Architecting on AWS Certification Safety Practices & PPE 4

Question 1

Which AWS service protects web applications from common exploits like SQL injection and cross-site scripting (XSS) by inspecting HTTP/HTTPS requests?

Accepted Answer

AWS WAF

Answer

AWS WAF (Web Application Firewall) inspects web requests and blocks those matching rules for threats like SQL injection and XSS.

Question 2

An architect wants to enforce MFA for all IAM users when they access the AWS Management Console. What is the correct approach?

Accepted Answer

Attach an IAM policy requiring MFA as a condition on all actions

Answer

An IAM policy with a condition key (aws:MultiFactorAuthPresent) denies actions unless MFA is active, effectively requiring MFA for console access.

Question 3

A company wants to manage and rotate database credentials automatically without hardcoding them in application code. Which AWS service provides this capability?

Accepted Answer

AWS Secrets Manager

Answer

AWS Secrets Manager stores, retrieves, and automatically rotates secrets like database credentials on a configurable schedule.

Question 4

Which defense-in-depth approach should an architect use to protect an application that requires both web-tier and database-tier security?

Accepted Answer

Use separate security groups for web and database tiers with the DB group only allowing traffic from the web group

Answer

Tiered security groups implement defense in depth by ensuring the database tier only accepts traffic explicitly from the web tier, not from any external source.

Question 5

AWS Shield Standard is automatically enabled for all AWS customers. What additional protection does AWS Shield Advanced provide?

Accepted Answer

DDoS cost protection and access to the AWS DDoS Response Team (DRT)

Answer

AWS Shield Advanced adds financial protection against DDoS-related cost spikes and provides access to the specialized AWS DDoS Response Team.

Architecting on AWS Certification Practice Test

Architecting on AWS Certification Practice Test

Architecting on AWS Certification Safety Practices & PPE 4