CCP AWS Cloud Security and Compliance 3

Question 1

Which AWS encryption option allows you to manage your own encryption keys using dedicated hardware security modules?

Accepted Answer

AWS CloudHSM

Answer

AWS CloudHSM provides dedicated Hardware Security Modules so you have full control over your encryption keys.

Question 2

What does the principle of least privilege mean in AWS IAM?

Accepted Answer

Grant only the permissions needed to perform a specific task

Answer

Least privilege means granting only the minimum permissions required for a user or service to complete its intended task.

Question 3

Which AWS service helps you centrally manage and enforce policies across multiple AWS accounts in an organization?

Accepted Answer

AWS Organizations

Answer

AWS Organizations lets you consolidate multiple accounts and apply Service Control Policies (SCPs) to govern access across your entire organization.

Question 4

What is an IAM role primarily used for?

Accepted Answer

Granting temporary permissions to AWS services or external identities

Answer

IAM roles provide temporary credentials to AWS services (like EC2 or Lambda) or federated users so they can access resources securely.

Question 5

Which AWS service stores and rotates database credentials, API keys, and other secrets securely?

Accepted Answer

AWS Secrets Manager

Answer

AWS Secrets Manager stores secrets like database passwords and API keys, and can automatically rotate them on a schedule.

CCP - Certified Cloud Practitioner Practice Test