Amazon CLF-C02 Practice Test - Questions Answers, Page 77

AWS IAM Identity Center (formerly AWS Single Sign-On) provides centralized management of user access to multiple AWS accounts within an organization in AWS Organizations. It allows users to log in once and gain access to all assigned accounts without managing separate logins for each account. Amazon Cognito is generally used for application-level user management and authentication, not for managing access across AWS accounts.

AWS DataSync is designed for large-scale data transfers, especially involving large datasets with millions of files from on-premises to AWS. It provides fast and efficient transfer capabilities, and supports a one-time migration. AWS DMS is specific to databases, while Migration Hub is for tracking migrations, and Application Migration Service is for continuous replication rather than one-time file migrations.

S3 Intelligent-Tiering is cost-effective for data with unpredictable access patterns. It automatically moves data between two access tiers (frequent and infrequent) based on access patterns, which is suitable for data accessed daily or infrequently. S3 Glacier Deep Archive is for archival data accessed infrequently, and S3 One Zone-IA is for infrequent access data stored in a single availability zone, which may not be ideal for data accessed daily.

Amazon Neptune is a managed graph database service that is well-suited for complex queries involving relationships, such as detecting patterns indicative of fraud in credit card transactions. It supports graph query languages like Gremlin and SPARQL, making it ideal for use cases requiring intricate relationship analysis. DocumentDB, Timestream, and DynamoDB are not designed for graph-based queries.

AWS WAF is a web application firewall that helps protect applications from SQL injection attacks and other common web exploits. By defining rules to block, allow, or monitor specific types of requests, AWS WAF provides an effective defense against SQL injection. Network ACLs and Security Groups provide network-level security but do not inspect web traffic for specific attack patterns like SQL injection.

Amazon EventBridge (formerly CloudWatch Events) allows users to respond to changes in the state of AWS resources. It can be configured to invoke an AWS Lambda function when an EC2 instance enters the ''stopping'' state, providing a serverless way to automate responses to changes in EC2 instance states. AWS Config, SNS, and CloudFormation do not provide direct triggering for specific instance state changes.

Amazon Rekognition provides machine learning capabilities to analyze images and videos, enabling the detection of objects, people, text, and scenes. It is designed specifically for image and video analysis, making it suitable for various use cases like facial recognition and content moderation. Other services like Amazon Connect, Lightsail, and Personalize do not offer image or video analysis capabilities.

Cost Explorer enables visualization and analysis of AWS costs and usage over specific time periods. It provides detailed reports, trends, and forecasts for cost management. Consolidated billing and AWS Organizations are useful for billing management across accounts, while AWS Budgets helps set spending thresholds but does not provide visualization tools for cost and usage.