Security and Compliance — page 1
Which AWS service can a company use to securely store and encrypt passwords for a database?
What is the purpose of having an internet gateway within a VPC?
Which AWS service is used to provide encryption for Amazon EBS?
A company needs to use dashboards and charts to analyze insights from business data. Which AWS service will provide the dashboards and charts for these insights?
Which AWS service allows users to download security and compliance reports about the AWS infrastructure on demand?
Which option is a customer responsibility when using Amazon DynamoDB under the AWS Shared Responsibility Model?
Which of the following are benefits of using AWS Trusted Advisor? (Choose two.)
Which AWS service or resource provides answers to the most frequently asked security-related questions that AWS receives from its users?
Which tasks are customer responsibilities, according to the AWS shared responsibility model? (Choose two.)
A company is storing sensitive customer data in an Amazon S3 bucket. The company wants to protect the data from accidental deletion or overwriting. Which S3 feature should the company use to meet these requirements?
A company is setting up AWS Identity and Access Management (IAM) on an AWS account. Which recommendation complies with IAM security best practices?
According to the AWS shared responsibility model, which task is the customer's responsibility?
A company uses Amazon Aurora as its database service. The company wants to encrypt its databases and database backups. Which party manages the encryption of the database clusters and database snapshots, according to the AWS shared responsibility model?
A company wants to set up a secure network connection from on premises to the AWS Cloud within 1 week. Which solution will meet these requirements?
Which AWS service or feature can be used to create a private connection between an on-premises workload and an AWS Cloud workload?
A developer needs to maintain a development environment infrastructure and a production environment infrastructure in a repeatable fashion. Which AWS service should the developer use to meet these requirements?
Using AWS Identity and Access Management (IAM) to grant access only to the resources needed to perform a task is a concept known as:
A company wants to grant users in one AWS account access to resources in another AWS account. The users do not currently have permission to access the resources. Which AWS service will meet this requirement?
A company wants to run its workload on Amazon EC2 instances for more than 1 year. This workload will run continuously. Which option offers a discounted hourly rate compared to the hourly rate of On-Demand Instances?
Which AWS service helps users audit API activity across their AWS account?
Which AWS service or tool can be used to capture information about inbound and outbound traffic in an Amazon VPC?
What is the customer ALWAYS responsible for managing, according to the AWS shared responsibility model?
Which action will help increase security in the AWS Cloud?
Which AWS security service protects applications from distributed denial of service attacks with always-on detection and automatic inline mitigations?
Which encryption types can be used to protect objects at rest in Amazon S3? (Choose two.)
A company wants to integrate its online shopping website with social media login credentials. Which AWS service can the company use to make this integration?
A company website is experiencing DDoS attacks. Which AWS service can help protect the company website against these attacks?
A company hosts a large amount of data in AWS. The company wants to identify if any of the data should be considered sensitive. Which AWS service will meet the requirement?
Who enables encryption of data at rest for Amazon Elastic Block Store (Amazon EBS)?
A company has deployed an Amazon EC2 instance. Which option is an AWS responsibility under the AWS shared responsibility model?
A developer wants AWS users to access AWS services by using temporary security credentials. Which AWS service or feature should the developer use to provide these credentials?
According to the AWS shared responsibility model, the customer is responsible for applying the latest security updates and patches for which of the following?
A company needs to deploy applications in the AWS Cloud as quickly as possible. The company also needs to minimize the complexity that is related to the management of AWS resources. Which AWS service should the company use to meet these requirements?
Which mechanism allows developers to access AWS services from application code?
Which AWS service or component allows inbound traffic from the internet to access a VPC?
A company is in the early stages of planning a migration to AWS. The company wants to obtain the monthly predicted total AWS cost of ownership for future Amazon EC2 instances and associated storage. Which AWS service or tool should the company use to meet these requirements?
Which of the following acts as an instance-level firewall to control inbound and outbound access?
What does the Amazon S3 Intelligent-Tiering storage class offer?
According to security best practices, how should an Amazon EC2 instance be given access to an Amazon S3 bucket?
Which AWS service or feature allows a user to establish a dedicated network connection between a company’s on-premises data center and the AWS Cloud?
Which AWS service protects your AWS account by monitoring malicious activity and detecting threats?
A company has deployed applications on Amazon EC2 instances. The company needs to assess application vulnerabilities and must identify infrastructure deployments that do not meet best practices. Which AWS service can the company use to meet these requirements?
A company has an AWS account. The company wants to audit its password and access key rotation details for compliance purposes. Which AWS service or tool will meet this requirement?
A user needs programmatic access to AWS resources through the AWS CLI or the AWS API. Which option will provide the user with the appropriate access?
A company needs to block SQL injection attacks. Which AWS service or feature can meet this requirement?
A cloud practitioner needs to obtain AWS compliance reports before migrating an environment to the AWS Cloud. How can these reports be generated?
Which service enables customers to audit API calls in their AWS accounts?
A company is building an application that needs to deliver images and videos globally with minimal latency. Which approach can the company use to accomplish this in a cost effective manner?
A company wants to monitor and block malicious HTTP and HTTPS requests that its Amazon CloudFront distributions receive. Which AWS service should the company use to meet these requirements?
Which AWS service or feature requires an internet service provider (ISP) and a colocation facility to be implemented?
A company uses Amazon WorkSpaces. Which task is the responsibility of AWS, according to the AWS shared responsibility model?
Which AWS service gives users on-demand, self-service access to AWS compliance control reports?
Which AWS Cloud design principle is a company using when the company implements AWS CloudTrail?
What is the MOST secure way to store passwords on AWS?
Which task is the customer's responsibility, according to the AWS shared responsibility model?
Which guidelines are best practices for using AWS Identity and Access Management (IAM)? (Choose two.)
