Amazon CLF-C02 Practice Test - Questions Answers, Page 68

Under the AWS Shared Responsibility Model, AWS manages security of the cloud (such as physical infrastructure and virtualization), while customers are responsible for security in the cloud. This means that customers are responsible for:

B . Encrypt data and maintain data integrity: Correct, as customers are responsible for securing their data, including encryption and maintaining its integrity.

D . Maintain identity and access management controls: Correct, as customers are responsible for managing access to their AWS resources, including creating and managing IAM users, roles, and permissions.

A . Secure the virtualization layer: Incorrect, as AWS is responsible for securing the underlying virtualization layer.

C . Patch the Amazon RDS operating system: Incorrect, as AWS handles patching and maintenance of the managed service's underlying infrastructure.

E . Secure Availability Zones: Incorrect, as AWS is responsible for securing the physical infrastructure, including Availability Zones.

AWS Cloud References:

AWS Shared Responsibility Model

A Network Access Control List (ACL) is a stateless network filtering mechanism provided by AWS for controlling traffic in and out of subnets within a VPC. Unlike security groups, which are stateful, network ACLs are stateless. This means that they do not automatically allow responses to inbound traffic unless explicitly specified. Network ACLs allow you to set rules for both inbound and outbound traffic, making them suitable for stateless filtering. Security groups, on the other hand, are stateful, while AWS WAF is primarily for web application-level security. AWS PrivateLink is used for privately connecting VPCs to AWS services without using an internet gateway. Therefore, for stateless network filtering, Network ACL is the correct choice.

Amazon Elastic Container Service (Amazon ECS) is a highly scalable, fast container management service that allows you to run, stop, and manage Docker containers on a cluster of Amazon EC2 instances or a serverless environment powered by AWS Fargate. It provides secure, reliable, and scalable operations for containers, allowing users to deploy containers in a highly secure and reliable manner. Amazon Aurora is a relational database service, Amazon Athena is an interactive query service, and Amazon Polly is a text-to-speech service. Therefore, the correct answer is Amazon ECS. References:

AWS Documentation on Amazon ECS

Rehosting ('lift and shift') is a migration strategy where applications are moved to the cloud with minimal changes, making it the least effort-intensive method for applications incompatible with the cloud. Repurchasing involves moving to a different product, often a SaaS solution, which can also minimize migration effort by avoiding the need for application-level changes. Retiring, replatforming, and refactoring require significant effort either in terms of analyzing and shutting down the application, making changes to the underlying platform, or redesigning the application architecture, respectively. References:

AWS Migration Strategies

'The Reliability pillar encompasses the ability of a workload to perform its intended function correctly and consistently when it's expected to. This includes the ability to operate and test the workload through its total lifecycle. ' https://docs.aws.amazon.com/wellarchitected/latest/framework/reliability.html

The AWS Developer Support plan is the lowest-cost AWS Support plan that provides basic guidance and technical support for running production workloads. It offers 24/7 access to AWS customer service, documentation, whitepapers, and access to a limited set of Trusted Advisor checks. This plan is ideal for non-critical workloads or early development phases but provides lower levels of support compared to the Business, Enterprise On-Ramp, and Enterprise plans.

B . Enterprise On-Ramp: Incorrect, as it is a higher-cost support plan designed for production workloads needing more guidance and technical support.

C . Enterprise: Incorrect, as it is the most expensive support plan, providing a Technical Account Manager and other premium support features.

D . Business: Incorrect, as it provides comprehensive support for production workloads but is more expensive than the Developer plan.

AWS Cloud References:

AWS Support Plans