CCP AWS Cloud Security and Compliance 1 — Questions and Answers
Question 1: Which AWS service provides a managed firewall to filter malicious web traffic before it reaches your application?
- AWS WAF (Correct answer)
- AWS Shield
- Amazon GuardDuty
- AWS Firewall Manager
Correct answer: AWS WAF
AWS WAF (Web Application Firewall) filters HTTP/HTTPS traffic based on rules you define to block common exploits like SQL injection and XSS.
Question 2: Which service continuously monitors AWS accounts and workloads for malicious activity using machine learning and threat intelligence?
- Amazon Inspector
- Amazon Macie
- Amazon GuardDuty (Correct answer)
- AWS Security Hub
Correct answer: Amazon GuardDuty
Amazon GuardDuty is a threat detection service that continuously analyzes CloudTrail logs, VPC Flow Logs, and DNS logs to identify suspicious activity.
Question 3: Under the AWS Shared Responsibility Model, who is responsible for patching the guest operating system on an Amazon EC2 instance?
- AWS
- The customer (Correct answer)
- Both AWS and the customer equally
- AWS Support
Correct answer: The customer
In the Shared Responsibility Model, customers manage the guest OS, including updates and patches, on EC2 instances.
Question 4: Which AWS service helps you discover and protect sensitive data, such as PII, stored in Amazon S3?
- AWS Shield
- Amazon Macie (Correct answer)
- AWS Artifact
- Amazon GuardDuty
Correct answer: Amazon Macie
Amazon Macie uses machine learning to automatically discover, classify, and protect sensitive data stored in S3.
Question 5: Which AWS feature allows you to define fine-grained permissions for AWS users and roles using JSON policy documents?
- AWS Organizations
- AWS IAM Policies (Correct answer)
- AWS Config
- Amazon Cognito
Correct answer: AWS IAM Policies
IAM (Identity and Access Management) policies are JSON documents that define what actions are allowed or denied on which AWS resources.
Question 6: Which service provides on-demand access to AWS compliance reports such as SOC and PCI DSS documentation?
- AWS Trusted Advisor
- AWS Artifact (Correct answer)
- AWS Config
- AWS Security Hub
Correct answer: AWS Artifact
AWS Artifact is a self-service portal that gives you on-demand access to AWS compliance reports and agreements.
CCP AWS Cloud Security and Compliance 1
Which AWS service provides a managed firewall to filter malicious web traffic before it reaches your application?