nerdexam
Amazon

CLF-C02 · Question #767

An auditor is preparing for an annual security audit. The auditor requests certification details for a company's AWS hosted resources across multiple Availability Zones in the us-east-1 Region. How sh

The correct answer is D. Use AWS Artifact to download the applicable report for AWS security controls. Provide the report. AWS Artifact provides on-demand access to AWS compliance and security certification reports (such as SOC, ISO, PCI) that the company can download and give to the auditor.

Submitted by jordan8· Mar 6, 2026Security and Compliance

Question

An auditor is preparing for an annual security audit. The auditor requests certification details for a company's AWS hosted resources across multiple Availability Zones in the us-east-1 Region. How should the company respond to the auditor's request?

Options

  • AOpen an AWS Support ticket to request that the AWS technical account manager (TAM) respond
  • BOpen an AWS Support ticket to request that the auditor receive approval to conduct an onsite
  • CExplain to the auditor that AWS does not need to be audited because the company's application
  • DUse AWS Artifact to download the applicable report for AWS security controls. Provide the report

How the community answered

(30 responses)
  • A
    3% (1)
  • B
    3% (1)
  • D
    93% (28)

Explanation

AWS Artifact provides on-demand access to AWS compliance and security certification reports (such as SOC, ISO, PCI) that the company can download and give to the auditor.

Community Discussion

No community discussion yet for this question.

Full CLF-C02 Practice