Security Flashcards
1
Q
Do Security Group Changes take effect instantly?
yes/no
A
yes
2
Q
Security Group - Inbound traffic is _____ by default
A
blocked
3
Q
Security Group - outbound traffic is _____ by default
A
allowed
4
Q
Which AWS Organisations feature allows creation of guardrails that apply to all accounts in the Org
A
Service Control Policies
5
Q
AWS Service for generating and storing encryption keys
A
AWS KMS
6
Q
AWS Service that provides dedicated hardware, stored on prem, for generating and storing encryption keys
A
Cloud HSM
7
Q
AWS Service to manage and retrieve passwords and secrets
A
Secrets Manager
8
Q
Service to protect against DDOS
A
AWS Shield
9
Q
What service can you use to record API calls within your account
A
CloudTrail
10
Q
Max number of Security Groups you can attach to an EC2
A
Max of 5 per network interface
