What You'll Be Tested On
- AWS shared responsibility model and how it changes by service type
- IAM users, groups, roles, policies, MFA, root account protection, and least privilege
- Security and compliance services such as AWS Artifact, KMS, Shield, WAF, GuardDuty, Inspector, Macie, and Security Hub
- Account governance with AWS Organizations, service control policies, and identity federation
- Audit and monitoring concepts with CloudTrail, CloudWatch, and AWS Config
Key AWS Services in This Domain
Exam Tips for Domain 2
For foundational security questions, first decide whether the responsibility belongs to AWS or the customer.
Root user security is a favorite exam theme: enable MFA and avoid daily use.
Remember that IAM is global and security groups are stateful.
AWS Artifact is for compliance reports and agreements, not runtime threat detection.
Practice Domain 2 Questions
Test your knowledge of Security and Compliance with practice questions from our CLF-C02 question bank.
Start Practice Quiz →