AWS Certified Cloud Practitioner — Question 300

A company needs to analyze its AWS Cloud environment to determine whether the company is following security best practices. The company wants recommendations about how to close security gaps.

Which AWS service should the company use to obtain these recommendations?

Answer options

• A. AWS WAF
• B. AWS Systems Manager
• C. AWS Trusted Advisor
• D. AWS Shield

Correct answer: C

Explanation

AWS Trusted Advisor evaluates your AWS environment and provides real-time recommendations across several categories, including security, to help you align with best practices. AWS WAF is a web application firewall for protecting web applications, AWS Shield provides DDoS protection, and AWS Systems Manager helps manage AWS resources, meaning none of these services offer the required comprehensive best-practice recommendations.