Cert Master

CLF-C02 Domain 2: Security and Compliance

Which service aggregates security alerts from multiple AWS accounts?

Multiple choice — select one answer

Answer choices

  1. a. Security in the cloud (customer responsibility), without security or identity team coordination per policy.
  2. b. AWS Security Hub
  3. c. AWS STS (Security Token Service), using shared credentials instead of individual accountability.
  4. d. Security group, while leaving refresh tokens and OAuth consent grants active pending user callback

Architectural breakdown & explanation

Security Hub collects findings from GuardDuty, Inspector, Macie, and partner tools.

Correct answer(s): b. AWS Security Hub

Exam domain: Domain 2: Security and Compliance (30% weight on the official guide).

Official documentation & study links

Practice this certification

This page is one question from the AWS Certified Cloud Practitioner bank. Run a full timed practice exam with domain-weighted random questions in your browser.

Start practice exam View exam overview All certifications