AWS Cloud Practitioner Security and Compliance Practice Questions
AWS Certified Cloud Practitioner (CLF-C02) · Domain 2 of 4 · 30% of the exam
65 questions in 90 minutes, multiple choice and multiple response, drawn in the official share for each CLF-C02 domain, with a score for every domain and a note on every answer.
Free Security and Compliance drillA website needs a free public TLS certificate that renews automatically for use with a load balancer. Which service provides it?
Security and Compliance on the CLF-C02 exam
Security and Compliance is 30% of CLF-C02 (about 19 of our 65-question mock), the second-largest domain.
- Share of the exam
- 30% of CLF-C02; about 19 of the 65 questions on our mock
- Our drill
- 10 questions from 48 Security and Compliance questions, untimed, a note on every option; one free attempt, unlimited with a pass
What Security and Compliance questions test
- The shared responsibility model: security "of" the cloud (AWS) vs "in" the cloud (you), and how the split shifts between EC2, RDS and Lambda
- Compliance and governance: AWS Artifact for reports, CloudWatch for monitoring, CloudTrail and Config for auditing, encryption in transit and at rest
- IAM users, groups, roles and policies, least privilege, MFA, IAM Identity Center, federation, access keys and Secrets Manager, and tasks only the root user can do
- Security services: WAF, Firewall Manager, Shield, GuardDuty, Inspector, Security Hub, Macie, Detective, KMS, Trusted Advisor, and third-party tools in AWS Marketplace
Sit the full exam under the real clock
65 questions in 90 minutes, multiple choice and multiple response, drawn in the official share for each CLF-C02 domain, with a score for every domain and a note on every answer.
Free Security and Compliance drillHow to study it
- For each service you meet, ask whether AWS or the customer patches the operating system
- Separate the auditing trio: CloudTrail records who did what, Config records how resources are configured over time, CloudWatch records metrics and logs
- Root user: lock it away with MFA and use it only for the few tasks that need it
Common questions
Who patches the guest operating system on EC2?
The customer. AWS patches the host and the virtualization layer; on managed services such as RDS, AWS also patches the database engine and its operating system.
Where do I find AWS compliance reports such as SOC or ISO?
In AWS Artifact, the self-service portal for AWS compliance reports and agreements.
65 questions in 90 minutes, multiple choice and multiple response, drawn in the official share for each CLF-C02 domain, with a score for every domain and a note on every answer.
Free Security and Compliance drillMore AWS Cloud Practitioner practice
Sources
Our AWS Cloud Practitioner questions are original practice questions written to the published CLF-C02 exam guide, not real exam questions. Independent practice, not affiliated with or endorsed by Amazon Web Services. AWS and AWS Certified Cloud Practitioner are trademarks of Amazon.com, Inc. or its affiliates.