Book Image

AWS Certified Cloud Practitioner Study Guide: CLF-C01 Exam

By : Ben Piper, David Clinton
Book Image

AWS Certified Cloud Practitioner Study Guide: CLF-C01 Exam

By: Ben Piper, David Clinton

Overview of this book

AWS certifications validate the technical skills and knowledge required for building secure and reliable applications on the AWS cloud. The AWS Certified Cloud Practitioner certification is for individuals who have the knowledge and skills necessary to demonstrate an understanding of the AWS Cloud, independent of specific technical roles addressed by other AWS certifications. An AWS Certified Cloud Practitioner is a recommended path to achieving specialty certification or an optional start toward Associate certification. This guide provides a solid introduction and the resources you need to prove your knowledge in the exam. It covers all topics, beginning with what the AWS cloud and its basic global infrastructure and architectural principles. Other chapters dive into the technical, exploring core characteristics of deploying and operating in the AWS Cloud Platform, as well as basic security and compliance aspects and the shared security model. The text identifies sources of documentation or technical assistance, such as white papers or support tickets. The authors discuss the AWS Cloud value proposition and define billing, account management, and pricing models. This includes describing the key services AWS can provide and their common use cases such as compute, analytics, and so on. By the end of this book, you'll be thoroughly prepared for the foundational CLF-C01 exam.
Table of Contents (24 chapters)
Free Chapter
1
Cover
2
Acknowledgments
3
About the Authors
4
Table of Exercises
5
Introduction
6
Assessment Test
7
Answers to Assessment Test
20
Index
21
Advert
22
End User License Agreement

Chapter 5: Securing Your AWS Resources

  1. A. Identity and Access Management (IAM) is primarily focused on helping you control access to your AWS resources. KMS handles access keys. EC2 manages SSH key pairs. While IAM does touch on federated management, that’s not its primary purpose.

  2. A, B, D. Including a space or null character is not a password policy option.

  3. C, D. The root user should not be used for day-to-day admin tasks—even as part of an “admin” group. The goal is to protect root as much as possible.

  4. D. MFA requires at least two (“multi”) authentication methods. Those will normally include a password (something you know) and a token sent to either a virtual or physical MFA device (something you have).

  5. B. The -i argument should point to the name (and location) of the key stored on the local (client) machine. By default, the admin user on an Amazon Linux instance is named ec2-user.

  6. B. While assigning permissions and...