Understand AWS Cloud security, governance, and compliance concepts.
30 practice questions under this official exam objective (CLF-C02), each with the answer key, an option-by-option explanation and instant feedback.
Questions under this objective
30 total · page 1 of 2Which AWS Service Provides a SAML 2.0 SSO Portal for Third-Party Apps?
AWS IAM Identity Center (formerly AWS Single Sign-On) is the workforce single sign-on service that gives users one portal for third-party business app
Which AWS resource answers frequently asked security questions?
AWS Knowledge Center is the official AWS resource that publishes articles and FAQs answering the security questions customers ask most often. This pag
AWS Config Traceability Well-Architected Pillar
Using AWS Config to enable traceability aligns with the Security pillar of the AWS Well-Architected Framework. This page establishes why traceability
Which Well-Architected pillar protects information, systems, and assets?
The AWS Well-Architected Framework Security pillar covers protecting information, systems, and assets through risk assessment and mitigation. This pag
Which AWS tool audits password and access key rotation?
The IAM credential report is the AWS tool that produces an auditable, downloadable CSV of every IAM user's password age, password last-used date, acce
Who Manages Aurora Database and Snapshot Encryption?
Under the AWS shared responsibility model, the customer configures encryption for Amazon Aurora database clusters and snapshots, while AWS secures the
AWS Trusted Advisor and Support Plans for Best Practices
AWS Trusted Advisor provides recommendations across cost, security, performance, fault tolerance, and service quotas. This page confirms that AWS Busi
Which AWS Global Infrastructure Feature Enables Geographic Data Residency?
This question tests whether you can map an AWS global infrastructure feature to a regulatory requirement to host an application in a specific geograph
AWS Service for RSS Feeds on Service Issues
The AWS Health Dashboard is the correct service for subscribing to RSS feeds regarding AWS service issues and maintenance events. This page clarifies
Which AWS service federates a third-party IdP for employee AWS access?
When employees must reach AWS accounts and services with their existing third-party IdP credentials, AWS IAM Identity Center (the successor to AWS SSO
AWS Organizations for Cost Separation and Tracking
This question addresses the optimal strategy for separating and tracking costs across multiple business units on AWS. The correct solution leverages A
Which Task Can Security Groups Perform for Amazon EC2?
Security groups are stateful virtual firewalls that filter Amazon EC2 instance traffic by protocol, port, and source, so they can allow access through
Which AWS service scans EC2 instances for vulnerabilities using assessment templates?
Amazon Inspector is the AWS vulnerability management service that assesses Amazon EC2 instances, container images, and Lambda functions against predef
Which AWS Service Captures Inbound and Outbound VPC Traffic?
VPC Flow Logs capture IP traffic metadata for network interfaces in an Amazon VPC, giving visibility for troubleshooting, security analysis, and compl
Which AWS Service Records and Evaluates Configuration Changes?
AWS Config is the dedicated service for recording, evaluating, and remediating AWS resource configuration changes. This guide establishes why AWS Conf
Accessing AWS SOC Reports with AWS Artifact
AWS Artifact is the dedicated service for on-demand access to AWS compliance reports, including SOC, PCI, and ISO certifications. This page establishe
Which AWS CAF Perspective Organizes a Data Catalog Inventory?
The AWS Cloud Adoption Framework (AWS CAF) Governance perspective owns the data curation capability, which includes collecting, organizing, and enrich
AWS Service for External Auditor Information
This question identifies AWS Config as the correct service for generating audit information. It establishes that AWS Config's ability to record config
AWS Artifact for Compliance Reports and Attestations
AWS Artifact is the dedicated service for on-demand access to AWS security and compliance documentation, including third-party attestations and certif
AWS Managed Services (AMS) Operational Support Scope
This question tests the scope of AWS Managed Services (AMS) operational support, specifically identifying Landing zone and network management as a cor