CLF-C02 Security & Compliance in the Cloud

Question 1

What is the shared responsibility model in AWS?

Accepted Answer

AWS and the customer share different responsibilities based on services used

Answer

AWS is responsible for securing all customer data.

Answer

The customer is responsible for everything in the cloud.

Answer

Security is managed by third-party services only.

Question 2

Which AWS service helps you manage access to AWS resources?

Accepted Answer

AWS IAM

Answer

Amazon S3

Answer

AWS CloudWatch

Answer

Amazon EC2

Question 3

What does AWS Shield protect against?

Accepted Answer

DDoS attacks

Answer

Internal data leaks

Answer

Phishing emails

Answer

Lost passwords

Question 4

Which AWS service enables logging and monitoring?

Accepted Answer

AWS CloudTrail

Answer

Amazon SNS

Answer

AWS Lambda

Answer

AWS RDS

Question 5

How does AWS support compliance?

Accepted Answer

Through compliance programs and certifications

Answer

By offering only one level of security.

Answer

Through AWS documentation.

Answer

By limiting access to AWS services.

Question 6

What does MFA stand for in cloud security?

Accepted Answer

Multi-Factor Authentication

Answer

Multiple File Access

Answer

Mobile File Authorization

Answer

Managed File Access

Question 7

Which AWS feature helps enforce security policies?

Accepted Answer

SCPs in AWS Organizations

Answer

EC2 Auto Scaling

Answer

AWS Elastic Beanstalk

Answer

S3 Replication

Question 8

Which of the following is a security best practice in AWS?

Accepted Answer

Use least privilege principles

Answer

Allow full admin access to everyone

Answer

Grant access to all services by default

Answer

Avoid using IAM roles

Question 9

Which AWS service allows centralized management of security policies?

Accepted Answer

AWS Organizations

Answer

Amazon Aurora

Answer

Amazon CloudFront

Answer

AWS WAF