An ecommerce company wants to distribute traffic between the Amazon EC2 instances that host its website. Which AWS service or resource will meet these requirements?
According to the AWS shared responsibility model, which of the following are AWS responsibilities? (Choose two.)
A company is using AWS Identity and Access Management (IAM). Who can manage the access keys of the AWS account root user?
Which group shares responsibility with AWS for security and compliance of AWS accounts and resources?
Which AWS service enables users to create copies of resources across AWS Regions?
Which task is the responsibility of AWS, according to the AWS shared responsibility model?
A company wants to manage access and permissions for its third-party software as a service (SaaS) applications. The company wants to use a portal where end users can access assigned AWS accounts and AWS Cloud applications. Which AWS service should the company use to meet these requirements?
What is the primary use case for Amazon GuardDuty?
What is a customer responsibility under the AWS shared responsibility model when using AWS Lambda?
Which AWS network services or features allow CIDR block notation when providing an IP address range? (Choose two.)
A company is developing an application that uses multiple AWS services. The application needs to use temporary, limited-privilege credentials for authentication with other AWS APIs. Which AWS service or feature should the company use to meet these authentication requirements?
Which AWS service is a cloud security posture management (CSPM) service that aggregates alerts from various AWS services and partner products in a standardized format?
Which AWS service is always provided at no charge?
A company is using Amazon DynamoDB. Which task is the company’s responsibility, according to the AWS shared responsibility model?
Which AWS service gives users the ability to discover and protect sensitive data that is stored in Amazon S3 buckets?
Which AWS service can identify when an Amazon EC2 instance was terminated?
A company wants to provide managed Windows virtual desktops and applications to its remote employees over secure network connections. Which AWS services can the company use to meet these requirements? (Choose two.)
Which AWS services or features provide disaster recovery solutions for Amazon EC2 instances? (Choose two.)
A company wants to establish a schedule for rotating database user credentials. Which AWS service will support this requirement with the LEAST amount of operational overhead?
Which AWS service helps deliver highly available applications with fast failover for multi-Region and Multi-AZ architectures?
A user wants to review all Amazon S3 buckets with ACLs and S3 bucket policies in the S3 console. Which AWS service or resource will meet this requirement?
Which task is the responsibility of AWS when using AWS services?
A company wants to automate infrastructure deployment by using infrastructure as code (IaC). The company wants to scale production stacks so the stacks can be deployed in multiple AWS Regions. Which AWS service will meet these requirements?
A user wants to allow applications running on an Amazon EC2 instance to make calls to other AWS services. The access granted must be secure. Which AWS service or feature should be used?
A company needs to track the activity in its AWS accounts, and needs to know when an API call is made against its AWS resources. Which AWS tool or service can be used to meet these requirements?
A social media company wants to protect its web application from common web exploits such as SQL injections and cross-site scripting. Which AWS service will meet these requirements?
A company wants an automated process to continuously scan its Amazon EC2 instances for software vulnerabilities. Which AWS service will meet these requirements?
Which AWS service or feature provides log information of the inbound and outbound traffic on network interfaces in a VPC?
Which option is a shared responsibility between AWS and its customers under the AWS shared responsibility model?
Which task is a responsibility of AWS, according to the AWS shared responsibility model?
Which option is a customer responsibility under the AWS shared responsibility model?
A user wants to securely automate the management and rotation of credentials that are shared between applications, while spending the least amount of time on managing tasks. Which AWS service or feature can be used to accomplish this?
Which actions are best practices for an AWS account root user? (Choose two.)
A company needs to transfer data between an Amazon S3 bucket and an on-premises application. Who is responsible for the security of this data, according to the AWS shared responsibility model?
A company wants to identify Amazon S3 buckets that are shared with another AWS account. Which AWS service or feature will meet these requirements?
Which action is a security best practice for access to sensitive data that is stored in an Amazon S3 bucket?
A company needs a central user portal so that users can log in to third-party business applications that support Security Assertion Markup Language (SAML) 2.0. Which AWS service will meet this requirement?
Which AWS services or features enable users to connect on-premises networks to a VPC? (Choose two.)
Which task is a responsibility of AWS, according to the AWS shared responsibility model?
Which actions are the responsibility of AWS, according to the AWS shared responsibility model? (Choose two.)
A company wants a customized assessment of its current on-premises environment. The company wants to understand its projected running costs in the AWS Cloud. Which AWS service or tool will meet these requirements?
Which AWS service or feature will search for and identify AWS resources that are shared externally?
A company is using Amazon DynamoDB for its application database. Which tasks are the responsibility of AWS, according to the AWS shared responsibility model? (Choose two.)
A company wants to improve its security posture by reviewing user activity through API calls. Which AWS service will meet this requirement?
Which option is a shared control between AWS and the customer, according to the AWS shared responsibility model?
A global company wants to use a managed security service for protection from SQL injection attacks. The service also must provide detailed logging information about access to the company's ecommerce applications. Which AWS service will meet these requirements?
A company wants to verify if multi-factor authentication (MFA) is enabled for all users within its AWS accounts. Which AWS service or resource will meet this requirement?
A company uses AWS security services and tools. The company needs a service to help manage the security alerts and must organize the alerts into a single dashboard. Which AWS service should the company use to meet these requirements?
Which of the following are features of network ACLs as they are used in the AWS Cloud? (Choose two.)
Which of the following is entirely the responsibility of AWS, according to the AWS shared responsibility model?
A company wants to quickly implement a continuous integration/continuous delivery (CI/CD) pipeline. Which AWS service will meet this requirement?
Which AWS service could an administrator use to provide desktop environments for several employees?
Which AWS service or feature gives users the ability to capture information about network traffic in a VPC?
