AWS Security & Compliance 3

Question 1

Which service records API calls and account activity for governance, compliance, and auditing?

Accepted Answer

AWS CloudTrail

Answer

AWS CloudTrail logs API calls and events across your account for audit and compliance.

Question 2

What does AWS Config primarily help you do?

Accepted Answer

Assess and audit resource configurations

Answer

AWS Config tracks resource configuration changes and evaluates them against desired rules.

Question 3

Which AWS service helps protect web applications from common exploits like SQL injection and XSS?

Accepted Answer

AWS WAF

Answer

AWS WAF lets you define rules to filter malicious web requests such as SQL injection and XSS.

Question 4

What level of DDoS protection does AWS Shield Standard provide?

Accepted Answer

Automatic protection at no extra cost

Answer

AWS Shield Standard is automatically enabled for all AWS customers at no additional charge.

Question 5

Which IAM policy element explicitly overrides any matching Allow statement?

Accepted Answer

An explicit Deny

Answer

In IAM, an explicit Deny always takes precedence over any Allow.

AWS Practice Test