Amazon CLF-C01 Practice Test - Questions Answers, Page 31
List of questions
Question 301

Which AWS service offers the LEAST expensive means of storing static images?
Explanation:
Explanation:
Question 302

Which guideline is a well-architected design principle for building cloud applications?
Question 303

A developer is writing a new application that consists of multiple AWS microservices During quality assurance testing, the developer notices runtime errors in several areas of the application. Which AWS service should the developer use to help troubleshoot the errors?
Question 304

What are characteristics of AWS IAM users and groups? (Select TWO.)
Question 305

A company recently created its first AWS account.
Which AWS services will require the use of a VPC? (Select TWO.)
Question 306

Which of the following is an AWS value proposition that describes a user's ability to scale infrastructure based on demand?
Question 307

Which guidelines are best practices for using AWS Identity and Access Management (IAM)? (Select TWO.)
Question 308

Which AWS service can be used to run Amazon EC2 instances on-premises at a user site?
Question 309

A company wants to archive its media data as soon as the data is generated. The company needs to store the data for several years Two or three times each year the company must access some of the data within 10 minutes of a request. Which Amazon S3 solution will meet these requirements MOST cost-effectively?
Question 310

Which security service automatically recognizes and classifies sensitive data or intellectual property on AWS?
Explanation:
Explanation:
Amazon Macie is a fully managed data security and data privacy service that uses machine learning and pattern matching to discover and protect your sensitive data in AWS.
As organizations manage growing volumes of data, identifying and protecting their sensitive data at scale can become increasingly complex, expensive, and time-consuming. Amazon Macie automates the discovery of sensitive data at scale and lowers the cost of protecting your data. Macie automatically provides an inventory of Amazon S3 buckets including a list of unencrypted buckets, publicly accessible buckets, and buckets shared with AWS accounts outside those you have defined in AWS Organizations. Then, Macie applies machine learning and pattern matching techniques to the buckets you select to identify and alert you to sensitive data, such as personally identifiable information (PII). Macieís alerts, or findings, can be searched and filtered in the AWS Management Console and sent to Amazon EventBridge, formerly called Amazon CloudWatch Events, for easy integration with existing workflow or event management systems, or to be used in combination with AWS services, such as AWS Step Functions to take automated remediation actions. This can help you meet regulations, such as the Health Insurance Portability and Accountability Act (HIPAA) and General Data Privacy Regulation (GDPR). You can get started with Amazon Macie by leveraging the 30-day free trial for bucket evaluation. The trial includes 30-days of Amazon S3 bucket inventory and bucket-level security and access control assessment at no cost. Note that sensitive data discovery is not included in the 30-day free trial for bucket evaluation. Benefits
Discover your sensitive data at scale
Amazon Macie uses machine learning and pattern matching to cost efficiently discover sensitive data at scale. Macie automatically detects a large and growing list of sensitive data types, including personal identifiable information (PII) such as names, addresses, and credit card numbers. The service also allows you to define your own custom sensitive data types so you can discover and protect the sensitive data that may be unique to your business or use case.
Visibility of your data security posture
Amazon Macie gives you constant visibility of the data security and data privacy of your data stored in Amazon S3. Macie automatically and continually evaluates all of your S3 buckets and alerts you to any unencrypted buckets, publicly accessible buckets, or buckets shared with AWS accounts outside those you have defined in the AWS Organizations. Macie provides native multi-account support so you can view your data security posture across your entire S3 environment from a single Macie administrator account.
Easy to setup and manage
Getting started with Amazon Macie is fast and easy with one-click in the AWS Management Console or a single API call. Macie provides multi-account support using AWS Organizations, so you can enable Macie across all of your accounts with a few clicks. Macie maintains a fully-managed set of sensitive data types, so there is no custom configuration required.
Question