Identify components and resources for security.
20 practice questions under this official exam objective (CLF-C02), each with the answer key, an option-by-option explanation and instant feedback.
Questions under this objective
20 total · page 1 of 1Which AWS Tool Acts as a Firewall for a VPC Subnet?
Network ACLs are the stateless, subnet-level firewall layer in Amazon VPC that evaluates numbered allow and deny rules for traffic entering and leavin
Which AWS resource answers frequently asked security questions?
AWS Knowledge Center is the official AWS resource that publishes articles and FAQs answering the security questions customers ask most often. This pag
Which Task Can Security Groups Perform for Amazon EC2?
Security groups are stateful virtual firewalls that filter Amazon EC2 instance traffic by protocol, port, and source, so they can allow access through
AWS WAF Deployment Targets: ALB vs Other Services
Identifies Application Load Balancer as a valid AWS WAF integration point for filtering HTTP traffic, distinguishing it from non-compatible services l
Launching Third-Party IDS in AWS
AWS Marketplace is the correct service for procuring and deploying third-party software, such as intrusion detection systems, directly within an AWS a
Which AWS service scans EC2 instances for vulnerabilities using assessment templates?
Amazon Inspector is the AWS vulnerability management service that assesses Amazon EC2 instances, container images, and Lambda functions against predef
S3 Glacier Vault Lock for WORM Compliance
This question tests the identification of Amazon S3 features that enforce Write-Once, Read-Many (WORM) compliance. S3 Glacier Vault Lock is the correc
AWS Service for Managing Encryption Keys
AWS CloudHSM is the correct service for managing encryption keys in the cloud, providing dedicated hardware security modules. This page establishes wh
Which AWS Service Records and Evaluates Configuration Changes?
AWS Config is the dedicated service for recording, evaluating, and remediating AWS resource configuration changes. This guide establishes why AWS Conf
How to Connect AWS Services and VPCs Without Public Internet Exposure?
AWS PrivateLink enables private connectivity between VPCs, supported AWS services, and on-premises networks without routing traffic over the public in
AWS Shield for Network Layer DDoS Protection
AWS Shield is the managed Distributed Denial of Service (DDoS) protection service designed to safeguard AWS resources and applications running on AWS
AWS Service to Identify and Protect Sensitive Data in S3
Amazon Macie is the correct AWS managed service for identifying and protecting sensitive data stored in Amazon S3 using machine learning.
Which AWS Service Finds EC2 Security Vulnerabilities?
Amazon Inspector is the AWS automated vulnerability management service that continuously scans Amazon EC2 instances (as well as ECR container images a
Private S3 Access from EC2 Without Internet
This AWS Cloud Practitioner question tests how an Amazon EC2 instance reaches an Amazon S3 bucket without traversing the public internet. The page est
AWS Service for Encrypting Data at Rest
This page explains which AWS service provides encryption at rest by integrating directly with other AWS services. AWS Key Management Service (AWS KMS)
What Is the Primary Use Case for Amazon GuardDuty?
Amazon GuardDuty is a managed threat detection service that continuously monitors AWS accounts, workloads, and data sources for malicious or unauthori
AWS Threat Detection Service for Malicious Activity
Amazon GuardDuty is the correct AWS service for continuous threat detection of malicious activity and unauthorized behavior across accounts, workloads
AWS WAF for CloudFront HTTP/HTTPS Monitoring
AWS WAF is the correct service to monitor and block malicious HTTP/HTTPS requests at Amazon CloudFront distributions. This page explains why AWS WAF i
Which AWS Service Manages Encryption Keys in the Cloud?
This question asks which AWS service a company can use to manage encryption keys in the cloud, and the answer is AWS CloudHSM. The page explains why a
AWS Secrets Manager for Secure Credential Storage
This question tests the identification of AWS Secrets Manager as the service designed to securely store, manage, and retrieve encrypted credentials li