A company wants to allow users to authenticate and authorize multiple AWS accounts by using a single set of credentials. Which AWS service or resource will meet this requirement?
A company created an Amazon EC2 instance. The company wants to control the incoming and outgoing network traffic at the instance level. Which AWS resource or service will meet this requirement?
A company is migrating its applications from on-premises to the AWS Cloud. The company wants to ensure that the applications are assigned only the minimum permissions that are needed to perform all operations. Which AWS service will meet these requirements?
Which task requires a user to sign in as the AWS account root user?
A company wants to integrate natural language processing (NLP) into business intelligence (BI) dashboards. The company wants to ask questions and receive answers with relevant visualizations. Which AWS service or tool will meet these requirements?
Which AWS service makes it easier to monitor and troubleshoot application logs and cloud resources?
Which task is the responsibility of a company that is using Amazon RDS?
Which AWS service or feature allows users to securely store encrypted credentials and retrieve these credentials when required?
A company wants to provide one of its employees with access to Amazon RDS. The company also wants to limit the interaction to only the AWS CLI and AWS software development kits (SDKs). Which combination of actions should the company take to meet these requirements while following the principles of least privilege? (Choose two.)
A company wants to organize its users so that the company can grant permissions to the users as a group. Which AWS service or tool can the company use to meet this requirement?
A company needs to identify who accessed an AWS service and what action was performed for a given time period. Which AWS service should the company use to meet this requirement?
A company wants to run a NoSQL database on Amazon EC2 instances. Which task is the responsibility of AWS in this scenario?
Which AWS service or feature identifies whether an Amazon S3 bucket or an IAM role has been shared with an external entity?
Which of the following services can be used to block network traffic to an instance? (Choose two.)
What is the best resource for a user to find compliance-related information and reports about AWS?
Which security service automatically recognizes and classifies sensitive data or intellectual property on AWS?
Which AWS service can be used to retrieve compliance reports on demand?
Which AWS service is used to track, record, and audit configuration changes made to AWS resources?
What can a user accomplish using AWS CloudTrail?
A solutions architect needs to maintain a fleet of Amazon EC2 instances so that any impaired instances are replaced with new ones. Which AWS service should the solutions architect use?
A company has a compliance requirement to record and evaluate configuration changes, as well as perform remediation actions on AWS resources. Which AWS service should the company use?
A company has an AWS-hosted website located behind an Application Load Balancer. The company wants to safeguard the website from SQL injection or cross-site scripting. Which AWS service should the company use?
A company wants to establish a security layer in its VPC that will act as a firewall to control subnet traffic. Which AWS service or feature will meet this requirement?
Which AWS service should a cloud practitioner use to receive real-time guidance for provisioning resources, based on AWS best practices related to security, cost optimization, and service limits?
A user discovered that an Amazon EC2 instance is missing an Amazon Elastic Block Store (Amazon EBS) data volume. The user wants to determine when the EBS volume was removed. Which AWS service will provide this information?
Which of these is an AWS global service (not region-specific)?
Under the Shared Responsibility Model, customers are responsible for:
Which AWS service provides DDoS protection?
Which service allows you to manage and rotate encryption keys?
Which AWS service continuously monitors accounts for malicious activity?
Which service enables centralized governance across multiple AWS accounts?
Which AWS service provides real-time recommendations to reduce cost, improve security, and performance?
Which AWS service is used for a content delivery network (CDN)?
Which service records API calls and user activity?
Which service is used for monitoring performance metrics?
Which AWS service lets you define infrastructure as code (templates)?
Which service ensures AWS resources are compliant with company policies?
Which service simplifies multi-account governance with guardrails?
Which AWS service is used for contact centers?
Which AWS service provides object lifecycle management (e.g., auto move to Glacier)?
Which AWS service enables multi-factor authentication (MFA)?
Which AWS service provides a firewall for web applications?
Which AWS service provides automated security assessment of applications?
Which service helps you detect sensitive data such as PII in S3?
Which of the following is NOT part of the Shared Responsibility Model?
Which AWS service lets you connect your on-premises network to AWS over the internet?
Which AWS service enables private dedicated network connections?
Which AWS networking component spans all Availability Zones in a region?
A company wants to store compliance archives for 10 years at the lowest cost. Which service?
A mobile app requires user authentication with social logins (Google, Facebook). Which service?
Which AWS service provides contact tracing for security and compliance?
Which pillar focuses on least privilege access?
Which AWS service provides encryption key management?
Which AWS service gives recommendations for IAM best practices?
Which service monitors AWS accounts for malicious activity?
Which AWS service provides compliance reports (e.g., SOC, PCI DSS)?
Which AWS service helps track configuration changes over time?
Which component of VPC acts like a firewall for EC2 instances?
Which component of VPC allows stateless filtering at subnet level?
Which service helps you set up a private connection between VPCs?
Which AWS service gives serverless monitoring with service maps?
Which AWS service manages account access policies across multiple accounts?
A developer wants to test infrastructure as code. Which service should they use?
A bank wants centralized logging of all AWS API activity for audits. Which service?
Which AWS service helps you easily create, publish, and manage APIs?
What does the AWS Shared Responsibility Model state for patching guest operating systems on EC2?
Which service helps manage multiple AWS accounts from a central location?
What is the main benefit of AWS CloudFront?
Which service helps you discover security misconfigurations in AWS resources automatically?
Which AWS tool provides best-practice checks across cost, performance, and security?
Which AWS service is primarily used for monitoring logs across accounts?
Which service provides real-time metrics for AWS resources?
What does AWS Artifact provide?
Which AWS service can deploy and manage infrastructure as code?
Which AWS service helps mitigate DDoS attacks?
Which AWS service is ideal for video-on-demand streaming globally?
Which service provides a central place to manage compliance across multiple AWS accounts?
