Security and Compliance

Question 1

Amazon’s automated security assessment service is called?

Answer 1

Amazon Inspector

Question 2

What is Amazon Inspector?

Answer 2

An automated security assessment service

Question 3

What is Amazon GuardDuty?

Answer 3

A continuous security monitoring service that analyzes and processes a variety data sources and machine learning to identify unexpected and potentially unauthorized or malicious activity within your AWS environment

Question 4

Amazon’s continuous security monitoring service that analyzes and processes a variety data sources and machine learning to identify unexpected and potentially unauthorized or malicious activity within your AWS environment is called?

Answer 4

Amazon GuardDuty

Question 5

What does Amazon CloudTrail do?

Answer 5

Logs activity across your AWS infrastructure (who did what when)

Question 6

Amazon’s service that enables governance, compliance, operational auditing, and risk auditing by logging activity across your AWS infrastructure is called

Answer 6

Amazon CloudTrail

Question 7

Which AWS tool captures information about IP traffic going to and from network interfaces in your Virtual Private Cloud (VPC)?

Answer 7

VPC Flow Logs

Question 8

Which AWS tool is a managed service for mitigating distributed denial of service (DDoS) attacks?

Answer 8

AWS Shield

Question 9

An internet gateway traffic into and out of? How is that different than a virtual private gateway?

Answer 9

The internet gateway controls traffic from the internet into and out of the Virtual Private Cloud (VPC). The Virtual Private Gateway controls traffic in and out of a Security Group.

Question 10

What are Service Control Policies (SCPs)?

Answer 10

Service Control Policies are a feature of AWS Organizations and restrict available permissions. They do not grant permissions.

Question 11

What is the difference between managed IAM policies and custom IAM policies?

Answer 11

Custom polices are editable. Managed policies are not.

Question 12

What is AWS WAF?

Answer 12

Configurable web application firewall

Question 13

Amazon’s configurable web application firewall is called?

Answer 13

AWS WAF

Question 14

What does AWS Shield cost?

Answer 14

AWS Shield is automatically included at no extra cost. For added protection against DDoS attacks, AWS offers AWS Shield Advanced for an additional charge.