CCP AWS Cloud Security and Compliance

Question 1

Which AWS service provides a managed firewall to filter malicious web traffic before it reaches your application?

Accepted Answer

AWS WAF

Answer

AWS WAF (Web Application Firewall) filters HTTP/HTTPS traffic based on rules you define to block common exploits like SQL injection and XSS.

Question 2

Which service continuously monitors AWS accounts and workloads for malicious activity using machine learning and threat intelligence?

Accepted Answer

Amazon GuardDuty

Answer

Amazon GuardDuty is a threat detection service that continuously analyzes CloudTrail logs, VPC Flow Logs, and DNS logs to identify suspicious activity.

Question 3

Under the AWS Shared Responsibility Model, who is responsible for patching the guest operating system on an Amazon EC2 instance?

Accepted Answer

The customer

Answer

In the Shared Responsibility Model, customers manage the guest OS, including updates and patches, on EC2 instances.

Question 4

Which AWS service helps you discover and protect sensitive data, such as PII, stored in Amazon S3?

Accepted Answer

Amazon Macie

Answer

Amazon Macie uses machine learning to automatically discover, classify, and protect sensitive data stored in S3.

Question 5

Which AWS feature allows you to define fine-grained permissions for AWS users and roles using JSON policy documents?

Accepted Answer

AWS IAM Policies

Answer

IAM (Identity and Access Management) policies are JSON documents that define what actions are allowed or denied on which AWS resources.

CCP - Certified Cloud Practitioner Practice Test

CCP - Certified Cloud Practitioner Practice Test

CCP AWS Cloud Security and Compliance