CCP AWS Security and Compliance 1

Question 1

Which AWS service provides a centralized view of security alerts and compliance status across your AWS accounts?

Accepted Answer

AWS Security Hub

Answer

AWS Security Hub provides a comprehensive view of your security state in AWS and helps you check your environment against security industry standards.

Question 2

Under the AWS Shared Responsibility Model, who is responsible for patching the guest operating system on an Amazon EC2 instance?

Accepted Answer

The customer

Answer

Under the shared responsibility model, the customer is responsible for patching and maintaining the guest OS on EC2 instances.

Question 3

Which AWS service helps you detect unusual activity and potential threats in your AWS account using machine learning?

Accepted Answer

Amazon GuardDuty

Answer

Amazon GuardDuty is a threat detection service that continuously monitors for malicious activity and anomalous behavior using machine learning.

Question 4

What is the AWS service that enables you to manage encryption keys for your data?

Accepted Answer

AWS Key Management Service (KMS)

Answer

AWS Key Management Service (KMS) is a managed service that makes it easy to create and control encryption keys used to encrypt your data.

Question 5

Which principle states that users should only be granted the permissions they need to perform their job?

Accepted Answer

Least privilege

Answer

The principle of least privilege means granting only the minimum permissions required to perform a task, reducing the attack surface.

CCP - Certified Cloud Practitioner Practice Test

CCP - Certified Cloud Practitioner Practice Test

CCP AWS Security and Compliance 1