Security and Compliance — page 4
What can a cloud practitioner use to retrieve AWS security and compliance documents and submit them as evidence to an auditor or regulator?
Which AWS service is used to track, record, and audit con+guration changes made to AWS resources?
What can a user accomplish using AWS CloudTrail?
Which maintenance task is the customer’s responsibility, according to the AWS shared responsibility model?
Which of the following are bene+ts of AWS Trusted Advisor? (Choose two.)
Which of the following is the customer's responsibility under the AWS shared responsibility model? (Choose two.)
A company uses Amazon S3 to store records that can contain personally identi+able information (PII). The company wants a solution that can monitor all S3 buckets for PII and immediately alert staff about vulnerabilities. Which AWS service will meet these requirements?
Which task can a company perform by using security groups in the AWS Cloud?
A company has a managed IAM policy that does not grant the necessary permissions for users to accomplish required tasks. How can this be resolved?
A company needs to run a pre-installed third-party +rewall on an Amazon EC2 instance. Which AWS service or feature can provide this solution?
Which of the following is a characteristic of the AWS account root user?
A company wants to migrate unstructured data to AWS. The data needs to be securely moved with iniight encryption and end-to-end data validation. Which AWS service will meet these requirements?
Which task is a responsibility of AWS, according to the AWS shared responsibility model?
What does the Amazon S3 Intelligent-Tiering storage class offer?
A solutions architect needs to maintain a ieet of Amazon EC2 instances so that any impaired instances are replaced with new ones. Which AWS service should the solutions architect use?
A company wants a report that lists the status of multi-factor authentication (MFA) devices that all users in the company's AWS account use. Which AWS feature or service will meet this requirement?
A company wants to use machine learning capabilities to analyze log data from its Amazon EC2 instances and efficiently conduct security investigations. Which AWS service will meet these requirements?
Which AWS service or feature can a user con+gure to limit network access at the subnet level?
Which task is the customer's responsibility, according to the AWS shared responsibility model?
Which tasks are the customer's responsibility, according to the AWS shared responsibility model? (Choose two.)
A systems administrator created a new IAM user for a developer and assigned the user an access key instead of a user name and password. What is the access key used for?
A company has teams that have different job roles and responsibilities. The company's employees often change teams. The company needs to manage permissions for the employees so that the permissions are appropriate for the job responsibilities. Which IAM resource should the company use to meet this requirement with the LEAST operational overhead?
Which maintenance task is the customer's responsibility, according to the AWS shared responsibility model?
Which of the following is the customer's responsibility under the AWS shared responsibility model? (Choose two.)
An external auditor has requested that a company provide a list of all its IAM users, including the status of users' credentials and access keys. What is the SIMPLEST way to provide this information?
Which task can a company perform by using security groups in the AWS Cloud?
Which of the following are features of network ACLs as they are used in the AWS Cloud? (Choose two.)
Who is responsible for managing IAM user access and secret keys according to the AWS shared responsibility model?
Which of the following is a characteristic of the AWS account root user?
An Amazon EC2 instance previously used for development is inaccessible and no longer appears in the AWS Management Console. Which AWS service should be used to determine what action made this EC2 instance inaccessible?
Under the shared responsibility model, which of the following is the customer responsible for?
Which service enables risk auditing by continuously monitoring and logging account activity, including user actions in the AWS Management Console and AWS SDKs?
Which of the following can limit Amazon Storage Service (Amazon S3) bucket access to specific users?
Which AWS feature will reduce the customer's total cost of ownership (TCO)?
Where are AWS compliance documents, such as an SOC 1 report, located?
Under the AWS shared responsibility model, which of the following activities are the customer's responsibility? (Choose two.)
AWS supports which of the following methods to add security to Identity and Access Management (IAM) users? (Choose two.)
Which of the following is a shared control between the customer and AWS?
Which AWS IAM feature allows developers to access AWS services through the AWS CLI?
Which service should a customer use to consolidate and centrally manage multiple AWS accounts?
For which auditing process does AWS have sole responsibility?
Which of the following is the customer's responsibility under the AWS shared responsibility model?
A customer is deploying a new application and needs to choose an AWS Region. Which of the following factors could influence the customer's decision? (Choose two.)
What is the AWS customer responsible for according to the AWS shared responsibility model?
Which of the following Identity and Access Management (IAM) entities is associated with an access key ID and secret access key when using AWS Command Line Interface (AWS CLI)?
Which of the following security-related services does AWS offer? (Choose two.)
Which AWS managed service is used to host databases?
Under the shared responsibility model, which of the following is a shared control between a customer and AWS?
Which AWS service allows companies to connect an Amazon VPC to an on-premises data center?
Which task is AWS responsible for in the shared responsibility model for security and compliance?
Where should a company go to search software listings from independent software vendors to find, test, buy and deploy software that runs on AWS?
