CLF-C02 Security & Compliance in the Cloud

Question 1

What is the shared responsibility model in AWS?

Accepted Answer

AWS and the customer share different responsibilities based on services used

Answer

The AWS Shared Responsibility Model defines security responsibilities between AWS and the customer. AWS is responsible for the security *of* the cloud, meaning the underlying infrastructure, while the customer is responsible for security *in* the cloud, which includes their data, applications, operating systems, and network configurations. This division ensures clarity and accountability for different aspects of cloud security.

Question 2

Which AWS service helps you manage access to AWS resources?

Accepted Answer

AWS IAM

Answer

AWS Identity and Access Management (IAM) is the service specifically designed to help you securely manage access to AWS services and resources. It allows you to create and manage AWS users and groups, and use permissions to allow or deny their access to specific AWS resources. This ensures that only authorized individuals and services can interact with your cloud environment.

Question 3

What does AWS Shield protect against?

Accepted Answer

DDoS attacks

Answer

AWS Shield is a managed Distributed Denial of Service (DDoS) protection service that safeguards applications running on AWS. It provides always-on detection and automatic inline mitigations that minimize application downtime and latency. AWS Shield offers two tiers: Standard, which is automatically included for all AWS customers, and Advanced, which provides enhanced protection and cost benefits.

Question 4

Which AWS service enables logging and monitoring?

Accepted Answer

AWS CloudTrail

Answer

AWS CloudTrail is an AWS service that enables governance, compliance, operational auditing, and risk auditing of your AWS account. It records API calls and related events made by users, roles, or AWS services in your account and delivers log files to an Amazon S3 bucket. This allows you to track actions taken in your AWS environment, providing a detailed history for security analysis and troubleshooting.

Question 5

How does AWS support compliance?

Accepted Answer

Through compliance programs and certifications

Answer

AWS supports compliance by adhering to numerous global, industry, and regulatory compliance programs and certifications. AWS regularly undergoes third-party audits to ensure its infrastructure and services meet stringent security and compliance standards. This commitment helps customers meet their own compliance obligations by building on a secure and compliant cloud platform.

(CLF-C02) AWS Certified Cloud Practitioner Practice Test

(CLF-C02) AWS Certified Cloud Practitioner Practice Test

CLF-C02 Security & Compliance in the Cloud