CLF-C02 Security & Compliance in the Cloud 3

Question 1

Which encryption option allows Amazon S3 to manage the encryption keys on behalf of the customer?

Accepted Answer

SSE-S3

Answer

SSE-S3 (Server-Side Encryption with S3-managed keys) lets S3 handle key management entirely on the customer's behalf.

Question 2

A developer accidentally committed AWS access keys to a public GitHub repository. What is the FIRST action they should take?

Accepted Answer

Rotate or deactivate the compromised access keys immediately

Answer

Immediately rotating or deactivating the exposed access keys prevents unauthorized use before any damage can be done.

Question 3

Which AWS service enables you to evaluate the security and compliance of your EC2 instances against predefined rules and best practices?

Accepted Answer

Amazon Inspector

Answer

Amazon Inspector automatically assesses EC2 instances and container images for software vulnerabilities and unintended network exposure.

Question 4

What is the primary purpose of AWS Artifact?

Accepted Answer

To provide on-demand access to AWS compliance reports and agreements

Answer

AWS Artifact is a self-service portal for on-demand access to AWS security and compliance reports such as SOC, PCI, and ISO certifications.

Question 5

Which principle states that users and systems should be granted only the minimum permissions necessary to perform their required tasks?

Accepted Answer

Least privilege

Answer

The principle of least privilege means granting only the permissions needed to perform a specific task, reducing the attack surface.

(CLF-C02) AWS Certified Cloud Practitioner Practice Test