If a customer needs to audit the change management of AWS resources, which of the following AWS services should the customer use?
What is Amazon CloudWatch?
Where can AWS compliance and certification reports be downloaded?
Which of the following steps should be taken by a customer when conducting penetration testing on AWS?
How would an AWS customer easily apply common access controls to a large set of users?
Which AWS service would you use to obtain compliance reports and certificates?
Under the shared responsibility model, which of the following tasks are the responsibility of the AWS customer? (Choose two.)
Which of the following security measures protect access to an AWS account? (Choose two.)
Which service provides a hybrid storage service that enables on-premises applications to seamlessly use cloud storage?
Which of the following is a component of the shared responsibility model managed entirely by AWS?
Which AWS services can be used to gather information about AWS account activity? (Choose two.)
Which of the following can limit Amazon Simple Storage Service (Amazon S3) bucket access to specific users?
Which of the following tasks is the responsibility of AWS?
Which services are parts of the AWS serverless platform?
According to the AWS shared responsibility model, what is the sole responsibility of AWS?
Which AWS IAM feature is used to associate a set of permissions with multiple users?
Which of the following can a customer use to enable single sign-on (SSO) to the AWS Console?
Which of the following benefits does the AWS Compliance program provide to AWS customers? (Choose two.)
Which of the following services provides on-demand access to AWS compliance reports?
As part of the AWS shared responsibility model, which of the following operational controls do users fully inherit from AWS?
Under the shared responsibility model, which of the following tasks are the responsibility of the customer? (Choose two.)
Which scenarios represent the concept of elasticity on AWS? (Choose two.)
What function do security groups serve related to Amazon Elastic Compute Cloud (Amazon EC2) instance security?
Which methods can be used to identify AWS costs by departments? (Choose two.)
Under the AWS shared responsibility model, customer responsibilities include which one of the following?
Under the AWS shared responsibility model, customers are responsible for which aspects of security in the cloud? (Choose two.)
Which AWS hybrid storage service enables your on-premises applications to seamlessly use AWS Cloud storage through standard file-storage protocols?
What is a responsibility of AWS in the shared responsibility model?
What does it mean to grant least privilege to AWS IAM users?
How can a customer increase security to AWS account logons? (Choose two.)
What AWS service would be used to centrally manage AWS access across multiple accounts?
What can users access from AWS Artifact?
What is an advantage of using the AWS Cloud over a traditional on-premises solution?
Which service's PRIMARY purpose is software version control?
Which solution provides the FASTEST application response times to frequently accessed data to users in multiple AWS Regions?
Which AWS service provides a self-service portal for on-demand access to AWS compliance reports?
How can a user protect against AWS service disruptions if a natural disaster affects an entire geographic area?
Which of the following services have Distributed Denial of Service (DDoS) mitigation features? (Choose two.)
According to the AWS shared responsibility model, what is AWS responsible for?
Which AWS tool will identify security groups that grant unrestricted Internet access to a limited list of ports?
Which AWS service can be used to generate alerts based on an estimated monthly bill?
Which of the following is the responsibility of AWS?
Which of the following is an advantage of using AWS?
Which services manage and automate application deployments on AWS? (Choose two.)
What tasks should a customer perform when that customer suspects an AWS account has been compromised? (Choose two.)
A company wants to monitor the CPU usage of its Amazon EC2 resources. Which AWS service should the company use?
What is an AWS Identity and Access Management (IAM) role?
Which of the following allows users to provision a dedicated network connection from their internal network to AWS?
Which services use AWS edge locations? (Choose two.)
Which service would provide network connectivity in a hybrid architecture that includes the AWS Cloud?
Under the shared responsibility model; which of the following areas are the customer's responsibility? (Choose two.)
Which service enables customers to audit and monitor changes in AWS resources?
Which AWS service identifies security groups that allow unrestricted access to a user's AWS resources?
According to the AWS shared responsibility model, who is responsible for configuration management?
A user is running an application on AWS and notices that one or more AWS-owned IP addresses is involved in a distributed denial-of-service (DDoS) attack. Who should the user contact FIRST about this situation?
Access keys in AWS Identity and Access Management (IAM) are used to:
Which AWS service offers on-demand access to AWS security and compliance reports?
Which AWS service handles the deployment details of capacity provisioning, load balancing, Auto Scaling, and application health monitoring?
Which AWS service provides inbound and outbound network ACLs to harden external connectivity to Amazon EC2?
Under the AWS shared responsibility model, AWS is responsible for which security-related task?
A company wants to migrate its applications to a VPC on AWS. These applications will need to access on-premises resources. What combination of actions will enable the company to accomplish this goal? (Choose two.)
A web application running on AWS has been spammed with malicious requests from a recurring set of IP addresses. Which AWS service can help secure the application and block the malicious traffic?