Which AWS service helps detect suspicious activity in your AWS accounts?
Which service allows you to securely store and rotate secrets (like DB passwords)?
Which AWS service helps manage access with temporary security credentials?
Which AWS service enables orchestration of workflows across multiple AWS services?
Which service is designed to automatically balance incoming traffic across multiple targets?
Which AWS service helps detect resource configuration drift?
Which AWS service can help protect web applications against SQL injection?
Which AWS service provides guidance for building secure, reliable, and efficient cloud architectures?
Which AWS service helps automate patch management on EC2 instances?
Which AWS service provides centralized log storage from multiple AWS accounts?
What does AWS Shield Standard provide?
Which AWS service provides block-level encryption keys management?
Which AWS service helps secure accounts with MFA?
Which AWS service provides application-level DDoS protection?
Which AWS service provides centralized security and compliance management?
Which AWS service provides dashboards for operational metrics?
Which AWS service allows monitoring compliance using managed rules?
Which AWS service provides encrypted data transfer at the edge?
Which AWS service helps discover and map application dependencies?
Which AWS service helps protect against DDoS attacks?
What is IAM Policy used for?
Which AWS service provides centralized logging of API activity across accounts?
Which service provides a firewall for applications running on AWS?
Which AWS service enables infrastructure as code (IaC)?
Which AWS service detects unusual account activity or potential security risks?
Which AWS tool checks your account for best practices in cost, performance, and security?
Which AWS service can analyze VPC network traffic?
Which service helps secure AWS accounts using multi-factor authentication (MFA)?
Which AWS service helps detect compliance violations?
Which AWS service provides virtual private network connectivity?
Which AWS service enables application performance monitoring?
Which AWS service provides a central dashboard for monitoring metrics and logs?
Which AWS service enables secure access to applications without using VPNs?
Which AWS service helps you manage encryption keys?
Which AWS tool provides recommendations to reduce underutilized resources?
Which AWS service provides infrastructure diagrams automatically?
Which service provides software package scanning for vulnerabilities?
Which AWS service is useful for real-time dashboards on application logs?
Which AWS service helps enforce least privilege access?
Which AWS service provides threat intelligence feeds for GuardDuty?
Which AWS service can help ensure compliance by providing continuous configuration monitoring?
Which AWS service helps you secure sensitive data in S3?
Which AWS service manages infrastructure across multiple accounts with guardrails?
Which AWS service can detect personally identifiable information (PII) in text?
Which AWS service allows customer call centers with AI integration?
Which AWS feature allows you to isolate resources within a virtual network?
Which AWS service provides object-level logging for API calls?
Which AWS service can protect applications against DDoS attacks?
What is the main purpose of AWS Snowball?
A company wants to be alerted when CPU utilization of an EC2 instance exceeds 80%. Which service is used?
Which service helps implement Infrastructure as Code (IaC)?
Which AWS service helps detect unauthorized activity in your AWS environment?
Which service is used for DNS resolution in AWS?
Which service should a company use to securely store and rotate database credentials?
Which service is used to enforce compliance policies automatically?
Which service helps manage encryption keys?
What is the purpose of an Elastic Load Balancer (ELB)?
Which AWS tool provides security best practice checks?
Which AWS service lets you automate incident response with playbooks?
Which AWS service supports continuous integration/continuous delivery (CI/CD)?
Which AWS service helps discover and classify sensitive data in S3?
Which AWS service is used for fraud detection with pre-trained ML models?
Which AWS service helps customers discover, purchase, and deploy third-party software?
Which service provides real-time dashboards to monitor application metrics?
Which AWS service helps centralize logging from multiple sources?
Which AWS service helps automate security assessments?
Which AWS service helps implement a secure firewall for web applications?
Which AWS service manages secrets like API keys and passwords securely?
Which AWS service enables encryption of data in transit between users and CloudFront?
Which AWS tool helps automate compliance reporting?
Which AWS service can detect personally identifiable information (PII) in data?
Which AWS service enables businesses to define and enforce security guardrails?
Which AWS service provides near real-time protection against SQL injection attacks?
Which AWS service allows customers to centralize governance with a preconfigured landing zone?
What does AWS Shield provide?
Which AWS service allows you to manage user identities and permissions centrally?
Which AWS service enables infrastructure as code (IaC)?
What does Amazon GuardDuty provide?
Which AWS tool helps you visualize and optimize costs over time?
What is an edge location in AWS?
What does AWS Artifact provide?
Which AWS service allows for real-time application monitoring and alarms?
Which AWS service provides predictive scaling for EC2 instances?
What is the primary purpose of Amazon Inspector?
Which AWS service helps ensure compliance by tracking resource configurations over time?
Which AWS service allows you to create and manage encryption keys?
Which AWS service allows secure remote access to EC2 instances without SSH keys?
Which AWS service is used to monitor application metrics and create alarms?
Which AWS service helps track resource configuration changes over time?
Which AWS networking service provides a secure, dedicated line from on-premises to AWS?
Which AWS service allows secure VPN connections between on-premises and VPC?
What AWS service is used for domain name system (DNS) resolution?
What AWS tool helps you visualize network topology and troubleshoot?
Which AWS service monitors and detects unauthorized activity using threat intelligence?
Which AWS service continuously scans workloads for security vulnerabilities?
Which AWS service provides DDoS protection?
Which AWS service provides centralized security findings across accounts?
Which AWS service detects sensitive data like PII in S3?
Which AWS service helps organizations manage multiple AWS accounts securely?
Which AWS service provides automated account setup with governance best practices?
Which AWS service automates patching, compliance, and operational tasks?
Which AWS service helps organizations reduce carbon footprint in the cloud?
Which AWS service helps companies track cloud sustainability goals?
