CLF-C02 Exam Dumps - AWS Certified Cloud Practitioner

Network ACLs (NACLs) are subnet-level firewalls in AWS, controlling inbound and outbound traffic for VPC subnets. They provide an additional layer of security by allowing or denying traffic based on IP protocol, source and destination IP, and port. Security groups operate at the instance level, while Traffic Mirroring and Internet Gateways do not function as firewalls at the subnet level.

AWS Migration Hub assists users in planning and tracking the progress of their server and application migrations. It centralizes migration tracking across various AWS services, providing visibility into application inventory and migration status. While AWS Application Migration Service also assists with migrations, Migration Hub is specifically designed for tracking migration data comprehensively.

AWS Snowball Edge offers configurations that are either storage-optimized or compute-optimized, providing flexibility for different data migration and processing needs. It supports local processing and data transfer to AWS, catering to scenarios that require heavy storage or compute resources. AWS Snowcone and DataSync do not offer these optimizations, and Storage Gateway focuses on hybrid cloud storage.

AWS CloudFormation enables infrastructure as code by allowing a company to describe AWS and supported third-party resources in template files. A template acts as a repeatable blueprint that defines the resources to create and their relevant properties and relationships. CloudFormation uses the template to provision and configure a stack, which allows the same infrastructure definition to be deployed consistently in another environment, account, or Region. AWS also provides an infrastructure-as-code generator that can scan eligible existing resources and generate a template that can be used to bring those resources under CloudFormation management or replicate them. Therefore, option A is correct. AWS Step Functions coordinates distributed application components and workflows by using state machines; it does not replicate infrastructure from resource templates. Amazon CloudFront is a content delivery network that caches and delivers content through edge locations. AWS CloudTrail records account activity and API events for auditing and governance. Neither CloudFront nor CloudTrail is an infrastructure provisioning service. The exam clue is “using templates”: AWS CloudFormation templates define resources and make repeatable, controlled infrastructure deployments possible.

Customers are responsible for configuring access to their Amazon S3 buckets and objects. An S3 bucket policy is a resource-based policy that defines which principals can perform specified actions on the bucket and its objects, subject to the complete AWS authorization process. Because the customer determines who should access its data, configuring bucket policies is a customer responsibility, making option C correct. AWS is responsible for operating and protecting the physical storage equipment, data center facilities, underlying networking infrastructure, operating systems, and service platform that run Amazon S3. AWS also patches and maintains the managed S3 platform. Those tasks are part of securityofthe cloud and are not performed by individual customers. Customers retain responsibility for their content, including data classification, access permissions, encryption choices, public-access settings, versioning, lifecycle policies, and other service configurations. AWS provides secure S3 capabilities, but customers must configure those capabilities according to their business and compliance requirements. The fundamental exam distinction is that AWS secures the infrastructure that provides S3, while customers secure their S3 data and control how that data can be accessed.

Amazon Rekognition is a machine learning service that can analyze and recognize objects, people, text, scenes, and activities in images and videos. It is specifically designed for organizing, categorizing, and searching large volumes of images based on various attributes. Amazon Transcribe is for speech-to-text, Amazon Aurora is a relational database service, and Amazon QuickSight is a business intelligence tool for data visualization.