Which AWS service allows you to centrally manage multiple AWS accounts and apply service control policies (SCPs) to enforce permission guardrails?

AWS Identity and Access Management (IAM)

Which AWS service provisions and manages SSL/TLS certificates for use with your AWS resources?

AWS Key Management Service (KMS)

AWS Identity and Access Management (IAM)

What is the function of an IAM policy?

It is a physical device used for multi-factor authentication

It is a set of credentials used to authenticate to AWS

It provides a way to group multiple IAM users together

It defines the permissions that are granted to an IAM identity or resource

Under the AWS Shared Responsibility Model, which of the following is the customer responsible for?

Replacing failed hardware in AWS availability zones

Patching the operating system of an Amazon EC2 instance

Physical security of AWS data centers

Management of the AWS global network infrastructure

AWSCertified Cloud Practitioner

Domain 2Objective 4

Task Statement 2.4: Identify Components and Resources for Security. CLF-C02 Practice Questions (Page 5)

Part of the Security and Compliance domain, which makes up ~24% of our current practice bank. AWS does not publish an official question count, but from its 90-minute exam (~35–60 total, ~8–14 in this domain), expect 2–4 from this objective — we provide 35 practice questions to prepare you well beyond it. (estimate)

35questions here

7free pages

14concepts

14 Concepts in This Objective

AWS Shared Responsibility Model
AWS Identity and Access Management (IAM)
AWS Organizations and Service Control Policies (SCPs)
AWS Key Management Service (KMS)
AWS CloudTrail
AWS Config
AWS Shield and AWS WAF
AWS Inspector and GuardDuty
AWS Artifact
AWS Security Hub
AWS Secrets Manager
AWS Certificate Manager (ACM)
AWS Network Security Services
AWS Compliance Programs and Reports

Questions 21–25

21foundation · easy
Which AWS service allows you to centrally manage multiple AWS accounts and apply service control policies (SCPs) to enforce permission guardrails?
Select an answer first
22foundation · easy
Which AWS service provisions and manages SSL/TLS certificates for use with your AWS resources?
Select an answer first
23foundation · easy
Which AWS service continuously monitors and records your AWS resource configurations and allows you to evaluate them against desired configurations?
Select an answer first
24foundation · easy
What is the function of an IAM policy?
Select an answer first
25foundation · easy
Under the AWS Shared Responsibility Model, which of the following is the customer responsible for?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CLF-C02

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by AWS. “CLF-C02” is a trademark of its owner, used for identification only.