AWS Security & Compliance 2

Question 1

Which AWS service automatically discovers, classifies, and protects sensitive data such as PII in Amazon S3?

Accepted Answer

Amazon Macie

Answer

Amazon Macie uses machine learning to identify and protect sensitive data like PII stored in S3.

Question 2

What is the AWS shared responsibility model's division for patching the guest operating system on an EC2 instance?

Accepted Answer

The customer is responsible

Answer

Customers are responsible for patching the guest OS and applications on EC2 instances under security 'in' the cloud.

Question 3

Which feature allows you to grant temporary, limited-privilege credentials to users from an identity provider?

Accepted Answer

IAM roles with STS

Answer

AWS STS issues temporary credentials that are assumed via IAM roles for federated or cross-account access.

Question 4

What does AWS KMS primarily provide?

Accepted Answer

Creation and control of encryption keys

Answer

AWS Key Management Service (KMS) lets you create and manage cryptographic keys for encryption.

Question 5

Which service provides continuous monitoring for malicious activity and unauthorized behavior across AWS accounts?

Accepted Answer

Amazon GuardDuty

Answer

Amazon GuardDuty is a threat detection service that monitors for malicious and unauthorized activity.

AWS Practice Test