Question 531 · 712 in bank
Select 2Which of the following actions are controlled with AWS Identity and Access Management (IAM)? (Choose two.)
Show answer
Answer: AC
AWS Certified Cloud Practitioner712 questions across 72 pages are complete and free, with no account or card.
712 questions in this bank
Free access · progress saved on this device
Which of the following actions are controlled with AWS Identity and Access Management (IAM)? (Choose two.)
Answer: AC
Why are AWS CloudFormation templates used?
Answer: A
A company is using AWS Identity and Access Management (IAM). Who can manage the access keys of the AWS account root user?
Answer: D
Which group shares responsibility with AWS for security and compliance of AWS accounts and resources?
Answer: B
A company needs an event history of which AWS resources the company has created. Which AWS service will provide this information?
Answer: B
A company wants to run relationship databases in the AWS Cloud. The company wants to use a managed service that will install the database and run regular software updates. Which AWS service will meet these requirements?
Answer: B
Which AWS service provides a fully managed graph database for highly connected datasets?
Answer: C
A company's cloud environment includes Amazon EC2 instances and Application Load Balancers. The company wants to improve protections for its cloud resources against DDoS attacks. The company also wants to have real-time visibility into any DDoS attacks. Which AWS service will meet these requirements?
Answer: C
C. Enhanced visibility into DDoS events and attacks – Shield Advanced gives you access to advanced, real-time metrics and reports for extensive visibility into events and attacks on your protected AWS resources. You can access this information through the Shield Advanced API and console, and through Amazon CloudWatch metrics.
Source: Adapted from community discussion — its_tima
Which of the following services can be used to block network traffic to an instance? (Choose two.)
Answer: AC
Security groups: Act as a virtual firewall for instances, controlling inbound and outbound traffic. They are associated with instances and operate at the instance level. You can configure security group rules to allow or deny traffic based on IP addresses, port ranges, and protocols. Network ACLs: Are an additional layer of security for your VPC. They operate at the subnet level and are stateless, meaning they evaluate rules for inbound and outbound traffic separately. Network ACLs can be used to allow or deny traffic based on IP addresses, port ranges, and protocols. Amazon Virtual Private Cloud (Amazon VPC) flow logs: Capture information about the IP traffic going to and from network interfaces in a VPC. While they provide visibility into network traffic, they don't block or control traffic. Amazon CloudWatch: A monitoring service that collects and tracks metrics, logs, and events from various AWS resources. It is not used for blocking network traffic to an instance. AWS CloudTrail: Provides a record of actions taken by users, roles, or services within an AWS account. It does not block network traffic but helps in auditing and tracking API calls.
Source: Adapted from community discussion — TheFivePips
A company wants to update its online data processing application by implementing container-based services that run for 4 hours at a time. The company does not want to provision or manage server instances. Which AWS service will meet these requirements?
Answer: B
Key word is container-based services, so among the following option AWS Fargate is a container service in AWS. Answer is B.AWS Fargate
Source: Adapted from community discussion — AravindrajG
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
CLF-C02 practice, question 531. 712 questions available.
Version 1.0.0. How we source questions