Free Access to Amazon.CLF-C02.v2024-10-21.q219 with Valid Practice Test (Page 42)

Question 201

Which AWS service is a cloud security posture management (CSPM) service that aggregates alerts from various AWS services and partner products in a standardized format?

A.AWS Security Hub
B.AWS Trusted Advisor
C.Amazon EventBndge
D.Amazon GuardDuty

Question 202

A company has an online shopping website and wants to store customers' credit card data. The company must meet Payment Card Industry (PCI) standards.
Which service can the company use to access AWS compliance documentation?

A.Amazon Cloud Directory
B.AWS Artifact
C.AWS Trusted Advisor
D.Amazon Inspector

Question 203

A developer wants to deploy an application quickly on AWS without manually creating the required resources.
Which AWS service will meet these requirements?

A.Amazon EC2
B.AWS Elastic Beanstalk
C.AWS CodeBuild
D.Amazon Personalize

Question 204

A company wants to use Amazon EC2 instances to run a stateless and restartable process after business hours.
Which AWS service provides DNS resolution?

A.Amazon CloudFront
B.Amazon VPC
C.Amazon Route 53
D.AWS Direct Connect

Question 205

A company is building an application on AWS. The application needs to comply with credit card regulatory requirements. The company needs proof that the AWS services and deployment are in compliance.
Which actions should the company take to meet these requirements? (Select TWO.)

A.Use Amazon Inspector to submit the application for certification.
B.Ensure that the application's underlying hardware components comply with requirements.
C.Use AWS Artifact to access AWS documents about the compliance of the services.
D.Get the compliance of the application certified by a company assessor.
E.Use AWS Security Hub to certify the compliance of the application.

Correct Answer: C,D

Explanation
Using AWS Artifact to access AWS documents about the compliance of the services, and getting the compliance of the application certified by a company assessor are actions that the company should take to meet the requirements of complying with credit card regulatory requirements. AWS Artifact is a service that provides on-demand access to AWS security and compliance reports and select online agreements. Reports available in AWS Artifact include our Service Organization Control (SOC) reports, Payment Card Industry (PCI) reports, and certifications from accreditation bodies across geographies and compliance verticals that validate the implementation and operating effectiveness of AWS security controls. AWS Artifact can help you demonstrate compliance with credit card regulatory requirements by providing you with proof that the AWS services and deployment are in compliance. Getting the compliance of the application certified by a company assessor is an action that the company should take to ensure that the application meets the specific requirements of the credit card industry. A company assessor is an independent third-party entity that is qualified to assess the compliance of the application with the relevant standards and regulations. Using Amazon Inspector to submit the application for certification is not an action that the company should take, because Amazon Inspector is a service that helps you improve the security and compliance of your applications deployed on AWS by automatically assessing them for vulnerabilities and deviations from best practices, but it does not provide certification for the applications. Ensuring that the application's underlying hardware components comply with requirements is not an action that the company should take, because the application is deployed on AWS, and AWS is responsible for the security and compliance of the underlying hardware components. This is part of the shared responsibility model, where AWS is responsible for security of the cloud, and customers are responsible for security in the cloud. Using AWS Security Hub to certify the compliance of the application is not an action that the company should take, because AWS Security Hub is a service that gives you a comprehensive view of your security posture across your AWS accounts and helps you check your environment against security industry standards and best practices, but it does not provide certification for the applications.

Question 201

Question 202

Question 203

Question 204

Question 205

Download PDF File