QUESTION: 105

Which tasks are the customer’s responsibility, according to the AWS shared responsibility model? (Choose two.)

Establish the global infrastructure.
Perform client-side data encryption.
Configure IAM credentials.
Secure edge locations.
Patch Amazon RDS DB instances.

Answer(s): B,C

QUESTION: 106

A developer has been hired by a large company and needs AWS credentials.
Which are security best practices that should be followed? (Choose two.)

Grant the developer access to only the AWS resources needed to perform the job.
Share the AWS account root user credentials with the developer.
Add the developer to the administrator’s group in AWS IAM.
Configure a password policy that ensures the developer’s password cannot be changed.
Ensure the account password policy requires a minimum length.

Answer(s): A,E

Show Answer Next Question

A company has multiple AWS accounts that include compute workloads that cannot be interrupted. The company wants to obtain billing discounts that are based on the company’s use of AWS services.
Which AWS feature or purchasing option will meet these requirements?

Resource tagging
Consolidated billing
Pay-as-you-go pricing
Spot Instances

Answer(s): B

Show Answer Next Question

QUESTION: 108

A user wants to allow applications running on an Amazon EC2 instance to make calls to other AWS services. The access granted must be secure.
Which AWS service or feature should be used?

Security groups
AWS Firewall Manager
IAM roles
IAM user SSH keys

Answer(s): C

Show Answer Next Question

Free Amazon CLF-C01 Exam Braindumps (page: 28)

QUESTION: 105

QUESTION: 106

QUESTION: 107

QUESTION: 108

CLF-C01 Exam Discussions & Posts