AWSCertified Cloud Practitioner
Domain 2Objective 2
Task Statement 2.2: Understand AWS Cloud Security, Governance, and Compliance Concepts. CLF-C02 Practice Questions (Page 2)
Part of the Security and Compliance domain, which makes up ~24% of our current practice bank. AWS does not publish an official question count, but from its 90-minute exam (~35–60 total, ~8–14 in this domain), expect 2–4 from this objective — we provide 34 practice questions to prepare you well beyond it. (estimate)
34questions here
7free pages
22concepts
Questions 6–10
- 6
A company's security team is concerned about potential malicious activity, such as cryptocurrency mining on their EC2 instances and unusual API calls from a compromised IAM user. They need a service that uses machine learning and threat intelligence to continuously monitor for these types of threats. Which AWS service should they enable?
Select an answer first - 7
A large enterprise has multiple AWS accounts for different business units. The central security team wants to enforce a policy that prevents any user in any account from deleting an S3 bucket that has versioning enabled. They want to apply this restriction centrally, so that even account administrators cannot override it. Which AWS feature should they use?
Select an answer first - 8
Which AWS service can be used to centrally manage and enforce security policies across multiple accounts?
Select an answer first - 9
Which AWS service automates vulnerability assessments for applications and workloads?
Select an answer first - 10
Which of the following is a best practice from the Security Pillar of the AWS Well-Architected Framework?
Select an answer first
Finished these 5 questions?
Review the revealed explanations, or continue through the curriculum.
Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by AWS. “CLF-C02” is a trademark of its owner, used for identification only.