AWS AWS Security and IAM 2

Question 1

Which AWS service continuously monitors for malicious activity and unauthorized behavior in your AWS account?

Accepted Answer

AWS GuardDuty

Answer

AWS GuardDuty is a threat detection service that continuously monitors for malicious activity and unauthorized behavior.

Question 2

What is the purpose of AWS CloudTrail?

Accepted Answer

To log and track all API calls made in your AWS account

Answer

AWS CloudTrail records all API calls and user activity in your AWS account for auditing and compliance.

Question 3

Which AWS service helps you assess, audit, and evaluate the configurations of your AWS resources?

Accepted Answer

AWS Config

Answer

AWS Config continuously monitors and records your AWS resource configurations and evaluates them against desired settings.

Question 4

What type of AWS IAM credential is recommended for programmatic access to AWS services?

Accepted Answer

Access keys (Access Key ID and Secret Access Key)

Answer

Access keys, consisting of an Access Key ID and Secret Access Key, are used for programmatic access to AWS APIs.

Question 5

Which AWS service uses machine learning to automatically discover and protect sensitive data in S3?

Accepted Answer

AWS Macie

Answer

AWS Macie uses machine learning to automatically discover, classify, and protect sensitive data stored in Amazon S3.

AWS Practice Test