Security & Compliance

Question 1

What service protects against DDoS attacks for all customers at no additional costs

Answer 1

AWS Shield Standard

Question 2

Premium service that protects against more sophisticated attacks at a cost of $3,000 per month per org.

Answer 2

AWS Shield Advanced

Question 3

What service is a web application firewall that helps you protect against common web exploits and bots that can affect availability, compromise security, or consume excessive resources?

Answer 3

AWS WAF

Question 4

What two services help mitigate DDoS attacks by utilizing the Edge?

Answer 4

CloudFront & Route53

Question 5

What are prohibited activities when doing penetration test?

Answer 5

DNS
DoS or DDoS
Port Flooding
Protocol Flooding
Request Flooding

Question 6

True or False: You can do any type of penetration testing on your applications within AWS?

Answer 6

False

Question 7

At what two points does encryption need to take place for data?

Answer 7

At Rest & In Transit

Question 8

Which service lets you create, manage, and control cryptographic keys across your applications and AWS services?

Answer 8

AWS KMS

Question 9

What service does AWS provision encryption hardware where users manage encryption keys?

Answer 9

CloudHSM

Question 10

What service provisions, manages, and deploys SSL/TLS Certificates?

Answer 10

AWS Certificate Manager

Question 11

Helps you manage, retrieve, and rotate database credentials, API keys, and other secrets throughout their lifecycles.

Answer 11

AWS Secrets Manager

Question 12

Provides on-demand access to security and compliance reports from AWS and ISVs who sell their products on AWS Marketplace.

Answer 12

AWS Artifact

Question 13

Threat detection service that continuously monitors your AWS accounts and workloads for malicious activity and delivers detailed security findings for visibility and remediation. Uses ML and 3rd, party data.

Answer 13

AWS GuardDuty

Question 14

What service can protect against CryptoCurrency attacks?

Answer 14

AWS GuardDuty

Question 15

Automated vulnerability/security management service that continually scans AWS workloads for software vulnerabilities and unintended network exposure.

Answer 15

AWS Inspector

Question 16

What service continually assesses, audits, and evaluates the configurations and relationships of your resources on AWS, on premises, and on other clouds to check for compliance issues?

Answer 16

AWS Config

Question 17

Data security service that uses machine learning (ML) and pattern matching to discover and help protect your sensitive data, like PII (personally identifiable information).

Answer 17

AWS Macie

Question 18

What central security tool manages security across several AWS Accounts and is a cloud security posture management service that performs security best practice checks, aggregates alerts, and enables automated remediation?

Answer 18

Security Hub

Question 19

What service analyzes, investigates, let’s the user visualize, and quickly identifies the root cause of security issues or suspicious activities?

Answer 19

Amazon Detective

Question 20

What should you do if you encounter AWS services being used for abusive or illegal purposes?

Answer 20

Report it to the AWS Abuse Team

Question 21

What actions can only be performed by the Root User account?

Answer 21

Change account settings
Close your AWS account
Change or cancel AWS Support Plans
Register as a seller on the Reserved Instance Marketplace