Cert Master

CLF-C02 Domain 2: Security and Compliance

AWS Shield Standard provides:

Multiple choice — select one answer

Answer choices

  1. a. It adds a layer of protection for the most privileged account, using shared credentials instead of individual accountability.
  2. b. Managed network firewall for VPCs
  3. c. DDoS protection for all AWS customers at no additional charge
  4. d. Rely on DDoS protection for all AWS customers at no additional charge alone while omitting the cross-service integration the workload needs, without security or identity team coordination per policy.

Architectural breakdown & explanation

Shield Standard automatically protects against common network and transport layer DDoS.

Correct answer(s): c. DDoS protection for all AWS customers at no additional charge

Exam domain: Domain 2: Security and Compliance (30% weight on the official guide).

Official documentation & study links

Practice this certification

This page is one question from the AWS Certified Cloud Practitioner bank. Run a full timed practice exam with domain-weighted random questions in your browser.

Start practice exam View exam overview All certifications