Exams / CLF-C02 / Security services / Question 2
CLF-C02 practice question: Security services (2 of 3)
Security and Compliance A free question from our original CLF-C02 practice exam. Try it, then open the answer to see why each option is right or wrong.
A company stores millions of files in Amazon S3 and must find any that contain personal data, such as names, addresses and passport numbers. Which AWS service is designed for this?
Choose one answer.
- AA. Amazon GuardDuty
- BB. Amazon Inspector
- CC. Amazon Macie
- DD. AWS Shield
Show the answer and explanation
Answer: C
- A. Wrong: GuardDuty detects threats such as compromised credentials and unusual activity. It does not inspect file contents for personal data.
- B. Wrong: Inspector scans workloads for software vulnerabilities, not data stored in S3.
- C. Right: Correct. Macie uses machine learning and pattern matching to discover sensitive data such as personally identifiable information (PII) in S3.
- D. Wrong: Shield protects applications against distributed denial of service (DDoS) attacks. It does not look at stored data.
Explanation
Amazon Macie is a data security service for Amazon S3. It discovers sensitive data such as PII using managed and custom data identifiers, and it also evaluates bucket security, for example flagging buckets that become publicly accessible.
Study
Keep practising
Answer questions with a score at the end, or practise just this topic with the explanation after each one. No sign-up needed.