Security Compliance

Question 1

Which AWS service allows you to manage and rotate secrets such as database credentials?
A) AWS Secrets Manager
B) AWS CloudTrail
C) AWS Config
D) AWS CodeDeploy

Answer 1

A) AWS Secrets Manager

Question 2

How can you ensure that your AWS resources comply with security best practices and continuously monitor for compliance violations?
A) AWS Config
B) AWS IAM
C) AWS Lambda
D) AWS CloudTrail

Answer 2

A) AWS Config

Question 3

Which service provides automatic encryption of data at rest and in transit for S3 objects?
A) Amazon S3 Server-Side Encryption
B) AWS Shield
C) AWS CloudFormation
D) AWS Trusted Advisor

Answer 3

A) Amazon S3 Server-Side Encryption

Question 4

How can you provide temporary, limited-privilege credentials to applications that need access to AWS resources?
A) AWS Security Token Service (STS)
B) AWS Key Management Service (KMS)
C) AWS CloudFormation
D) AWS CodePipeline

Answer 4

A) AWS Security Token Service (STS)

Question 5

Which AWS service helps you protect against DDoS attacks?
A) AWS Shield
B) AWS CloudTrail
C) AWS Config
D) Amazon Macie

Answer 5

A) AWS Shield

Question 6

Which AWS service helps you monitor and enforce compliance with security standards and best practices across your AWS resources?
A) AWS Config
B) AWS Lambda
C) AWS CloudTrail
D) AWS IAM

Answer 6

A) AWS Config

Question 7

To protect your web application from DDoS attacks, which AWS service should you use?
A) AWS Shield
B) AWS CloudFormation
C) AWS CodeDeploy
D) Amazon Macie

Answer 7

A) AWS Shield

Question 8

Which service would you use to manage access control and permissions to AWS resources?
A) AWS Identity and Access Management (IAM)
B) AWS Lambda
C) AWS CloudFormation
D) Amazon EC2

Answer 8

A) AWS Identity and Access Management (IAM)

Question 9

You need to encrypt sensitive data in your AWS environment. Which AWS service would you use to manage encryption keys?
A) AWS Key Management Service (KMS)
B) AWS Secrets Manager
C) AWS CloudTrail
D) AWS Config

Answer 9

A) AWS Key Management Service (KMS)

Question 10

Which AWS service allows you to scan S3 buckets to discover sensitive data such as personally identifiable information (PII)?
A) Amazon Macie
B) AWS Shield
C) AWS Lambda
D) AWS Trusted Advisor

Answer 10

A) Amazon Macie