Free CLF-C02 Exam Braindumps
AWS Certified Cloud Practitioner CLF-C02 Questions 381–385 (page: 78)

Updated On: 1-Oct-2026

A company runs an ecommerce website that is hosted on AWS. External auditors have requested proof that the AWS services that the company uses are compliant with the Payment Card Industry Data Security
Standard (PCI DSS).
Which AWS service will provide this information?

  1. AWS Certificate Manager (ACM)
  2. AWS Artifact
  3. AWS License Manager
  4. AWS CloudTrail

Answer(s): B

Explanation:

AWS Artifact is a self-service portal that provides access to AWS compliance reports and agreements,
including documentation for standards such as PCI DSS. It enables customers to download audit artifacts and use them as proof of compliance for external auditors.



A company runs applications on Amazon EC2 instances in the AWS Cloud.
According to the AWS shared responsibility model, which task is the company's responsibility?

  1. Maintaining the physical network infrastructure in AWS data centers
  2. Configuring security group rules for the EC2 instances
  3. Protecting the network infrastructure between Availability Zones
  4. Securing the routers and switches in AWS facilities

Answer(s): B

Explanation:

Customers are responsible for security in the cloud, including configuring security groups that control inbound and outbound traffic for their Amazon EC2 instances.



Which task is a shared responsibility between AWS and customers according to the AWS shared responsibility model?

  1. Patch management
  2. Physical infrastructure security
  3. Server-side encryption of application file systems
  4. The configuration of Amazon EC2 instance operating systems

Answer(s): A

Explanation:

Patch management is a shared responsibility. AWS is responsible for patching and maintaining the underlying infrastructure and managed service components, while customers are responsible for patching resources they manage, such as the operating systems and applications running on Amazon EC2 instances.



A company runs an uninterruptible Amazon EC2 workload on AWS 24 hours a day, 7 days a week. The company will require the same instance family and instance type to run the workload for the next 12 months.
Which combination of purchasing options should the company choose to MOST optimize costs? (Choose two.)

  1. Standard Reserved Instance
  2. Convertible Reserved Instance
  3. Compute Savings Plan
  4. Spot Instance
  5. All Upfront payment

Answer(s): A,E

Explanation:


Reference:

https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/instance-purchasing-options.html



A company wants to manage its infrastructure as code (IaC) in the AWS Cloud.
Which AWS service will meet this requirement'?

  1. AWS CloudFormation
  2. AWS Elastic Beanstalk
  3. AWS Glue
  4. AWS Systems Manager

Answer(s): A

Explanation:

AWS CloudFormation enables infrastructure as code by using templates to define, provision, and manage
AWS resources in a consistent, repeatable way.



Viewing page 78 of 201
Viewing questions 386 - 390 out of 999 questions


Post your Comments and Discuss Amazon CLF-C02 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!