A company wants to add rules to control traffic between Amazon EC2 instances in an Amazon VPC.Which AWS service or feature will meet this requirement?
Answer(s): A
Security groups act as stateful virtual firewalls for Amazon EC2 instances. They control allowed inbound and outbound traffic between instances and other network resources in a VPC.
Which AWS service or feature should a company use between two microservices to ensure that messages are sent and received in exact order?
Answer(s): D
Amazon SQS FIFO queues are specifically designed to ensure that messages are processed in the exact order in which they are sent. This feature is critical for use cases where maintaining the sequence of events is important.FIFO (First-In-First-Out) queues also prevent duplicate messages, ensuring that each message is delivered and processed exactly once.
A company needs to control network traffic at the subnet level in a VPC.According to the AWS shared responsibility model, which task is the company's responsibility?
Customers are responsible for configuring security controls within their VPCs, including network ACLs at the subnet level. Network ACLs control inbound and outbound traffic for subnets and are part of the customer’s responsibility for security in the cloud.
Which of the following are characteristics of AWS WAF? (Choose two.)
Answer(s): C,D
AWS WAF allows users to create rules that inspect HTTP requests and block traffic based on specific characteristics such as HTTP headers.AWS WAF can protect web applications that are not hosted on AWS when it is used with Amazon CloudFront as the content delivery layer.
A company needs to identify personally identifiable information (PII), such as credit card numbers, from data that is stored in Amazon S3.Which AWS service should the company use to meet this requirement?
Amazon Macie is a security service that uses machine learning to automatically discover, classify, and protect personally identifiable information (PII) and other sensitive data in Amazon S3. It can identify PII such as credit card numbers, social security numbers, and other sensitive information, helping the company comply with data privacy and security regulations.
Post your Comments and Discuss Amazon CLF-C02 exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the CLF-C02 content, but please register or login to continue.