CLF-C02 Exam Dumps - AWS Certified Cloud Practitioner

On-Demand Instances are the most cost-efficient pricing model for an uninterruptible workload that runs once a year for 24 hours. On-Demand Instances let you pay for compute capacity by the hour or second, depending on which instances you run. No long-term commitments or up-front payments are required. You can increase or decrease your compute capacity to meet the demands of your application and only pay the specified hourly rates for the instance you use1. This model is suitable for developing/testing applications with short-term or unpredictable workloads2. The other pricing models are not cost-efficient for this use case. Reserved Instances and Savings Plans require a commitment to a consistent amount of usage, in USD per hour, for a term of 1 or 3 years. They provide significant discounts compared to On-Demand Instances, but they are not flexible or scalable for workloads that run only once a year12. Spot Instances are the cheapest option, but they are not suitable for uninterruptible workloads, as they can be reclaimed by AWS at any time. They are recommended for applications that have flexible start and end times, or that are only feasible at very low compute prices12. Dedicated Instances are designed for compliance and licensing requirements, not for cost optimization. They are more expensive than the other options, as they run on single-tenant hardware12. References: Amazon EC2 – Secure and resizable compute capacity – AWS, Amazon EC2 - How AWS Pricing Works

 AWS Identity and Access Management (IAM) is a service that enables you to manage access to AWS services and resources securely. You can use IAM to perform the following actions:

Control access to AWS service APIs and to other specific resources: You can create users, groups, roles, and policies that define who can access which AWS resources and how. You can also use IAM to grant temporary access to users or applications that need to perform certain tasks on your behalf3

Protect the AWS environment using multi-factor authentication (MFA): You can enable MFA for your IAM users and root user to add an extra layer of security to your AWS account. MFA requires users to provide a unique authentication code from an approved device or SMS text message, in addition to their user name and password, when they sign in to AWS4

The AWS Well-Architected Framework is a set of best practices and guidelines for designing and operating workloads on AWS. It helps customers achieve operational excellence, security, reliability, performance efficiency, cost optimization, and sustainability. The framework is based on six pillars, each with its own design principles, best practices, and questions. Customers can use the framework to assess their current state, identify gaps, and implement improvements12.

AWS Support is a service that provides technical assistance, guidance, and resources for AWS customers. It offers different plans with varying levels of access to AWS experts, response times, and features3. AWS Support does not provide a comprehensive framework for operational support.

AWS Cloud Adoption Framework (AWS CAF) is a guidance tool that helps customers plan and execute their cloud migration journey. It provides a set of perspectives, capabilities, and best practices to align the business and technical aspects of cloud adoption4. AWS CAF does not focus on operational support for existing workloads on AWS.

AWS Managed Services (AMS) is a service that operates AWS infrastructure on behalf of customers. It provides a secure and compliant environment, automates common activities, and applies best practices for provisioning, patching, backup, recovery, and monitoring5. AMS does not provide a framework for customers to operate their own workloads on AWS.

AWS Glue is a fully managed extract, transform, and load (ETL) service that makes it easy to prepare and load data for analytics. AWS Glue can discover data sources, transform data, and make it available for analysis by using data catalogs and workflows. Amazon Redshift is a fully managed, petabyte-scale data warehouse service in the cloud that enables customers to analyze data using standard SQL and existing business intelligence tools. Amazon Redshift can also integrate with other AWS services to visualize and transform data. Amazon Elastic File System (Amazon EFS) provides a simple, scalable, fully managed elastic NFS file system for use with AWS Cloud services and on-premises resources. Amazon QuickSight is a fast, cloud-powered business intelligence service that makes it easy to deliver insights to everyone in an organization. Amazon Quantum Ledger Database (Amazon QLDB) is a fully managed ledger database that provides a transparent, immutable, and cryptographically verifiable transaction log owned by a central trusted authority.

AWS CloudTrail is the service that can be used to meet these requirements. AWS CloudTrail is a service that records AWS API calls for your account and delivers log files to you. The recorded information includes the identity of the API caller, the time of the API call, the source IP address of the API caller, the request parameters, and the response elements returned by the AWS service1. You can use CloudTrail to track the activity in your AWS accounts, such as who made an API call, when it was made, and what resources were affected. You can also use CloudTrail to monitor the compliance, security, and governance of your AWS environment2. The other services are not designed to track the activity and API calls in your AWS accounts. Amazon CloudWatch is a service that monitors and collects metrics, logs, and events from your AWS resources and applications. You can use CloudWatch to set alarms, visualize data, and automate actions based on predefined thresholds or rules3. Amazon Inspector is a service that helps you improve the security and compliance of your applications running on AWS. Inspector automatically assesses applications for exposure, vulnerabilities, and deviations from best practices4. AWS IAM is a service that enables you to manage access to AWS services and resources securely. IAM allows you to create and manage AWS users and groups, and use permissions to allow and deny their access to AWS resources. References: AWS CloudTrail, AWS CloudTrail – Capture AWS API Activity, Amazon CloudWatch, Amazon Inspector, [AWS IAM]

AWS CloudShell is the service that provides command line access to AWS tools and resources directly from a web browser. AWS CloudShell is a browser-based shell that makes it easy to securely manage, explore, and interact with your AWS resources. It comes pre-authenticated with your console credentials and common development and administration tools are pre-installed, so no local installation or configuration is required. You can open AWS CloudShell from the AWS Management Console with a single click and start running commands and scripts using the AWS Command Line Interface (AWS CLI), Git, or SDKs. AWS CloudShell also provides persistent home directories with 1 GB of storage per AWS Region12. The other services do not provide command line access to AWS tools and resources directly from a web browser. AWS CloudHSM is a service that helps you meet corporate, contractual and regulatory compliance requirements for data security by using dedicated Hardware Security Module (HSM) appliances within the AWS Cloud3. Amazon WorkSpaces is a service that provides a fully managed, secure Desktop-as-a-Service (DaaS) solution that runs on AWS4. AWS Cloud Map is a service that makes it easy for your applications to discover and connect to each other using logical names and attributes5. References: AWS CloudShell, AWS CloudShell – Command-Line Access to AWS Resources, AWS CloudHSM, Amazon WorkSpaces, AWS Cloud Map

AWS Trusted Advisor provides checks and recommendations across various categories, including cost optimization, security, and performance. Access to all Trusted Advisor checks is available with AWS Business Support, ensuring the company can follow AWS best practices comprehensively. The Developer Support plan offers limited Trusted Advisor checks, and AWS Health Dashboard provides insights into service health but not specific best practice recommendations.

Amazon Kinesis Data Firehose is a fully managed service that delivers real-time streaming data to destinations such as Amazon S3, Amazon Redshift, Amazon Elasticsearch Service, and Splunk. You can use Amazon Kinesis Data Firehose to capture, transform, and load streaming data from multiple sources, such as web applications, mobile devices, IoT sensors, and social media.