Which AWS service lets you test resilience by simulating failures?
Which AWS service helps optimize workload cost, security, and performance with best practices?
The Reliability pillar ensures that:
The Governance Perspective ensures:
What is the best AWS tool for cost visibility and forecasting?
Which AWS service helps identify underutilized resources for cost savings?
What is Elasticity in AWS?
What AWS feature improves fault tolerance?
What AWS feature helps ensure resilience through automation and templates?
Which AWS service allows infrastructure version control and repeatability?
Which AWS service allows running scripts or commands across multiple EC2s?
Which AWS service monitors configuration drift from templates?
What AWS service provides change tracking and auditing of API calls?
Which AWS tool provides centralized operational insights across services?
Which AWS service simplifies automation workflows and remediation actions?
Which service lets you store infrastructure templates centrally and reuse them?
What is Infrastructure as Code (IaC)?
What AWS tool is used for continuous integration and deployment (CI/CD)?
Which AWS service helps monitor application performance and errors?
Which AWS feature supports continuous improvement in workload architecture?
Which IAM entity can be used for assigning permissions to AWS services?
Which AWS service would you use to create a logically isolated section of the AWS Cloud where you can launch AWS resources in your virtual network?
Which of the following AWS services specialize in data migration from on-premises to AWS Cloud? (Select two)
An organization maintains separate VPCs for each of its departments. With expanding business, the organization now wants to connect all VPCs for better departmental collaboration. Which AWS service will help the organization tackle the issue effectively?
Under the AWS Shared Responsibility Model, which of the following is the responsibility of a customer regarding lambda functions?
A financial services company must meet compliance requirements that mandate storing multiple copies of data in geographically distant locations. As the company uses S3 as its main storage service, which of the following represents the MOST resource-efficient solution for this use-case?
Which of the following are components of an AWS Site-to-Site VPN? (Select two)
Which of the following statements are CORRECT regarding Security Groups and Network Access Control Lists (NACLs)? (Select two)
A company has a static website hosted on an S3 bucket in an AWS Region in Asia. Although most of its users are in Asia, now it wants to drive growth globally. How can it improve the global performance of its static website?
Which of the following are recommended best practices for AWS IAM service? (Select two)
An IT company has deployed a static website on S3, but the website is still inaccessible. As a Cloud Practioner, which of the following solutions would you suggest to address this issue?
A medical device company is looking for a durable and cost-effective way of storing their historic data. Due to compliance requirements, the data must be stored for 10 years. Which AWS Storage solution will you suggest?
A cyber-security agency uses AWS Cloud and wants to carry out security assessments on their own AWS infrastructure without any prior approval from AWS. Which of the following describes/facilitates this practice?
A financial services enterprise plans to enable Multi-Factor Authentication (MFA) for its employees. For ease of travel, they prefer not to use any physical devices to implement MFA. Which of the below options is best suited for this use case?
Which of the following are correct statements regarding the AWS Shared Responsibility Model? (Select two)
Data encryption is automatically enabled for which of the following AWS services? (Select two)?
Amazon Macie discovers and protects your sensitive data on which of the following AWS services?
Which of the following is a part of the AWS Global Infrastructure?
Which AWS service will you use if you have to move large volumes of on-premises data to AWS Cloud from a remote location with limited bandwidth?
An AWS hardware failure has impacted one of your EBS volumes. Which AWS service will alert you of the affected resources and provide a remedial action?
According to the AWS Shared Responsibility Model, which of the following are responsibilities of the customer (select 2)?
A multi-national company has its business-critical data stored on a fleet of Amazon EC2 instances, in various countries, configured in region-specific compliance rules. To demonstrate compliance, the company needs to submit historical configurations on a regular basis. Which AWS service is best suited for this requirement?
Which of the following AWS services are regional in scope? (Select two)
An e-commerce company wants to review the Payment Card Industry (PCI) reports on AWS Cloud. Which AWS resource can be used to address this use-case?
A company recently deployed an Amazon RDS instance in its VPC. The company needs to implement a stateful firewall to limit traffic to the private corporate network. Which AWS service or feature should the company use to limit network traffic directly to its RDS instance?
Which AWS service should be used to monitor Amazon EC2 instances for CPU and network utilization?
A company wants to ensure that two Amazon EC2 instances are in separate data centers with minimal communication latency between the data centers. How can the company meet this requirement?
Which AWS service can be used at no additional cost?
A company wants to log in securely to Linux Amazon EC2 instances. How can the company accomplish this goal?
A company is building AWS architecture to deliver real-time data feeds from an on-premises data center into an application that runs on AWS. The company needs a consistent network connection with minimal latency. What should the company use to connect the application and the data center to meet these requirements?
Which AWS service can generate information that can be used by external auditors?
A company needs to manage multiple logins across AWS accounts within the same organization in AWS Organizations. Which AWS service should the company use to meet this requirement?
A company uses a third-party identity provider (IdP). The company wants to provide its employees with access to AWS accounts and services without requiring another set of login credentials. Which AWS service will meet this requirement?
Which of the following are AWS best practice recommendations for the use of AWS Identity and Access Management (IAM)? (Choose two.)
A company is building a web application using AWS. Which AWS service will help prevent network layer DDoS attacks against the web application?
A company runs an application on AWS that performs batch jobs. The application is fault-tolerant and can handle interruptions. The company wants to optimize the cost to run the application. Which AWS offering will meet these requirements?
A company is learning about its responsibilities that are related to the management of Amazon EC2 instances. Which tasks for EC2 instances are the company’s responsibility, according to the AWS shared responsibility model? (Choose two.)
A user wants to invoke an AWS Lambda function when an Amazon EC2 instance enters the “stopping” state. Which AWS service is appropriate for this use case?
