AWS Security and Compliance Flashcards
6 cards from real CCP practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 6 AWS Security and Compliance flashcards as text
Which AWS service provides a centralized view of security alerts and compliance status across your AWS accounts?
Answer: AWS Security Hub
AWS Security Hub provides a comprehensive view of your security state in AWS and helps you check your environment against security industry standards.
Under the AWS Shared Responsibility Model, who is responsible for patching the guest operating system on an Amazon EC2 instance?
Answer: The customer
Under the shared responsibility model, the customer is responsible for patching and maintaining the guest OS on EC2 instances.
Which AWS service helps you detect unusual activity and potential threats in your AWS account using machine learning?
Answer: Amazon GuardDuty
Amazon GuardDuty is a threat detection service that continuously monitors for malicious activity and anomalous behavior using machine learning.
What is the AWS service that enables you to manage encryption keys for your data?
Answer: AWS Key Management Service (KMS)
AWS Key Management Service (KMS) is a managed service that makes it easy to create and control encryption keys used to encrypt your data.
Which principle states that users should only be granted the permissions they need to perform their job?
Answer: Least privilege
The principle of least privilege means granting only the minimum permissions required to perform a task, reducing the attack surface.
Which AWS service provides DDoS protection at no additional cost for all AWS customers?
Answer: AWS Shield Standard
AWS Shield Standard is automatically included for all AWS customers at no extra charge and protects against common DDoS attacks.