Amazon Web Services Updated CLF-C02 Exam Questions and Answers by kiera

AWS Certificate Manager (ACM) Overview:

ACM simplifies the process of provisioning, managing, and deploying SSL/TLS certificates.

These certificates are used to secure HTTPS connections, ensuring encrypted communication between clients and servers.

How ACM Meets the Goal:

Provides free public SSL/TLS certificates.

Automates certificate renewals and deployment with services like Elastic Load Balancing and Amazon CloudFront.

Reduces the operational overhead of managing SSL/TLS certificates.

Why Other Options Are Incorrect:

A. AWS WAF: Focuses on application-layer protection (e.g., SQL injection, cross-site scripting) but does not handle SSL/TLS encryption.

B. AWS Shield: Provides protection against DDoS attacks, not encryption.

C. Amazon VPC: Used for networking and security at the infrastructure level but does not manage SSL/TLS certificates.

References:

AWS Certificate Manager (ACM) Documentation

Securing Web Applications with ACM

AWS Secrets Manager is a service that helps you protect access to your applications, services, and IT resources. This service enables you to easily rotate, manage, and retrieve database credentials, API keys, and other secrets throughout their lifecycle. Users and applications retrieve secrets with a call to Secrets Manager APIs, eliminating the need to hardcode sensitive information in plain text. Secrets Manager offers secret rotation with built-in integration for Amazon RDS, Amazon Redshift, Amazon DocumentDB, and other AWS services1. You can also extend Secrets Manager to rotate other types of secrets, such as credentials for Oracle, SQL Server, or MongoDB databases, by using custom AWS Lambda functions2. Secrets Manager enables you to control access to secrets using fine-grained permissions and audit secret rotation centrally for resources in the AWS Cloud, third-party services, and on-premises3. Therefore, AWS Secrets Manager supports the requirement of rotating database user credentials with the least amount of operational overhead, compared to the other options. References:

What Is AWS Secrets Manager? - AWS Secrets Manager

Rotating Your AWS Secrets Manager Secrets - AWS Secrets Manager

AWS Secrets Manager Features - AWS Secrets Manager

AWS Business Support is the minimum recommended tier for users who have production workloads on AWS. AWS Business Support provides 24x7 access to cloud support engineers via phone, chat, or email, as well as a guaranteed response time of less than one hour for urgent issues. AWS Business Support also includes access to AWS Trusted Advisor, a tool that provides real-time guidance to help you provision your resources following AWS best practices4.

Cost Explorer enables visualization and analysis of AWS costs and usage over specific time periods. It provides detailed reports, trends, and forecasts for cost management. Consolidated billing and AWS Organizations are useful for billing management across accounts, while AWS Budgets helps set spending thresholds but does not provide visualization tools for cost and usage.