CCP AWS Cloud Security and Compliance 2

Question 1

Which AWS service enables multi-factor authentication (MFA) enforcement for IAM users?

Accepted Answer

AWS IAM

Answer

AWS IAM allows administrators to require MFA for individual users or enforce it via IAM policies across the account.

Question 2

What is the primary purpose of AWS CloudTrail?

Accepted Answer

Record API calls and account activity for auditing

Answer

AWS CloudTrail records API calls made in your AWS account, providing an audit trail of who did what, when, and from where.

Question 3

Which AWS service performs automated security assessments of EC2 instances and container workloads to find vulnerabilities?

Accepted Answer

Amazon Inspector

Answer

Amazon Inspector automatically assesses applications for software vulnerabilities and unintended network exposures on EC2 and container workloads.

Question 4

Which AWS offering provides automatic protection against DDoS attacks for all AWS customers at no additional cost?

Accepted Answer

AWS Shield Standard

Answer

AWS Shield Standard is automatically enabled for all AWS customers at no extra cost and protects against common network and transport-layer DDoS attacks.

Question 5

Which IAM best practice recommends avoiding the use of root account credentials for everyday tasks?

Accepted Answer

Root Account Protection

Answer

AWS recommends locking away root account credentials and creating individual IAM users for day-to-day operations to minimize risk.

CCP - Certified Cloud Practitioner Practice Test

CCP - Certified Cloud Practitioner Practice Test

CCP AWS Cloud Security and Compliance 2