CLF-C02 Question 119
Select 4You are designing a new application on AWS and need to ensure proper security measures are in place. Which AWS services or features can help you monitor and secure your resources?
- A
AWS Identity and Access Management (IAM)
- B
Amazon CloudWatch
- C
AWS Trusted Advisor
- D
Amazon EC2 Auto Scaling
- E
AWS Key Management Service (KMS)
Show answer and explanation
Correct answers: A, B, C, E
Explanation
Ensuring the security of your AWS environment involves a combination of services. IAM controls access to resources, CloudWatch monitors activity for potential security risks, Trusted Advisor provides security recommendations, and KMS ensures data is encrypted and protected. While EC2 Auto Scaling is useful for scalability, it does not directly contribute to security.
- A. Correct.
AWS Identity and Access Management (IAM) is used to securely manage access to AWS resources by creating users, roles, and policies.
- B. Correct.
Amazon CloudWatch provides monitoring and operational insights into resources and applications, helping detect security issues through logs and alarms.
- C. Correct.
AWS Trusted Advisor provides recommendations to improve security, such as enabling MFA or ensuring IAM best practices are followed.
- D. Incorrect.
Amazon EC2 Auto Scaling is used to scale EC2 instances based on demand but does not directly provide security features.
- E. Correct.
AWS Key Management Service (KMS) enables encryption and secure management of cryptographic keys, which is critical for data security.