Amazon CLF-C02 Practice Test - Questions Answers, Page 65

AWS Secrets Manager is the most secure way to store and manage sensitive information, such as passwords, database credentials, and API keys. Secrets Manager allows you to:

Securely store and rotate secrets.

Automatically manage secret rotation without disrupting applications.

Integrate with AWS services and third-party applications to retrieve secrets securely.

Why other options are not suitable:

A . Store passwords in an Amazon S3 bucket: Although S3 is secure, it is not designed for secret management. It lacks built-in secret rotation and fine-grained access control for sensitive data.

B . Store passwords as AWS CloudFormation parameters: CloudFormation is used for managing infrastructure as code, not for securely storing passwords.

C . Store passwords in AWS Storage Gateway: A service for hybrid storage integration, not suitable for storing secrets or passwords.

References:

AWS Secrets Manager Documentation

Amazon EC2 (Elastic Compute Cloud) provides scalable computing capacity in the AWS Cloud, allowing customers to run virtual servers (instances) with different configurations of CPU, memory, storage, and networking capacity. This flexibility is ideal for applications that require specific infrastructure configurations, such as custom marketing and order-processing applications.

A . AWS Lambda: Incorrect, as it is a serverless compute service that automatically manages the computing resources needed to run code but does not offer the flexibility of choosing different instance types.

B . Amazon Cognito: Incorrect, as it is used for user authentication and authorization, not for deploying applications.

C . Amazon Athena: Incorrect, as it is an interactive query service for analyzing data in Amazon S3 using standard SQL.

AWS Cloud References:

Amazon EC2

Explanation:

AWS Transit Gateway is a network transit hub that customers can use to connect their Amazon VPCs and on-premises networks to a central hub. This service simplifies network management and reduces operational overhead by enabling a single gateway for managing multiple network connections. It facilitates seamless integration and routing between VPCs and on-premises networks.

A . Virtual private gateway: Incorrect, as it is used to connect a single VPC to an on-premises network through a VPN connection.

C . Internet gateway: Incorrect, as it provides internet access for instances in a VPC but does not connect multiple networks.

D . Customer gateway: Incorrect, as it represents the on-premises device or software application that connects to AWS, but it does not provide a central hub.

AWS Cloud References:

AWS Transit Gateway

Amazon CloudFront is a content delivery network (CDN) that helps deliver your website content globally with low latency by caching copies of your website content at edge locations around the world. This helps ensure that users receive content from the edge location closest to them, thereby reducing latency and improving user experience.

A . Amazon Route 53: Incorrect, as it is a DNS web service that routes users to the appropriate endpoint, but it does not cache content or reduce latency.

C . Elastic Load Balancing: Incorrect, as it distributes incoming application or network traffic across multiple targets, but does not cache content globally.

D . AWS Lambda: Incorrect, as it is a serverless compute service, not intended for content delivery.

AWS Cloud References:

Amazon CloudFront

Amazon Neptune is a fully managed graph database service optimized for storing and querying highly connected data. It supports popular graph models such as Property Graph and W3C's RDF, making it ideal for building graph queries for real-time fraud pattern detection and other applications that require complex relationships and data traversal.

B . Amazon DynamoDB: Incorrect, as it is a NoSQL database service that is not optimized for graph queries.

C . Amazon Timestream: Incorrect, as it is a time-series database service designed for storing and analyzing time-series data, not graph data.

D . Amazon Forecast: Incorrect, as it is a fully managed service that provides time-series forecasting capabilities, not for graph queries.

AWS Cloud References:

Amazon Neptune