CCP AWS Cloud Security and Compliance 2

Question 1

Which AWS service enables multi-factor authentication (MFA) enforcement for IAM users?

Accepted Answer

AWS IAM

Answer

Amazon Cognito

Answer

AWS SSO

Answer

AWS Directory Service

Question 2

What is the primary purpose of AWS CloudTrail?

Accepted Answer

Record API calls and account activity for auditing

Answer

Monitor infrastructure performance metrics

Answer

Scan code for security vulnerabilities

Answer

Manage SSL/TLS certificates

Question 3

Which AWS service performs automated security assessments of EC2 instances and container workloads to find vulnerabilities?

Accepted Answer

Amazon Inspector

Answer

Amazon GuardDuty

Answer

AWS Macie

Answer

AWS Shield

Question 4

Which AWS offering provides automatic protection against DDoS attacks for all AWS customers at no additional cost?

Accepted Answer

AWS Shield Standard

Answer

AWS WAF

Answer

AWS Shield Advanced

Answer

Amazon GuardDuty

Question 5

Which IAM best practice recommends avoiding the use of root account credentials for everyday tasks?

Accepted Answer

Root Account Protection

Answer

Principle of Least Privilege

Answer

Role-Based Access Control

Answer

Identity Federation

Question 6

Which service centralizes security findings from multiple AWS security services into a single dashboard?

Accepted Answer

AWS Security Hub

Answer

AWS Config

Answer

Amazon Detective

Answer

AWS CloudTrail