CCP AWS Cloud Security and Compliance

Question 1

Which AWS service provides a managed firewall to filter malicious web traffic before it reaches your application?

Accepted Answer

AWS WAF

Answer

AWS Shield

Answer

Amazon GuardDuty

Answer

AWS Firewall Manager

Question 2

Which service continuously monitors AWS accounts and workloads for malicious activity using machine learning and threat intelligence?

Accepted Answer

Amazon GuardDuty

Answer

Amazon Inspector

Answer

Amazon Macie

Answer

AWS Security Hub

Question 3

Under the AWS Shared Responsibility Model, who is responsible for patching the guest operating system on an Amazon EC2 instance?

Accepted Answer

The customer

Answer

AWS

Answer

Both AWS and the customer equally

Answer

AWS Support

Question 4

Which AWS service helps you discover and protect sensitive data, such as PII, stored in Amazon S3?

Accepted Answer

Amazon Macie

Answer

AWS Shield

Answer

AWS Artifact

Answer

Amazon GuardDuty

Question 5

Which AWS feature allows you to define fine-grained permissions for AWS users and roles using JSON policy documents?

Accepted Answer

AWS IAM Policies

Answer

AWS Organizations

Answer

AWS Config

Answer

Amazon Cognito

Question 6

Which service provides on-demand access to AWS compliance reports such as SOC and PCI DSS documentation?

Accepted Answer

AWS Artifact

Answer

AWS Trusted Advisor

Answer

AWS Config

Answer

AWS Security Hub