CCP AWS Security and Compliance 2

Question 1

Which AWS service allows you to audit user activity and API calls across your AWS infrastructure?

Accepted Answer

AWS CloudTrail

Answer

AWS CloudTrail records API calls and user activity in your AWS account, providing a complete audit trail for compliance and security analysis.

Question 2

What AWS tool helps you identify S3 buckets that contain sensitive data such as PII?

Accepted Answer

Amazon Macie

Answer

Amazon Macie uses machine learning to automatically discover, classify, and protect sensitive data in Amazon S3.

Question 3

Which AWS service lets you set fine-grained permissions for AWS services and resources using JSON-based policies?

Accepted Answer

AWS IAM

Answer

AWS Identity and Access Management (IAM) lets you manage access to AWS services and resources securely using policies.

Question 4

What is an IAM role used for in AWS?

Accepted Answer

Granting temporary permissions to entities that need access to AWS resources

Answer

IAM roles are used to delegate access to AWS resources with temporary security credentials, without sharing long-term keys.

Question 5

Which AWS service scans EC2 instances and container images for software vulnerabilities and unintended network exposure?

Accepted Answer

Amazon Inspector

Answer

Amazon Inspector automatically assesses EC2 instances and ECR container images for vulnerabilities and deviations from best practices.

CCP - Certified Cloud Practitioner Practice Test