DevOps Engineering on AWS Certification Security, Compliance, and Governance on AWS DevOps 2

Question 1

Which AWS feature enforces MFA deletion on S3 bucket versioning to prevent accidental or malicious deletion?

Accepted Answer

S3 MFA Delete

Answer

S3 MFA Delete requires multi-factor authentication to permanently delete object versions or change the versioning state of a bucket.

Question 2

Which AWS service provides a web application firewall to protect against SQL injection and XSS attacks?

Accepted Answer

AWS WAF

Answer

AWS WAF is a web application firewall that lets you create rules to block common web exploits like SQL injection and cross-site scripting.

Question 3

Which AWS service allows you to centrally manage and enforce WAF rules, Security Groups, and Shield Advanced protections across multiple accounts?

Accepted Answer

AWS Firewall Manager

Answer

AWS Firewall Manager provides centralized management of firewall rules across accounts in an AWS Organization, ensuring consistent security policies.

Question 4

Which AWS Config rule type uses AWS-managed logic to evaluate resource configurations against best practices?

Accepted Answer

AWS managed rules

Answer

AWS managed rules are pre-built Config rules maintained by AWS that check common compliance and security configurations without requiring custom code.

Question 5

Which AWS service provides a set of prescriptive security controls and a landing zone to govern a multi-account AWS environment?

Accepted Answer

AWS Control Tower

Answer

AWS Control Tower automates the setup of a multi-account environment with built-in governance guardrails using AWS Organizations, Config, and other services.

DevOps Engineering on AWS Certification Practice Test

DevOps Engineering on AWS Certification Practice Test

DevOps Engineering on AWS Certification Security, Compliance, and Governance on AWS DevOps 2