ExamPark
Course menuCLF-C02

Exams / CLF-C02 / Access keys and secrets / Question 1

CLF-C02 practice question: Access keys and secrets

Security and Compliance A free question from our original CLF-C02 practice exam. Try it, then open the answer to see why each option is right or wrong.

Last verified against current AWS documentation ·How we write our questions

A development team wants one central place for non-secret configuration values, such as feature flags, approved AMI IDs and endpoint names.

It wants the values in a hierarchy such as /prod/app/, with no rotation and no additional charge.

Which option should it use?

Choose one answer.

  1. A. AWS Systems Manager Parameter Store, using standard parameters
  2. B. AWS Secrets Manager, with automatic rotation turned on for every value
  3. C. AWS Key Management Service (AWS KMS) keys, with one key alias per setting
  4. D. Environment variables set on each EC2 instance, with the values listed in a shared spreadsheet
Show the answer and explanation

Answer: A

  • A. Right: Correct. Parameter Store organizes configuration values in hierarchies such as /prod/app/, and standard parameters have no additional charge. That suits values that are not secret and do not need rotation. Learn more: AWS Systems Manager Parameter Store (opens in a new tab)
  • B. Wrong: Secrets Manager is built for secrets such as database credentials that need rotation. Turning rotation on for values that never change adds work with no benefit.
  • C. Wrong: KMS creates and controls encryption keys. It does not store configuration values, so key aliases cannot hold the settings.
  • D. Wrong: This works on one server, but the values live on each instance and in a spreadsheet. They are not a central, hierarchical store.

Explanation

AWS Systems Manager Parameter Store keeps configuration data and secrets as named parameters, which can be grouped in hierarchies such as /prod/app/. Standard parameters have no additional charge. Secrets Manager suits secrets that need rotation, and KMS manages keys rather than settings, so neither fits this need.

Study

Keep practicing

Answer questions with a score at the end, or practice just this topic with the explanation after each one. No sign-up needed.

Take the free CLF-C02 practice examPractice Access keys and secretsAll Access keys and secrets questions

Want more on Access keys and secrets? The 5 full-length practice sets have 9 more Access keys and secrets questions, 325 in all, none of them in the free exam. One payment of $14.99, no subscription. See the practice sets