ExamPark
Course menuCLF-C02

Exams / CLF-C02 / Security services / Question 2

CLF-C02 practice question: Security services (2 of 3)

Security and Compliance A free question from our original CLF-C02 practice exam. Try it, then open the answer to see why each option is right or wrong.

Last verified against current AWS documentation ·How we write our questions

A retailer has kept CSV exports in Amazon S3 for several years.

Some files contain customers' names, email addresses and national ID numbers, and the compliance team needs to find every bucket and object that holds this personal data.

Which AWS service is designed for this?

Choose one answer.

  1. A. Amazon GuardDuty, which detects threats such as compromised credentials
  2. B. Amazon Inspector, which scans EC2 and container images for vulnerabilities
  3. C. Amazon Macie, which discovers sensitive data such as PII in Amazon S3
  4. D. AWS Shield, which protects applications against distributed denial of service attacks
Show the answer and explanation

Answer: C

  • A. Wrong: GuardDuty analyzes account activity and logs to detect threats. It does not inspect the contents of S3 objects for personal data.
  • B. Wrong: Inspector scans workloads for software vulnerabilities, not the contents of files stored in S3. It cannot tell whether a file holds personal data, so it does not meet the requirement.
  • C. Right: Correct. Macie uses machine learning and pattern matching to discover sensitive data, including personally identifiable information (PII), in S3 buckets. Learn more: What is Amazon Macie? (opens in a new tab)
  • D. Wrong: Shield protects applications against DDoS attacks. It does not look at the data stored in the buckets.

Explanation

Amazon Macie is a data security service for Amazon S3. It discovers sensitive data such as PII using managed data identifiers, and it also evaluates bucket security, for example flagging a bucket that becomes publicly accessible.

Study

Keep practicing

Answer questions with a score at the end, or practice just this topic with the explanation after each one. No sign-up needed.

Take the free CLF-C02 practice examPractice Security servicesAll Security services questions

Want more on Security services? The 5 full-length practice sets have 14 more Security services questions, 325 in all, none of them in the free exam. One payment of $14.99, no subscription. See the practice sets