Amazon CLF-C02 Practice Test - Questions Answers, Page 69

Moving to the AWS Cloud offers several advantages, including increased speed and agility, which allows users to experiment, innovate, and iterate faster by using the global AWS infrastructure. Additionally, AWS offers massive economies of scale due to its large customer base, leading to lower pay-as-you-go prices. AWS does not assume all responsibilities for the security of infrastructure and applications; it follows a shared responsibility model. Also, not all AWS services can be implemented in seconds, and physical hardware cannot be moved from a user's data center to the AWS Cloud. References:

AWS Cloud Benefits

On-Demand Instances are ideal for workloads that require flexibility, offering compute capacity with no upfront cost, allowing users to pay by the second for the instances they use. This makes it suitable for applications with short-term, spiky, or unpredictable workloads that cannot be interrupted. Reserved Instances require long-term commitments, Spot Instances can be interrupted, and Dedicated Instances are for specific hardware requirements, making On-Demand the correct choice for uninterruptible and flexible instance usage. References:

AWS Documentation on EC2 On-Demand Instances

AWS CloudTrail is a service that enables governance, compliance, and operational and risk auditing of your AWS account. With CloudTrail, you can log, continuously monitor, and retain account activity related to actions across your AWS infrastructure. CloudTrail logs provide a history of AWS API calls for your account, including those made by the AWS Management Console, AWS SDKs, command-line tools, and other AWS services. In this case, AWS CloudTrail will help the administrator identify which user deleted the resources by reviewing the event history that records details such as which user performed the action, the time of the action, and which resources were affected.

B . Amazon Inspector: Incorrect, as it is a security assessment service that helps identify vulnerabilities and deviations from best practices, not for tracking user activity.

C . Amazon GuardDuty: Incorrect, as it is a threat detection service that monitors malicious activity and unauthorized behavior, not specifically for tracking changes made by users.

D . AWS Trusted Advisor: Incorrect, as it provides best practices and guidance for cost optimization, security, fault tolerance, and performance, not for logging user actions.

AWS Cloud References:

AWS CloudTrail

AWS Cost Explorer is a tool that enables you to view and analyze your costs and usage. It provides an easy-to-use interface to visualize, understand, and manage AWS costs and usage over time. Cost Explorer allows the company to monitor ongoing costs, set budget alerts, and analyze cost drivers, which is ideal for keeping the cost of running an ecommerce website within a specific budget.

B . AWS SDKs: Incorrect, as they are software development kits that allow integration with AWS services but do not provide cost monitoring or management capabilities.

C . EC2 Image Builder: Incorrect, as it is a service for automating the creation of virtual machine images, not for monitoring costs.

D . AWS CloudFormation: Incorrect, as it is used for provisioning and managing infrastructure as code, not for cost monitoring.

AWS Cloud References:

AWS Cost Explorer

According to the AWS Shared Responsibility Model, customers are responsible for managing their data, classifying their assets, and using AWS's identity and access management tools to apply the appropriate permissions. Implementing multi-factor authentication (MFA) for IAM user accounts is a customer responsibility to enhance the security of their accounts and protect against unauthorized access.

A . Apply security patches for Amazon S3 infrastructure devices: Incorrect, as AWS is responsible for managing and patching the underlying infrastructure, including storage devices.

B . Provide physical security for AWS data centers: Incorrect, as AWS is responsible for the physical security of its data centers.

C . Install operating system updates on Lambda@Edge: Incorrect, as AWS manages the underlying infrastructure for Lambda@Edge, including operating system updates.

AWS Cloud References:

AWS Shared Responsibility Model

AWS Organizations is a no-cost service that helps you centrally manage and govern your environment as you grow and scale your AWS resources. With AWS Organizations, you can create new AWS accounts, invite existing accounts to join your organization, and apply policies to groups of accounts for governance. While some features within AWS services incur additional costs, using AWS Organizations itself does not add any direct costs.

A . Amazon SageMaker: Incorrect, as it is a fully managed service for building, training, and deploying machine learning models, and it is not free.

B . AWS Config: Incorrect, as while it offers some free-tier usage, it generally incurs charges for recording and evaluating configuration changes.

D . Amazon CloudWatch: Incorrect, as certain CloudWatch metrics, custom metrics, and alarms have associated costs beyond the free tier.

AWS Cloud References:

AWS Organizations

AWS Trusted Advisor is a service that provides real-time guidance to help you provision your resources following AWS best practices. It offers checks in five categories: cost optimization, performance, security, fault tolerance, and service limits. By continuously monitoring the AWS environment, AWS Trusted Advisor helps ensure that additional developments, integrations, changes, and growth do not jeopardize the optimized infrastructure by providing ongoing optimization and security recommendations.

B . AWS Health Dashboard: Incorrect, as it provides personalized view of service health and status updates but does not offer continuous optimization and security advice.

C . Amazon Connect: Incorrect, as it is a contact center service, not related to infrastructure optimization or security.

D . AWS Systems Manager: Incorrect, as it provides operational insights and management for AWS resources but is not specifically focused on ongoing optimization and security checks.

AWS Cloud References:

AWS Trusted Advisor

AWS Application Migration Service (AWS MGN) is the primary service for migrating Amazon EC2 instances and on-premises servers to AWS, and it supports migration from one AWS Region to another. It automates the process of replicating and converting the source servers (including their applications, configurations, and data) to run natively on AWS. AWS Database Migration Service (DMS) is for migrating databases, AWS DataSync is for data transfer, and AWS Migration Hub provides a single location to track migration tasks across multiple AWS services but does not perform the migration itself.

One of the primary advantages of the AWS Cloud is the ability to provision resources on demand. Users no longer need to over-provision or guess the capacity needed for infrastructure, which helps optimize costs and improve agility. AWS handles infrastructure scaling dynamically based on the actual usage. Options B, C, and D are incorrect as users do not maintain sole ownership of IT hardware or control of underlying infrastructure, and while they do maintain some control over the operating system in some cases, it is not an advantage specific to the cloud.