Free AWS-CERTIFIED-CLOUD-PRACTITIONER-CLF-C02 Amazon AWS-CERTIFIED-CLOUD-PRACTITIONER-CLF-C02 Practice Test Question - Page 12

Question 34 (Topic 1)

Which AWS service allows users to download security and compliance reports about the AWS infrastructure on demand?

Select an option, then click Submit answer.

○ Amazon GuardDuty
○ AWS Security Hub
○ AWS Artifact
○ AWS Shield

Question 35 (Topic 1)

Which task can a company perform by using security groups in the AWS Cloud?

Select an option, then click Submit answer.

○ Allow access to an Amazon EC2 instance through only a specific port.
○ Deny access to malicious IP addresses at a subnet level.
○ Protect data that is cached by Amazon CloudFront.
○ Apply a stateless firewall to an Amazon EC2 instance.

Reference / correct answer:

Allow access to an Amazon EC2 instance through only a specific port.

Most accepted answer: A. Allow access to an Amazon EC2 instance through only a specific port.

Community votes: A=4

Selected Answer: A should be A upvoted 6 times

Selected Answer: A A. Allow access to an Amazon EC2 instance through only a specific port. upvoted 1 times

Selected Answer: A https://docs.aws.amazon.com/vpc/latest/userguide/vpc-security-groups.html Security groups are stateful. For example, if you send a request from an instance, the response traffic for that request is allowed to reach the instance regardless of the inbound security group rules. Responses to allowed inbound traffic are allowed to leave the instance, regardless of the outbound rules. So "D" is NOT the answer. "A" is the correct answer. upvoted 2 times

Selected Answer: A https://docs.aws.amazon.com/vpc/latest/userguide/vpc-security-groups.html upvoted 1 times

A. Allow access to an Amazon EC2 instance through only a specific port. Security groups in AWS are used to control inbound and outbound traffic to and from Amazon EC2 instances. They act as virtual firewalls for your instances. You can define rules in a security group to allow specific traffic based on protocols, ports, and IP address ranges. Therefore, using security groups, you can allow access to an Amazon EC2 instance through only a specific port, effectively controlling the traffic that is permitted. upvoted 1 times

Question 36 (Topic 1)

Which capabilities are in the platform perspective of the AWS Cloud Adoption Framework (AWS CAF)? (Choose two.)

Select an option, then click Submit answer.

○ Performance and capacity management
○ Data engineering
○ Continuous integration and continuous delivery (CI/CD)
○ Infrastructure protection
○ Change and release management

Reference / correct answer:

Continuous integration and continuous delivery (CI/CD)

Most accepted answer: C. Continuous integration and continuous delivery (CI/CD)

Community votes: A=7, B=8, C=12, D=3, E=2

Selected Answer: BC B. Data engineering: This capability focuses on managing data pipelines, data storage, and data processing workflows to enable efficient data management and analytics in the cloud. C. Continuous integration and continuous delivery (CI/CD): This capability involves implementing automated processes for building, testing, and deploying software applications in a continuous manner, ensuring faster delivery cycles and improved software quality. https://docs.aws.amazon.com/prescriptive-guidance/latest/aws-caf-platform-perspective/welcome.html upvoted 8 times

Selected Answer: AC C. Continuous integration and continuous delivery (CI/CD) A. Performance and capacity management Explanation: In AWS CAF, the Platform perspective focuses on building, deploying, and operating the technology foundation (infrastructure, applications, and tooling). Typical capabilities include: CI/CD Performance and capacity management Infrastructure as code Compute, storage, networking, and database platforms Monitoring and observability Notes on distractors: B. Data engineering belongs to the Data perspective. D. Infrastructure protection belongs to the Security perspective. E. Change and release management belongs to the Operations perspective. upvoted 1 times

Selected Answer: AC The correct answers are: A. Performance and capacity management ✅ C. Continuous integration and continuous delivery (CI/CD) ✅ Reasoning: In the Platform perspective of the AWS Cloud Adoption Framework (AWS CAF), the focus is on delivering and managing cloud workloads efficiently. This includes: Performance and capacity management → Ensuring workloads meet performance needs and scale efficiently. Continuous integration and continuous delivery (CI/CD) → Automating application build, test, and deployment pipelines. Other options: B. Data engineering → Falls under the Data perspective, not Platform. D. Infrastructure protection → Falls under the Security perspective. E. Change and release management → Falls under the Operations perspective. Confidence level: High Reference: AWS Cloud Adoption Framework (AWS CAF) upvoted 1 times

Selected Answer: BC The key is the two for the *platform* upvoted 1 times

Selected Answer: AD A. Performance and Capacity that falls under the Operations perspective (https://docs.aws.amazon.com/whitepapers/latest/overview-aws-cloud-adoption-framework/operations-perspective.html) D. Infrastructure protection that falls under the security perspective (https://docs.aws.amazon.com/whitepapers/latest/overview-aws-cloud-adoption-framework/security-perspective.html) upvoted 1 times

Free AWS-CERTIFIED-CLOUD-PRACTITIONER-CLF-C02 – Amazon AWS-CERTIFIED-CLOUD-PRACTITIONER-CLF-C02 Practice Test Question