Which AWS service or feature supports governance, compliance, and risk auditing of AWS accounts?
A company needs a threat detection service that will continuously monitor its AWS accounts, workloads, and Amazon S3 buckets for malicious activity and unauthorized behavior. Which AWS service meets these requirements?
Which AWS service supports user sign-up functionality and authentication to mobile and web applications?
Which task is the responsibility of the customer, according to the AWS shared responsibility model?
A company wants to manage its cloud resources by using infrastructure as code (IaC) templates. The company needs to meet compliance requirements. Which AWS service should the company use to meet these requirements?
A systems administrator wants to monitor the CPU utilization of a company's Amazon EC2 instances. Which AWS service can provide this information?
Which component must be attached to a VPC to enable inbound internet access?
An AWS user wants to proactively detect when an instance or account might be compromised or if there are threats from attacks. Which AWS service should the user choose?
A company must archive its documents by using a write-once, read-many (WORM) model to meet legal and compliance obligations. Which feature of Amazon S3 can the company use to meet this requirement?
A user has been granted permission to change their own IAM user password. Which AWS services can the user use to change the password? (Choose two.)
A company is requesting Payment Card Industry (PCI) reports that validate the operating effectiveness of AWS security controls. How should the company obtain these reports?
A company wants to maintain bandwidth throughput and provide a more consistent network experience than public internet-based connections. Which AWS service should the company choose?
A company needs to perform an audit of recent AWS account activity. The audit will investigate who initiated an event and what actions were performed. Which AWS service should the company use to meet these requirements?
Which AWS service can companies use to subscribe to RSS feeds for updates about all AWS service issues?
A company wants to centrally manage its employee's access to multiple AWS accounts. Which AWS service or feature should the company use to meet this requirement?
A company with multiple accounts and teams wants to set up a new multi-account AWS environment. Which AWS service supports this requirement?
Which AWS service or feature gives users the ability to provision AWS infrastructure programmatically?
Which AWS service or feature allows a company to have its own logically isolated section of the AWS Cloud?
A company needs an event history of which AWS resources the company has created. Which AWS service will provide this information?
A company's cloud environment includes Amazon EC2 instances and Application Load Balancers. The company wants to improve protections for its cloud resources against DDoS attacks. The company also wants to have real-time visibility into any DDoS attacks. Which AWS service will meet these requirements?
Which AWS service or feature can be used to monitor for potential disk write spikes on a system that is running on Amazon EC2?
A developer needs to interact with AWS by using the AWS CLI. Which security feature or AWS service must be provisioned in the developer's account to meet this requirement?
A food delivery company needs to block users in certain countries from accessing its website. Which AWS service should the company use to meet this requirement?
Which tasks are the responsibility of AWS according to the AWS shared responsibility model? (Choose two.)
A company needs to set up dedicated network connectivity between its on-premises data center and the AWS Cloud. The network cannot use the public internet. Which AWS service or feature will meet these requirements?
Which tasks are the customer’s responsibility, according to the AWS shared responsibility model? (Choose two.)
A developer has been hired by a large company and needs AWS credentials. Which are security best practices that should be followed? (Choose two.)
A systems administrator created a new IAM user for a developer and assigned the user an access key instead of a user name and password. What is the access key used for?
A company has teams that have different job roles and responsibilities. The company’s employees often change teams. The company needs to manage permissions for the employees so that the permissions are appropriate for the job responsibilities. Which IAM resource should the company use to meet this requirement with the LEAST operational overhead?
An external auditor has requested that a company provide a list of all its IAM users, including the status of users' credentials and access keys. What is the SIMPLEST way to provide this information?
Who is responsible for managing IAM user access and secret keys according to the AWS shared responsibility model?
An Amazon EC2 instance previously used for development is inaccessible and no longer appears in the AWS Management Console. Which AWS service should be used to determine what action made this EC2 instance inaccessible?
A company wants to generate a list of IAM users. The company also wants to view the status of various credentials that are associated with the users, such as password, access keys, and multi-factor authentication (MFA) devices. Which AWS service or feature will meet these requirements?
A company needs to connect its on-premises data center to the AWS Cloud. The company needs a dedicated, low-latency connection with consistent network performance. Which AWS service will meet these requirements?
Which AWS service or tool will monitor AWS resources and applications in real time?
Which option is a responsibility of AWS under the AWS shared responsibility model?
Which AWS service or resource can identify and provide reports on IAM resources in one AWS account that is shared with another AWS account?
A company wants to manage sign-in security for workforce users. The company needs to create workforce users and centrally manage their access across all the company's AWS accounts and applications. Which AWS service will meet these requirements?
A company is launching a mobile app in the AWS Cloud. The company wants the app's users to sign in through social media identity providers (IdPs). Which AWS service will meet this requirement?
A company has deployed a web application to Amazon EC2 instances. The EC2 instances have low usage. Which AWS service or feature should the company use to rightsize the EC2 instances?
A company needs to check for IAM access keys that have not been rotated recently. Which AWS service should the company use to meet this requirement?
A company runs many Amazon EC2 instances in its VPC. The company wants to use a native AWS security resource to control network traffic between certain EC2 instances. Which AWS service or feature will meet this requirement?
A company wants to use a managed service to identify and protect sensitive data that is stored in Amazon S3. Which AWS service will meet these requirements?
Which AWS service can a company use to manage encryption keys in the cloud?
A company wants to enhance security by launching a third-party ISP intrusion detection system from its AWS account. Which AWS service or resource should the company use to meet this requirement?
Which AWS service or resource can a company use to deploy AWS WAF rules?
A company wants to build an application that uses AWS Lambda to run Python code. Under the AWS shared responsibility model, which tasks will be the company’s responsibility? (Choose two.)
