AWS Security & Compliance

Question 1

Which AWS service is used for managing user access and permissions?

Accepted Answer

AWS IAM

Answer

AWS Identity and Access Management (IAM) is the service used for securely managing access to AWS services and resources. It allows administrators to create and manage AWS users and groups, and use permissions to allow or deny their access to specific resources. IAM is fundamental for implementing the principle of least privilege and maintaining a secure cloud environment.

Question 2

Which AWS service provides centralized logging and monitoring?

Accepted Answer

AWS CloudTrail

Answer

AWS CloudTrail is a service that enables governance, compliance, operational auditing, and risk auditing of your AWS account. It records API calls and related events made by a user, role, or an AWS service, providing a history of activity for security analysis and troubleshooting. This centralized logging helps monitor actions taken across your AWS infrastructure.

Question 3

How does AWS Shield protect cloud applications?

Accepted Answer

Provides DDoS protection for applications

Answer

AWS Shield is a managed Distributed Denial of Service (DDoS) protection service that safeguards applications running on AWS. It provides always-on detection and automatic inline mitigations that minimize application downtime and latency. Shield offers two tiers: Standard, which is automatically included for all AWS customers, and Advanced, which provides enhanced protections and cost savings.

Question 4

Which AWS service is used to encrypt and manage cryptographic keys?

Accepted Answer

AWS KMS

Answer

AWS Key Management Service (KMS) is a managed service that makes it easy for you to create and control the cryptographic keys used to encrypt your data. It integrates with other AWS services to encrypt data at rest and in transit, ensuring strong security and compliance. KMS allows you to manage access permissions to these keys, providing fine-grained control over your encryption strategy.

Question 5

What is the purpose of AWS Security Hub?

Accepted Answer

Provides a centralized view of security alerts

Answer

AWS Security Hub provides a comprehensive view of your security posture across your AWS accounts. It aggregates, organizes, and prioritizes security alerts and findings from various AWS services, such as GuardDuty, Inspector, and Macie, as well as from integrated AWS Partner solutions. This centralization helps you identify and address security issues more effectively.

AWS Practice Test

AWS Practice Test

AWS Security & Compliance