What is the primary purpose of a service control policy (SCP) in AWS Organizations?

To automatically patch operating systems in member accounts

To define the maximum permissions that member accounts can grant to their IAM principals

To provide a backup of all data in member accounts

To record all API calls made in member accounts

AWSCertified Cloud Practitioner

Domain 2Objective 4

Task Statement 2.4: Identify Components and Resources for Security. CLF-C02 Practice Questions (Page 4)

Part of the Security and Compliance domain, which makes up ~24% of our current practice bank. AWS does not publish an official question count, but from its 90-minute exam (~35–60 total, ~8–14 in this domain), expect 2–4 from this objective — we provide 35 practice questions to prepare you well beyond it. (estimate)

35questions here

7free pages

14concepts

14 Concepts in This Objective

AWS Shared Responsibility Model
AWS Identity and Access Management (IAM)
AWS Organizations and Service Control Policies (SCPs)
AWS Key Management Service (KMS)
AWS CloudTrail
AWS Config
AWS Shield and AWS WAF
AWS Inspector and GuardDuty
AWS Artifact
AWS Security Hub
AWS Secrets Manager
AWS Certificate Manager (ACM)
AWS Network Security Services
AWS Compliance Programs and Reports

Questions 16–20

16foundation · easy
Which AWS resource acts as a virtual firewall for your EC2 instances, controlling inbound and outbound traffic at the instance level?
Select an answer first
17foundation · easy
Which AWS service provides a managed firewall that can filter traffic at the VPC level, including stateful inspection and intrusion prevention?
Select an answer first
18foundation · easy
Which AWS service automatically scans your EC2 instances for software vulnerabilities and unintended network exposure?
Select an answer first
19foundation · easy
What is the primary purpose of a service control policy (SCP) in AWS Organizations?
Select an answer first
20application · medium
A healthcare company needs to store protected health information (PHI) in Amazon S3. They must ensure that their use of AWS complies with HIPAA. Which AWS service or program should they use to verify that AWS supports HIPAA compliance?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CLF-C02

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by AWS. “CLF-C02” is a trademark of its owner, used for identification only.

Task Statement 2.4: Identify Components and Resources for Security. CLF-C02 Practice Questions (Page 4)

Questions 16–20

Which AWS resource acts as a virtual firewall for your EC2 instances, controlling inbound and outbound traffic at the instance level?

Which AWS service provides a managed firewall that can filter traffic at the VPC level, including stateful inspection and intrusion prevention?

Which AWS service automatically scans your EC2 instances for software vulnerabilities and unintended network exposure?

What is the primary purpose of a service control policy (SCP) in AWS Organizations?

A healthcare company needs to store protected health information (PHI) in Amazon S3. They must ensure that their use of AWS complies with HIPAA. Which AWS service or program should they use to verify that AWS supports HIPAA compliance?

Keep studying — Security and Compliance