A company wants to use a centralized AWS service to enforce compliance with the organizational business standards. The company wants to use an AWS service that can govern and control who can deploy, manage, and decommission AWS resources. Which AWS service will meet these requirements?
What does "security of the cloud” refer to in the AWS shared responsibility model?
A company wants its Amazon EC2 instances to be in different locations but share the same geographic area. The company also wants to use multiple power grids and independent networking connectivity for the EC2 instances. Which solution meets these requirements?
A company stores a large amount of data that auditors access only twice each year. Which Amazon S3 storage class should the company use to store the data with the LOWEST cost?
Which action should a company take to improve security in its AWS account?
Which of the following are ways to improve security on AWS? (Choose two.)
According to security best practices, how should an Amazon EC2 instance be given access to an Amazon S3 bucket?
Which AWS service or feature allows a user to establish a dedicated network connection between a company's on-premises data center and the AWS Cloud?
A company wants to monitor for misconfigured security groups that are allowing unrestricted access to specific ports. Which AWS service will meet this requirement?
Which AWS service or tool can be used to set up a firewall to control traffic going into and coming out of an Amazon VPC subnet?
A developer has been hired by a large company and needs AWS credentials. Which are security best practices that should be followed? (Choose two.)
A company wants to design a centralized storage system to manage the configuration data and passwords for its critical business applications. Which AWS service or capability will meet these requirements MOST cost-effectively?
Which AWS service or feature allows users to create new AWS accounts, group multiple accounts to organize workflows, and apply policies to groups of accounts?
A company wants to block SQL injection attacks. Which AWS service or feature should the company use to meet this requirement?
A company wants a unified tool to provide a consistent method to interact with AWS services. Which AWS service or tool will meet this requirement?
A company needs to evaluate its AWS environment and provide best practice recommendations in five categories: cost, performance, service limits, fault tolerance and security. Which AWS service can the company use to meet these requirements?
Which task is a customer's responsibility, according to the AWS shared responsibility model?
Which AWS service enables users to check for vulnerabilities on Amazon EC2 instances by using predefined assessment templates?
Which AWS service or feature can a company use to apply security rules to specific Amazon EC2 instances?
A company hosts an application on multiple Amazon EC2 instances. The application uses Amazon Simple Notification Service (Amazon SNS) to send messages. Which AWS service or feature will give the application permission to access required AWS services?
A company needs to centrally configure and manage Amazon VPC security groups across multiple AWS accounts within an organization in AWS Organizations. Which AWS service should the company use to meet these requirements?
Which AWS service or resource can be used to identify services that have been used by a user within a specified date range?
What can a cloud practitioner use to retrieve AWS security and compliance documents and submit them as evidence to an auditor or regulator?
A company uses Amazon S3 to store records that can contain personally identifiable information (PII). The company wants a solution that can monitor all S3 buckets for PII and immediately alert staff about vulnerabilities. Which AWS service will meet these requirements?
A company has a managed IAM policy that does not grant the necessary permissions for users to accomplish required tasks. How can this be resolved?
A company needs to run a pre-installed third-party firewall on an Amazon EC2 instance. Which AWS service or feature can provide this solution?
A company wants to migrate unstructured data to AWS. The data needs to be securely moved with inflight encryption and end-to-end data validation. Which AWS service will meet these requirements?
Which task is a responsibility of AWS, according to the AWS shared responsibility model?
Under the AWS shared responsibility model, which of the following is an example of security in the AWS Cloud?
Treating infrastructure as code in the AWS Cloud allows users to:
Which activity is a customer responsibility in the AWS Cloud according to the AWS shared responsibility model?
An application runs on multiple Amazon EC2 instances that access a shared file system simultaneously. Which AWS storage service should be used?
A web application is hosted on AWS using an Elastic Load Balancer, multiple Amazon EC2 instances, and Amazon RDS. Which security measures fall under the responsibility of AWS? (Choose two.)
Using AWS Config to record, audit, and evaluate changes to AWS resources to enable traceability is an example of which AWS Well-Architected Framework pillar?
Which of the following are AWS compute services? (Choose two.)
Which services can be used to deploy applications on AWS? (Choose two.)
Which AWS service should a cloud practitioner use to identify security vulnerabilities of an AWS account?
Which AWS service can help a company detect an outage of its website servers and redirect users to alternate servers?
Under the AWS shared responsibility model, which task is the customer's responsibility when managing AWS Lambda functions?
Which of the following is an AWS best practice for managing an AWS account root user?
An application is receiving SQL injection attacks from multiple external resources. Which AWS service or feature can help automate mitigation against these attacks?
Which controls are shared under the AWS shared responsibility model? (Choose two.)
Which AWS service or tool does AWS Control Tower use to create resources?
A company needs to identify the last time that a specific user accessed the AWS Management Console. Which AWS service will provide this information?
A company wants to securely store Amazon RDS database credentials and automatically rotate user passwords periodically. Which AWS service or capability will meet these requirements?
Which controls are the responsibility of both AWS and AWS customers, according to the AWS shared responsibility model? (Select TWO.)
A retail company has recently migrated its website to AWS. The company wants to ensure that it is protected from SQL injection attacks. The website uses an Application Load Balancer to distribute traffic to multiple Amazon EC2 instances. Which AWS service or feature can be used to create a custom rule that blocks SQL injection attacks?
A company wants to implement controls (guardrails) in a newly created AWS Control Tower landing zone. Which AWS services or features can the company use to create and define these controls (guardrails)? (Select TWO.)
Which AWS service is always free of charge for users?
A security engineer wants a single-tenant AWS solution to create, control, and manage their own cryptographic keys to meet regulatory compliance requirements for data security. Which AWS service should the engineer use?
A company wants to create a set of custom dashboards to collect metrics to monitor its applications. Which AWS service will meet these requirements?
