Cert Master

CLF-C02 Domain 2: Security and Compliance

Which AWS service provides DDoS protection and web application firewall capabilities?

Multiple choice — select one answer

Answer choices

  1. a. Creating and managing encryption keys, using shared credentials instead of individual accountability.
  2. b. Rotate, manage, and retrieve secrets, using shared credentials instead of individual accountability.
  3. c. AWS WAF and AWS Shield
  4. d. AWS Shield Standard, using password reset alone and deferring session revocation until the next business day

Architectural breakdown & explanation

AWS WAF filters HTTP/S requests; Shield provides DDoS mitigation.

Correct answer(s): c. AWS WAF and AWS Shield

Exam domain: Domain 2: Security and Compliance (30% weight on the official guide).

Official documentation & study links

Practice this certification

This page is one question from the AWS Certified Cloud Practitioner bank. Run a full timed practice exam with domain-weighted random questions in your browser.

Start practice exam View exam overview All certifications