AWS Networking and Security 5

Question 1

A company is deploying a web application and wants to protect it against common web exploits such as SQL injection and cross-site scripting. Which AWS service should they use?

Accepted Answer

AWS WAF

Answer

AWS WAF (Web Application Firewall) inspects HTTP/HTTPS requests and allows you to create rules to block common web exploits like SQL injection and XSS at Layer 7.

Question 2

Which feature of AWS Transit Gateway allows you to isolate routing between connected VPCs so that VPC-A can reach the shared services VPC but not VPC-B?

Accepted Answer

Route Tables on Transit Gateway

Answer

Transit Gateway route tables enable you to segment traffic by associating VPCs with different route tables, controlling which VPCs can communicate with each other.

Question 3

An administrator wants to audit all changes to AWS resource configurations and receive alerts when non-compliant resources are detected. Which service provides this capability?

Accepted Answer

AWS Config

Answer

AWS Config continuously records resource configuration changes and evaluates them against desired rules, triggering alerts or remediation when resources become non-compliant.

Question 4

A company uses multiple AWS accounts and needs to share a centrally managed VPC with private subnets across accounts. Which AWS feature enables this?

Accepted Answer

AWS Resource Access Manager (RAM) with VPC Sharing

Answer

AWS Resource Access Manager (RAM) allows sharing subnets from a central VPC (owner account) with participant accounts, enabling a shared VPC architecture.

Question 5

Which security service continuously monitors for malicious activity and unauthorized behavior in an AWS account by analyzing CloudTrail, DNS logs, and VPC Flow Logs?

Accepted Answer

Amazon GuardDuty

Answer

Amazon GuardDuty is a managed threat detection service that uses ML and anomaly detection on CloudTrail, VPC Flow Logs, and DNS logs to identify threats.

AWS Practice Test

AWS Practice Test

AWS Networking and Security 5