Security

Question 1

Threat detection service that continuously monitors for malicious activity and unauthorized behavior to protect your AWS accounts and workloads.

Answer 1

AWS GuardDuty

Question 2

Threat service that uses machine learning to automatically discover, classify, and protect sensitive data

Answer 2

AWS Macie

Question 3

Threat service that manages DDoS Protection

Answer 3

AWS Shield

Question 4

Permitted Services for Pen Test (No Approval needed)

Answer 4

EC2, NAT Gateway, ELB
RDS (Aurora)
Cloudfront
API GW
Lambda (inc Edge)
Lightsail
Elastic Beanstalk

Question 5

Prohibited Pen Tests

Answer 5

DNS zone walking via Amazon Route 53 Hosted Zones
Denial of Service (DoS), Distributed Denial of Service (DDoS), Simulated DoS, Simulated DDoS
Port flooding
Protocol flooding
Request flooding (login request flooding, API request flooding)

Question 6

CloudTrail

Answer 6

Enabled by default

New Trail defaults to all regions, can modify

One free trail

Additional Trails at cost