CLF-C02 Security & Compliance in the Cloud 5

Question 1

Which AWS service allows you to centrally manage AWS WAF rules, Security Groups, and Shield Advanced protections across multiple accounts in an organization?

Accepted Answer

AWS Firewall Manager

Answer

AWS Firewall Manager lets you centrally configure and manage firewall rules, WAF policies, and Shield Advanced protections across all accounts in AWS Organizations.

Question 2

A company wants to verify that their AWS infrastructure changes never violate compliance rules in real time. Which service continuously monitors and records resource configurations?

Accepted Answer

AWS Config

Answer

AWS Config continuously monitors and records AWS resource configurations and evaluates them against desired compliance rules.

Question 3

Which AWS service enables federated identity, allowing users to sign in with corporate credentials (e.g., Active Directory) to access AWS resources?

Accepted Answer

AWS Single Sign-On (IAM Identity Center)

Answer

AWS IAM Identity Center (formerly AWS SSO) enables federated access, allowing users to sign in with their corporate identity provider credentials to access AWS accounts.

Question 4

What does 'encryption at rest' mean in the context of AWS security?

Accepted Answer

Data stored on disk or in a database is encrypted when not actively being used

Answer

Encryption at rest means that data stored on physical media (disks, databases, backups) is encrypted to protect it from unauthorized physical access.

Question 5

Which AWS service provides hardware security modules (HSMs) in the cloud to generate and manage your own encryption keys with exclusive single-tenant access?

Accepted Answer

AWS CloudHSM

Answer

AWS CloudHSM provides dedicated, single-tenant HSM appliances in the cloud, giving customers exclusive control over their cryptographic keys.

(CLF-C02) AWS Certified Cloud Practitioner Practice Test

(CLF-C02) AWS Certified Cloud Practitioner Practice Test

CLF-C02 Security & Compliance in the Cloud 5