DevOps Engineering on AWS Certification Security, Compliance, and Governance on AWS DevOps

Question 1

Which AWS service manages encryption keys used to protect data at rest and in transit across AWS services?

Accepted Answer

AWS Key Management Service (KMS)

Answer

AWS KMS is a managed service that creates and controls the cryptographic keys used to encrypt your data, integrating with most AWS services.

Question 2

Which AWS service automatically rotates database credentials, API keys, and other secrets on a configurable schedule?

Accepted Answer

AWS Secrets Manager

Answer

AWS Secrets Manager automatically rotates secrets on a defined schedule by invoking a Lambda function, eliminating hardcoded credentials.

Question 3

Which IAM feature allows you to grant temporary, limited access to AWS resources without sharing long-term credentials?

Accepted Answer

IAM Roles

Answer

IAM Roles provide temporary security credentials via AWS STS, allowing entities to assume permissions without needing permanent access keys.

Question 4

Which AWS service provides threat detection by analyzing CloudTrail, VPC Flow Logs, and DNS logs using ML?

Accepted Answer

Amazon GuardDuty

Answer

Amazon GuardDuty continuously monitors CloudTrail, VPC Flow Logs, and DNS logs using machine learning to detect malicious activity and unauthorized behavior.

Question 5

Which AWS service scans EC2 instances and container images for software vulnerabilities and unintended network exposure?

Accepted Answer

Amazon Inspector

Answer

Amazon Inspector automatically discovers and scans EC2 workloads and container images for software vulnerabilities and network reachability issues.

DevOps Engineering on AWS Certification Practice Test

DevOps Engineering on AWS Certification Practice Test

DevOps Engineering on AWS Certification Security, Compliance, and Governance on AWS DevOps