To install a pci-compliant workload on aws, which of the following tasks is required?

Level 24

Level 25

Questions 480-510


18 words 0 ignored

Ignore words

Check the boxes below to ignore/unignore words, then click save at the bottom. Ignored words will never appear in any learning session.

All None

Ignore?

Which AWS service can be used to track resource changes and establish compliance?

A user has underutilized on-premises resources. Which AWS Cloud concept can BEST address this issue?

A user has a stateful workload that will run on Amazon EC2 for the next 3 years. What is the MOST cost-effective pricing model for this workload?

A cloud practitioner needs an Amazon EC2 instance to launch and run for 7 hours without interruptions. What is the most suitable and cost-effective option for this task?

Improving security by proactively monitoring the AWS environment,Implementing enforced tagging across AWS resources

Which of the following are benefits of using AWS Trusted Advisor? (Choose two.)

Grant the developer access to only the AWS resources needed to perform the job.Ensure the account password policy requires a minimum length.

A developer has been hired by a large company and needs AWS credentials. Which are security best practices that should be followed? (Choose two.)

Which AWS storage service is designed to transfer petabytes of data in and out of the cloud?

Which service provides a user the ability to warehouse data in the AWS Cloud?

Maintaining physical and environmental controls

A user is planning to migrate an application workload to the AWS Cloud. Which control becomes the responsibility of AWS once the migration is complete?

AWS Elastic Beanstalk,AWS OpsWorks

Which services can be used to deploy applications on AWS? (Choose two.)

Which AWS service can be used to provide an on-demand, cloud-based contact center?

What tool enables customers without an AWS account to estimate costs for almost all AWS services?

Which component must be attached to a VPC to enable inbound Internet access?

Partial Upfront Reserved Instance

Which pricing model would result in maximum Amazon Elastic Compute Cloud (Amazon EC2) savings for a database server that must be online for one year?

Migrate to Amazon RDS and enable Multi-AZ

A company has a MySQL database running on a single Amazon EC2 instance. The company now requires higher availability in the event of an outage. Which set of tasks would meet this requirement?

Using an AWS IAM user policy

A company wants to ensure that AWS Management Console users are meeting password complexity requirements. How can the company configure password complexity?

Patching guest OS and applications

Under the AWS shared responsibility model, which of the following is the customer’s responsibility?

Use an AWS service that is in scope for PCI compliance and apply PCI controls at the application layer

Which of the following tasks is required to deploy a PCI-compliant workload on AWS?

The latest Amazon Web Services CLF-C01 AWS Certified Cloud Practitioner certification actual real practice exam question and answer (Q&A) dumps are available free, which are helpful for you to pass the Amazon Web Services CLF-C01 AWS Certified Cloud Practitioner exam and earn Amazon Web Services CLF-C01 AWS Certified Cloud Practitioner certification.

Exam Question 451

Which AWS service can be used to track resource changes and establish compliance?

A. Amazon CloudWatch
B. AWS Config
C. AWS CloudTrail
D. AWS Trusted Advisor

Correct Answer:
B. AWS Config

Exam Question 452

A user has underutilized on-premises resources.
Which AWS Cloud concept can BEST address this issue?

A. High availability
B. Elasticity
C. Security
D. Loose coupling

Correct Answer:
B. Elasticity

Exam Question 453

A user is planning to migrate an application workload to the AWS Cloud.
Which control becomes the responsibility of AWS once the migration is complete?

A. Patching the guest operating system
B. Maintaining physical and environmental controls
C. Protecting communications and maintaining zone security
D. Patching specific applications

Correct Answer:
B. Maintaining physical and environmental controls

Exam Question 454

Which AWS service can be used to provide an on-demand, cloud-based contact center?

A. AWS Direct Connect
B. Amazon Connect
C. AWS Support Center
D. AWS Managed Services

Correct Answer:
B. Amazon Connect

Exam Question 455

Which component must be attached to a VPC to enable inbound Internet access?

A. NAT gateway
B. VPC endpoint
C. VPN connection
D. Internet gateway

Correct Answer:
C. VPN connection

Exam Question 456

Which pricing model would result in maximum Amazon Elastic Compute Cloud (Amazon EC2) savings for a database server that must be online for one year?

A. Spot Instance
B. On-Demand Instance
C. Partial Upfront Reserved Instance
D. No Upfront Reserved Instance

Correct Answer:
C. Partial Upfront Reserved Instance

Exam Question 457

Under the AWS shared responsibility model, which of the following is the customer’s responsibility?

A. Patching guest OS and applications
B. Patching and fixing flaws in the infrastructure
C. Physical and environmental controls
D. Configuration of AWS infrastructure devices

Correct Answer:
A. Patching guest OS and applications

Exam Question 458

Which of the following tasks is required to deploy a PCI-compliant workload on AWS?

A. Use any AWS service and implement PCI controls at the application layer
B. Use an AWS service that is in-scope for PCI compliance and raise an AWS support ticket to enable PCI compliance at the application layer
C. Use any AWS service and raise an AWS support ticket to enable PCI compliance on that service
D. Use an AWS service that is in scope for PCI compliance and apply PCI controls at the application layer

Correct Answer:
D. Use an AWS service that is in scope for PCI compliance and apply PCI controls at the application layer

Exam Question 459

Which AWS service can be used to privately store and manage versions of source code?

A. AWS CodeBuild
B. AWS CodeCommit
C. AWS CodePipeline
D. AWS CodeStar

Correct Answer:
B. AWS CodeCommit

Exam Question 460

A company wants to ensure its infrastructure is designed for fault tolerance and business continuity in the event of an environmental disruption.
Which AWS infrastructure component should the company replicate across?

A. Edge locations
B. Availability Zones
C. Regions
D. Amazon Route 53

Correct Answer:
B. Availability Zones

How do I make my AWS PCI compliant?

What are the requirements for PCI DSS compliance?.
Install and maintain a firewall configuration to protect cardholder data..
Do not use vendor-supplied defaults for system passwords and other security parameters. ... .
Protect stored cardholder data..
Encrypt transmission of cardholder data across open, public networks..

What is PCI compliant workload on AWS?

AWS PCI Compliance is an Amazon Web Service (AWS) that is Payment Card Industry (PCI) compliant. PCI applies to all companies that process, transmit, or store cardholder (or sensitive) data of service providers, merchants, processors, or issuers.

Which AWS service can you use to download the AWS PCI report?

The Attestation of Compliance (AOC) that shows AWS PCI compliance status is available through AWS Artifact.

Which AWS service provides a report that enables users to assess AWS infrastructure compliance?

AWS Artifact Reports can be used by all AWS customers to assess and validate the security and compliance of the AWS infrastructure and services that they use.