Which of the following is an example of a second authentication factor used in MFA?

A one-time code generated by a hardware device or mobile app

A company has a policy that all IAM users must have a specific set of permissions for Amazon S3. The security team wants to ensure that these permissions are always applied to new users when they are created. What is the MOST efficient way to achieve this?

Attach the S3 policy to each new user individually when they are created.

Use an SCP to apply the S3 policy to all users in the account.

Create an IAM group with the S3 policy and add all new users to this group.

Create an IAM role with the S3 policy and have each new user assume it.

According to the AWS shared responsibility model, which of the following is the customer's responsibility?

Replacing failed hardware in AWS data centers

Managing IAM users, groups, roles, and policies

Securing the physical infrastructure of AWS data centers

Patching the hypervisor that runs EC2 instances

What is a common use case for an IAM role in a cross-account access scenario?

Defining a password policy for all IAM users in an account

Allowing a user from one AWS account to access resources in another AWS account by assuming a role

Storing long-term access keys for a third-party application

Creating a new AWS account for a different business unit

A developer has an IAM access key that was accidentally exposed in a public code repository. The security team needs to respond immediately. What is the FIRST action the security team should take?

Change the IAM user's password.

Deactivate the access key immediately.

Rotate the access key by creating a new one and updating the developer's scripts.

Delete the IAM user associated with the access key.

AWSCertified Cloud Practitioner

Domain 2Objective 3

Task Statement 2.3: Identify AWS Access Management Capabilities. CLF-C02 Practice Questions (Page 2)

Part of the Security and Compliance domain, which makes up ~24% of our current practice bank. AWS does not publish an official question count, but from its 90-minute exam (~35–60 total, ~8–14 in this domain), expect 2–4 from this objective — we provide 28 practice questions to prepare you well beyond it. (estimate)

28questions here

6free pages

8concepts

Questions 6–10

6foundation · easy
Which of the following is an example of a second authentication factor used in MFA?
Select an answer first
7application · medium
A company has a policy that all IAM users must have a specific set of permissions for Amazon S3. The security team wants to ensure that these permissions are always applied to new users when they are created. What is the MOST efficient way to achieve this?
Select an answer first
8foundation · easy
According to the AWS shared responsibility model, which of the following is the customer's responsibility?
Select an answer first
9foundation · easy
What is a common use case for an IAM role in a cross-account access scenario?
Select an answer first
10application · medium
A developer has an IAM access key that was accidentally exposed in a public code repository. The security team needs to respond immediately. What is the FIRST action the security team should take?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CLF-C02

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by AWS. “CLF-C02” is a trademark of its owner, used for identification only.