Understand AWS Cloud security, governance, and compliance concepts.
30 practice questions under this official exam objective (CLF-C02), each with the answer key, an option-by-option explanation and instant feedback.
Questions under this objective
30 total · page 2 of 2Which AWS Service Finds EC2 Security Vulnerabilities?
Amazon Inspector is the AWS automated vulnerability management service that continuously scans Amazon EC2 instances (as well as ECR container images a
AWS Service for Encrypting Data at Rest
This page explains which AWS service provides encryption at rest by integrating directly with other AWS services. AWS Key Management Service (AWS KMS)
AWS Service for Configuration Recording and Remediation
This question tests the ability to identify AWS services based on compliance requirements for configuration auditing and remediation. AWS Config is th
What Is the Primary Use Case for Amazon GuardDuty?
Amazon GuardDuty is a managed threat detection service that continuously monitors AWS accounts, workloads, and data sources for malicious or unauthori
Obtaining PCI Reports via AWS Artifact
AWS Artifact is the centralized portal for on-demand access to AWS compliance reports, including Payment Card Industry (PCI) attestations of complianc
AWS Service Catalog for IaC Compliance
This question addresses how to enforce compliance on infrastructure as code templates using AWS Service Catalog, which acts as a governance layer for
Which AWS Service Manages Encryption Keys in the Cloud?
This question asks which AWS service a company can use to manage encryption keys in the cloud, and the answer is AWS CloudHSM. The page explains why a
Which AWS Service Governs Who Can Deploy and Manage Resources?
AWS Service Catalog is the centralized AWS service that lets an organization publish an approved portfolio of IT services and control which users can
AWS CloudTrail Purpose and Functionality
This page explains that AWS CloudTrail is designed to record API calls made to AWS services for auditing and governance purposes. It clarifies why rec
Which AWS Service Lets You Grant Permissions to Users as a Group?
AWS Identity and Access Management (IAM) is the service that lets a company organize users into IAM groups and attach permissions to the group rather