Exams / CLF-C02 / Access keys and secrets / Question 1
CLF-C02 practice question: Access keys and secrets
Security and Compliance A free question from our original CLF-C02 practice exam. Try it, then open the answer to see why each option is right or wrong.
A development team wants to store application configuration values, such as feature flags, approved AMI IDs and service endpoint names, in a central hierarchy such as /prod/app/. The values are not secret, do not need rotation, and the team wants to avoid extra cost. Which service is the best fit?
Choose one answer.
- AA. AWS Systems Manager Parameter Store, using standard parameters
- BB. AWS Secrets Manager, with automatic rotation turned on
- CC. AWS Key Management Service (AWS KMS)
- DD. AWS Artifact
Show the answer and explanation
Answer: A
- A. Right: Correct. Parameter Store holds configuration data in hierarchies, and standard parameters have no additional charge.
- B. Wrong: Secrets Manager is built for secrets that need rotation and charges per secret. It is more than these non-secret values need.
- C. Wrong: AWS KMS manages encryption keys. It is not a store for configuration values.
- D. Wrong: AWS Artifact provides AWS compliance reports and agreements. It does not store application settings.
Explanation
Parameter Store, part of AWS Systems Manager, stores configuration data and secrets as named parameters that can be organised in hierarchies and encrypted with KMS when needed. Standard parameters carry no additional charge. For secrets such as database passwords that should be rotated automatically, AWS recommends AWS Secrets Manager instead.
Study
Keep practising
Answer questions with a score at the end, or practise just this topic with the explanation after each one. No sign-up needed.