Which of the following is a characteristic of the AWS account root user?
Which AWS service can a company use to manage encryption keys in the cloud?
A company plans to migrate its custom marketing application and order-processing application to AWS. The company needs to deploy the applications on different types of instances with various configurations of CPU, memory, storage, and networking capacity. Which AWS service should the company use to meet these requirements?
Which option is AWS responsible for under the AWS shared responsibility model?
Which AWS tool or feature acts as a VPC firewall at the subnet level?
A company is hosting a web application on Amazon EC2 instances. The company wants to implement custom conditions to filter and control inbound web traffic. Which AWS service will meet these requirements?
Which of the following actions are controlled with AWS Identity and Access Management (IAM)? (Choose two.)
Which AWS service offers threat detection and continuously monitors for malicious activity and unauthorized behavior in AWS accounts?
A company has an online shopping website and wants to store customers' credit card data. The company must meet Payment Card Industry (PCI) standards. Which service can the company use to access AWS compliance documentation?
Which AWS service can report how AWS resource configurations have changed over time?
Who is responsible for decommissioning end-of-life underlying storage devices that are used to host data on AWS?
Which activity can companies complete by using AWS Organizations?
A user is using AWS account root user credentials to try to close an AWS account that is managed by AWS Organizations. However, the attempt is unsuccessful. What could cause this attempt to be unsuccessful?
A company needs to securely store important credentials that an application uses to connect users to a database. Which AWS service can meet this requirement with the MINIMAL amount of operational overhead?
Which AWS service or feature can be used to control inbound and outbound traffic on an Amazon EC2 instance?
Which VPC component provides a layer of security at the subnet level?
A company wants to set up a high-speed connection between its data center and its applications that run on AWS. The company must not transfer data over the internet. Which action should the company take to meet these requirements?
Which task can only an AWS account root user perform?
Which of these provides you with access to AWS auditor issued reports, certifications, accreditations and other third-party attestations?
What is the main benefit of AWS Global Accelerator?
What’s the purpose of Elastic Load Balancing (ELB)?
Which security technology involves taking data of an arbitrary size or length and converting it to a fixed size?
Which AWS support service gives a report on configuration compliance with best practices?
What type of encryption mechanism is used for data that is hosted and stored on a system?
What should also be configured to improve the security of the root user for your account?
Which AWS service will inspect web traffic to your applications and apply rules and security controls based on the contents of the traffic?
Which AWS service provides central collection and auditing for event and log data from your AWS services?
Where would you find AMIs provided by vendors for use within AWS?
Your company has decided to use AWS S3 to store archived data that is required for regulatory compliance but is not accessed otherwise. However, when it is required, it must be produced within 24 hours. Which S3 storage type would be the most cost-effective choice to meet these requirements?
In order to use the AWS CLI, what is required, regardless of the platform you are using to originate your CLI commands? (Choose two.)
As part of an external audit, you need to provide a list of all users and the access they have within your AWS account. Which report from the IAM console would you generate to provide the auditors this information?
Which of the following technologies would be used as a security protection for data in transit?
When looking at the AWS Management Console, you are not seeing services that you have provisioned. Which of the following could be a reason why?
You have a rule in a security group that allows HTTPS requests into an EC2 instance. Which statement is true about how the security policy applies to responses to the request?
You need to be able to quickly verify if data objects in AWS are identical across multiple regions in S3. Which type of algorithm would allow you to quickly and easily accomplish this?
You want to run a dynamic website in AWS but do not want to be responsible for deploying or maintaining any servers or software beyond your own application code. Which of the following AWS services would allow you to accomplish this? (Choose two.)
personal use. Which AWS service would be valuable to investigate their activities?
AWS incorporates a variety of robust security services to counter common types of web attacks. Which type of attack is the AWS Shield service designed to protect against?
What is the easiest method to implement encryption at rest within S3 from the perspective of the user?
When users are created via the IAM console, what can be used to assign granular levels of access within a service?
Which component of AWS Systems Manager provides a consolidated view of data from sources such as CloudTrail and CloudWatch to help with the investigation of operational issues?
Security groups and access control lists (ACLs) are two means of applying security rules within AWS. Which of the following statements is true?
Under the AWS Shared Responsibility Model and an IaaS implementation, which of the following areas of responsibility reside with the customer? (Choose two.)
The use of multifactor authentication is imperative to protect accounts with administrative access, especially the root user for your AWS account. Along with a password, which of the following could be used to fulfill multifactor requirements?
When adding new users in IAM, you want to be able to assign a set of capabilities to them and keep them uniform between those users. Which feature of IAM would you use to accomplish this?
You want to do a compliance check with your configurations against best practices. Which AWS service would you use to accomplish this?
You need to offer easy access to your AWS systems from anywhere, but you do not want to deal with many of the problems of BYOD and the security issues associated with it. Which AWS service would you investigate to accomplish this?
Which AWS security service would allow you to apply processing rules to web traffic based upon the contents or type of request?
Which of the following is TRUE about AWS Trusted Advisor checks for the "Fault Tolerance" category?
A company uses Amazon S3 for storing customer data. According to the Shared Responsibility Model, which of the following is SOLELY AWS's responsibility?
A company wants to implement a policy where no single person can both approve and execute a production deployment. This is a security principle known as:
Which AWS service continuously evaluates your AWS environment against a set of security best practices and provides a prioritized list of findings with remediation guidance?
A company's developer accidentally deleted a critical IAM role. They need to identify who deleted it and when. Which service provides this information?
Which of the following BEST describes the concept of "zero trust" security as applied to AWS?
A company wants to ensure that when a new EC2 instance is launched, it automatically receives a security scan within 24 hours. Which AWS service performs automated vulnerability scanning of new EC2 instances?