AWS AWS Security and IAM 2 — Questions and Answers
Question 1: Which AWS service continuously monitors for malicious activity and unauthorized behavior in your AWS account?
- AWS GuardDuty (Correct answer)
- AWS CloudTrail
- AWS Config
- AWS Trusted Advisor
Correct answer: AWS GuardDuty
AWS GuardDuty is a threat detection service that continuously monitors for malicious activity and unauthorized behavior.
Question 2: What is the purpose of AWS CloudTrail?
- To log and track all API calls made in your AWS account (Correct answer)
- To monitor network traffic
- To scan for vulnerabilities in EC2 instances
- To manage SSL/TLS certificates
Correct answer: To log and track all API calls made in your AWS account
AWS CloudTrail records all API calls and user activity in your AWS account for auditing and compliance.
Question 3: Which AWS service helps you assess, audit, and evaluate the configurations of your AWS resources?
- AWS Config (Correct answer)
- AWS Inspector
- AWS CloudTrail
- AWS Macie
Correct answer: AWS Config
AWS Config continuously monitors and records your AWS resource configurations and evaluates them against desired settings.
Question 4: What type of AWS IAM credential is recommended for programmatic access to AWS services?
- Access keys (Access Key ID and Secret Access Key) (Correct answer)
- Username and password
- SSH key pair
- SSL certificate
Correct answer: Access keys (Access Key ID and Secret Access Key)
Access keys, consisting of an Access Key ID and Secret Access Key, are used for programmatic access to AWS APIs.
Question 5: Which AWS service uses machine learning to automatically discover and protect sensitive data in S3?
- AWS Macie (Correct answer)
- AWS Inspector
- AWS GuardDuty
- AWS Detective
Correct answer: AWS Macie
AWS Macie uses machine learning to automatically discover, classify, and protect sensitive data stored in Amazon S3.
Question 6: What is the purpose of an AWS Security Group?
- To act as a virtual firewall controlling inbound and outbound traffic for EC2 instances (Correct answer)
- To group IAM users together
- To manage encryption keys
- To monitor security threats
Correct answer: To act as a virtual firewall controlling inbound and outbound traffic for EC2 instances
Security Groups act as virtual firewalls that control inbound and outbound traffic to EC2 instances at the instance level.
AWS AWS Security and IAM 2
Which AWS service continuously monitors for malicious activity and unauthorized behavior in your AWS account?