What is the purpose of a Service Control Policy (SCP) in AWS Organizations?

To set permission boundaries that restrict the maximum permissions for accounts in the organization

To encrypt data stored in S3 buckets

To log all API activity across the organization

To provide temporary credentials for users in the organization

What is the primary purpose of an IAM role?

To monitor API activity in your account

To store encrypted passwords for database users

To provide temporary credentials for entities that need access to AWS resources

To create a virtual private network connection to AWS

AWSCertified Cloud Practitioner

Domain 2Objective 2

Task Statement 2.2: Understand AWS Cloud Security, Governance, and Compliance Concepts. CLF-C02 Practice Questions (Page 3)

Part of the Security and Compliance domain, which makes up ~24% of our current practice bank. AWS does not publish an official question count, but from its 90-minute exam (~35–60 total, ~8–14 in this domain), expect 2–4 from this objective — we provide 34 practice questions to prepare you well beyond it. (estimate)

34questions here

7free pages

22concepts

22 Concepts in This Objective

AWS Shared Responsibility Model
AWS Compliance Programs and Certifications
AWS Artifact
AWS Config
AWS CloudTrail
AWS Audit Manager
AWS Security Hub
AWS GuardDuty
AWS Identity and Access Management (IAM)
AWS Organizations and Service Control Policies (SCPs)
AWS Key Management Service (KMS)
AWS CloudHSM
AWS WAF
AWS Shield
AWS Inspector
AWS Macie
AWS Certificate Manager
AWS Secrets Manager
AWS Systems Manager
AWS Trusted Advisor
AWS Well-Architected Framework Security Pillar
AWS Cloud Compliance and Governance Best Practices

Questions 11–15

11foundation · easy
Which AWS service provides operational visibility and control, including patch management and compliance scanning?
Select an answer first
12foundation · easy
Which AWS service aggregates and prioritizes security findings from multiple AWS accounts and services?
Select an answer first
13foundation · easy
What is the purpose of a Service Control Policy (SCP) in AWS Organizations?
Select an answer first
14foundation · easy
A company wants to enable encryption on an S3 bucket using a key that they can rotate and manage themselves. Which AWS service should they use?
Select an answer first
15foundation · easy
What is the primary purpose of an IAM role?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CLF-C02

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by AWS. “CLF-C02” is a trademark of its owner, used for identification only.

Task Statement 2.2: Understand AWS Cloud Security, Governance, and Compliance Concepts. CLF-C02 Practice Questions (Page 3)

Questions 11–15

Which AWS service provides operational visibility and control, including patch management and compliance scanning?

Which AWS service aggregates and prioritizes security findings from multiple AWS accounts and services?

What is the purpose of a Service Control Policy (SCP) in AWS Organizations?

A company wants to enable encryption on an S3 bucket using a key that they can rotate and manage themselves. Which AWS service should they use?

What is the primary purpose of an IAM role?

Keep studying — Security and Compliance