Cert Master

CLF-C02 Domain 2: Security and Compliance

Amazon Macie helps discover and protect:

Multiple choice — select one answer

Answer choices

  1. a. Amazon Detective, using password reset alone and deferring session revocation until the next business day
  2. b. S3 server-side encryption with KMS or S3-managed keys, without security or identity team coordination per policy.
  3. c. Sensitive data in Amazon S3
  4. d. Security in the cloud (customer responsibility), using shared credentials instead of individual accountability.

Architectural breakdown & explanation

Macie uses machine learning to find sensitive data such as PII in S3.

Correct answer(s): c. Sensitive data in Amazon S3

Exam domain: Domain 2: Security and Compliance (30% weight on the official guide).

Official documentation & study links

Practice this certification

This page is one question from the AWS Certified Cloud Practitioner bank. Run a full timed practice exam with domain-weighted random questions in your browser.

Start practice exam View exam overview All certifications