CLF-C02 Practice Question 69: Best Practice Checks
AWS Certified Cloud Practitioner (CLF-C02) · Test 7 · question 9 of 10
A small company wants one AWS service that inspects its account and recommends improvements based on AWS best practices. It wants to be told about security groups that allow unrestricted access to specific ports, usage that is getting close to service quotas, and opportunities to save money or improve fault tolerance. Which service provides these recommendations?
Show answer and explanation
Answer:
AWS Trusted Advisor draws on best practices learned from serving hundreds of thousands of AWS customers. It inspects your AWS environment and makes recommendations when there are opportunities to save money, improve system availability and performance, or close security gaps. Its checks are grouped into categories that include cost optimization, security, fault tolerance, performance and service limits (quotas). Every account can use all service limits checks and selected security and fault tolerance checks; the full set of checks comes with a higher AWS Support plan.
Option A, the AWS Health Dashboard, reports events that affect AWS services and your resources, such as outages and scheduled maintenance. It does not review your account against best practices. Option B, AWS Config, records resource configurations and evaluates them against rules *you* set up. It could flag open security groups, but it does not track quota usage or suggest cost savings. Option D, Amazon Inspector, scans workloads for software vulnerabilities and network exposure. It does not give cost, quota or fault tolerance advice.
Reference: AWS Trusted Advisor