AWS Security Services

Question 1

AWS Security Services (high-level)

Hook up to Oracle to do transparent encryption?

Answer 1

CloudHSM

Question 2

AWS Security Services (high-level)

Most secure way to secure a CA?

Answer 2

CloudHSM store issuing certificate

Question 3

AWS Security Services (high-level)

Service for finding root cause of security findings

Answer 3

Detective

Question 4

AWS Security Services (high-level)

Integrates network traffic with security events like strange logins and AWS activity?

Answer 4

Detective

Question 5

AWS Security Services (high-level)

Can help find suspicious activity on the network

Answer 5

Detective

Question 6

AWS Security Services (high-level)

Detective use case?

Answer 6

Help find root cause of security findings

Question 7

AWS Security Services (high-level)

Does Detective alert you or do you go to Detective for info?

Answer 7

Passive only: go to Detective to look thru data

Question 8

AWS Security Services (high-level)

System uses ML to find outliers in data

Answer 8

Detective and GuardDuty

Question 9

AWS Security Services (high-level)

Continuous security monitoring service?

Answer 9

GuardDuty

Question 10

AWS Security Services (high-level)

Uses threat intelligence feeds?

Answer 10

GuardDuty

Question 11

AWS Security Services (high-level)

Inputs to GuardDuty?

Answer 11

threat intelligence feeds, logs from everywhere

Question 12

AWS Security Services (high-level)

How does GuardDuty find things?

Answer 12

ML

Question 13

AWS Security Services (high-level)

How do Detective and GuardDuty relate?

Answer 13

GuardDuty findings are inputs to Detective

Question 14

AWS Security Services (high-level)

Uses ML to look thru things, creates Findings for you

Answer 14

GuardDuty

Question 15

AWS Security Services (high-level)

Where does GuardDuty send findings?

Answer 15

Detective and Security Hub

Question 16

AWS Security Services (high-level)

Example finding from GuardDuty?

Answer 16

Known malicious source IPs

Question 17

AWS Security Services (high-level)

Example finding from Inspector?

Answer 17

Bad ssh configuration

Question 18

AWS Security Services (high-level)

Checks EC2 instances and containers for vulnerabilities

Answer 18

Inspector

Question 19

AWS Security Services (high-level)

Run it for a while and see whats in its report?

Answer 19

Inspector

Question 20

AWS Security Services (high-level)

Has an agent to collect things on EC2

Answer 20

Inspector

Question 21

AWS Security Services (high-level)

Pokes at an EC2 from the outside to see what it is

Answer 21

Inspector

Question 22

AWS Security Services (high-level)

Reports on reachability

Answer 22

Inspector

Question 23

AWS Security Services (high-level)

Finds open and unusual ports

Answer 23

Inspector

Question 24

AWS Security Services (high-level)

Dealswith CVEs and CIS benchmarks?

Answer 24

Inspector

Question 25

# *AWS Security Services (high-level)* Single location for management and remediation of security

Answer 25

SecurityHub

Question 26

# *AWS Security Services (high-level)* Compares your account against industry standards?

Answer 26

Security Hub

Question 27

# *AWS Security Services (high-level)* Sends EventBridge events when it finds something

Answer 27

Security Hub, Trusted Advisor

Question 28

# *AWS Security Services (high-level)* Looks at your AWS services configurations looking for bad practices

Answer 28

Security Hub and Trusted Advisor

Question 29

# *AWS Security Services (high-level)* Produces a report with findings across many other tools

Answer 29

Security Hub

Question 30

# *AWS Security Services (high-level)* Can automate findings to fix things when they pop up

Answer 30

Security Hub

Question 31

# *AWS Security Services (high-level)* Gets all its findings from other AWS services

Answer 31

Security Hub

Question 32

# *AWS Security Services (high-level)* How are Security Hub and Config different?

Answer 32

Config does actual work finding probs, Security Hub gets Config output

Question 33

# *AWS Security Services (high-level)* Systems that send findings to Security Hub?

Answer 33

Config, GuardDuty, Inspector

Question 34

# *AWS Security Services (high-level)* Security Hub sends findings to what services?

Answer 34

Detective, Trusted Advisor

Question 35

# *AWS Security Services (high-level)* Example of something Trusted Advisor finds?

Answer 35

Unused EC2 instances

Question 36

# *AWS Security Services (high-level)* System fueled by AWS Support cases

Answer 36

Trusted Advisor

Question 37

# *AWS Security Services (high-level)* System that can recommend cost savings?

Answer 37

Trusted Advisor

Question 38

# *AWS Security Services (high-level)* What other systems send data to Trusted Advisor?

Answer 38

Config, Security Hub

Question 39

# *AWS Security Services (high-level)* What powers some of the Trusted Advisor checks?

Answer 39

Config

Question 40

# *AWS Security Services (high-level)* Finds sensitive data in S3?

Answer 40

Macie

Question 41

# *AWS Security Services (high-level)* Where does Macie send results?

Answer 41

Security Hub

Question 42

# *AWS Security Services (high-level)* Gathers evidence for a compliance audit

Answer 42

Audit Manager