CCP AWS Security and Compliance

Question 1

Which AWS service provides a centralized view of security alerts and compliance status across your AWS accounts?

Accepted Answer

AWS Security Hub

Answer

AWS Shield

Answer

Amazon GuardDuty

Answer

AWS Inspector

Question 2

Under the AWS Shared Responsibility Model, who is responsible for patching the guest operating system on an Amazon EC2 instance?

Accepted Answer

The customer

Answer

AWS

Answer

Both AWS and the customer equally

Answer

A third-party vendor

Question 3

Which AWS service helps you detect unusual activity and potential threats in your AWS account using machine learning?

Accepted Answer

Amazon GuardDuty

Answer

AWS WAF

Answer

Amazon Macie

Answer

AWS Config

Question 4

What is the AWS service that enables you to manage encryption keys for your data?

Accepted Answer

AWS Key Management Service (KMS)

Answer

AWS Certificate Manager

Answer

AWS Secrets Manager

Answer

AWS CloudHSM

Question 5

Which principle states that users should only be granted the permissions they need to perform their job?

Accepted Answer

Least privilege

Answer

Defense in depth

Answer

Zero trust

Answer

Separation of duties

Question 6

Which AWS service provides DDoS protection at no additional cost for all AWS customers?

Accepted Answer

AWS Shield Standard

Answer

AWS Shield Advanced

Answer

AWS WAF

Answer

Amazon CloudFront