports from AWS and Independent Software Vendors (ISVs) who sell their products on AWS Marketplace.You can use AWS Artifact to download auditor-issued reports, certifications, accreditations, and other third-party attestations of AWS compliance with various standards and regulations, such as PCI-DSS, HIPAA, FedRAMP, GDPR, and more1234.You can also use AWS Artifact to review, accept, and manage your agreements with AWS and apply them to current and future accounts within your organization2.Reference:1:Cloud Compliance - Amazon Web Services (AWS),2:Security Compliance Management - AWS Artifact - AWS,3:AWS Compliance Contact Us - Amazon Web Services,4:AWS SECURITY AND COMPLIANCE QUICK REFERENCE GUIDE

AWS Management Console is a web application that allows you to manage and monitor your AWS Cloud resources through a user-friendly interface.You can use the AWS Management Console to access and experiment with over 150 AWS services, view and modify your account and billing information, get in-console help from AWS Support, and customize your dashboard with widgets that display key metrics and information for your applications567.You can also use the AWS Management Console to launch and configure AWS resources using wizards and templates, without writing any code5.Reference:5:Manage AWS Resources - AWS Management Console - AWS,6:Getting Started with the AWS Management Console,7:Manage AWS Resources - AWS Management Console Features - AWS