A company requires a dedicated network connection between its on-premises servers and the AWS Cloud. Which AWS service should be used?
A Cloud Practitioner must determine if any security groups in an AWS account have been provisioned to allow unrestricted access for specific ports. What is the SIMPLEST way to do this?
A user needs an automated security assessment report that will identify unintended network access to Amazon EC2 instances and vulnerabilities on those instances. Which AWS service will provide this assessment report?
How can a company isolate the costs of production and non-production workloads on AWS?
A Cloud Practitioner needs a consistent and dedicated connection between AWS resources and an on-premises system. Which AWS service can fulfill this requirement?
Within the AWS shared responsibility model, who is responsible for security and compliance?
What does AWS Shield Standard provide?
A company wants to build its new application workloads in the AWS Cloud instead of using on-premises resources. What expense can be reduced using the AWS Cloud?
Which AWS service allows users to identify the changes made to a resource over time?
What is one of the customer's responsibilities according to the AWS shared responsibility model?
How can the AWS Cloud increase user workforce productivity after migration from an on-premises data center?
Where should users report that AWS resources are being used for malicious purposes?
Which AWS service needs to be enabled to track all user account changes within the AWS Management Console?
Which of the following are recommended practices for managing IAM users? (Choose two.)
Which of the following are components of Amazon VPC? (Choose two.)
Which of the following will enhance the security of access to the AWS Management Console? (Choose two.)
The AWS Trusted Advisor checks include recommendations regarding which of the following? (Choose two.)
Which functions can users perform using AWS KMS?
How does AWS Trusted Advisor provide guidance to users of the AWS Cloud? (Choose two.)
Which AWS services provide a user with connectivity between the AWS Cloud and on-premises resources? (Choose two.)
Which Amazon VPC feature enables users to capture information about the IP traffic that reaches Amazon EC2 instances?
Which AWS service can be used to automatically scale an application up and down without making capacity planning decisions?
A user must meet compliance and software licensing requirements that state a workload must be hosted on a physical server. Which Amazon EC2 instance pricing option will meet these requirements?
Which AWS service will provide a way to generate encryption keys that can be used to encrypt data? (Choose two.)
What can assist in evaluating an application for migration to the cloud? (Choose two.)
Which AWS service helps users meet contractual and regulatory compliance requirements for data security by using dedicated hardware appliances within the AWS Cloud?
Under the AWS shared responsibility model, the customer manages which of the following? (Choose two.)
Amazon Route 53 enables users to:
Which AWS service helps identify malicious or unauthorized activities in AWS accounts and workloads?
Which actions represent best practices for using AWS IAM? (Choose two.)
Which AWS feature or service can be used to capture information about incoming and outgoing traffic in an AWS VPC infrastructure?
A company wants to use an AWS service to monitor the health of application endpoints, with the ability to route traffic to healthy regional endpoints to improve application availability. Which service will support these requirements?
Which service can be used to monitor and receive alerts for AWS account root user AWS Management Console sign-in events?
Each department within a company has its own independent AWS account and its own payment method. New company leadership wants to centralize departmental governance and consolidate payments. How can this be achieved using AWS services or features?
An ecommerce company anticipates a huge increase in web traffic for two very popular upcoming shopping holidays. Which AWS service or feature can be configured to dynamically adjust resources to meet this change in demand?
Which AWS service enables users to securely connect to AWS resources over the public internet?
Which tool is used to forecast AWS spending?
Which AWS service will help users determine if an application running on an Amazon EC2 instance has sufficient CPU capacity?
Which tasks are the customer's responsibility in the AWS shared responsibility model? (Choose two.)
Which AWS service or feature can enhance network security by blocking requests from a particular network for a web application on AWS? (Choose two.)
A company needs an Amazon S3 bucket that cannot have any public objects due to compliance requirements. How can this be accomplished?
Under the AWS shared responsibility model, which of the following is a customer responsibility?
Under the AWS shared responsibility model, the security and patching of the guest operating system is the responsibility of:
Which AWS service makes it easy to create and manage AWS users and groups, and provide them with secure access to AWS resources at no charge?
Which AWS service provides on-demand of AWS security and compliance documentation?
A user needs to generate a report that outlines the status of key security checks in an AWS account. The report must include: The status of Amazon S3 bucket permissions. Whether multi-factor authentication is enabled for the AWS account root user. If any security groups are configured to allow unrestricted access. Where can all this information be found in one location?
Which AWS service is used to automate configuration management using Chef and Puppet?
Which AWS services can be used to provide network connectivity between an on-premises network and a VPC? (Choose two.)
Under the AWS shared responsibility model, which of the following are customer responsibilities? (Choose two.)
A company has deployed several relational databases on Amazon EC2 instances. Every month, the database software vendor releases new security patches that need to be applied to the databases. What is the MOST efficient way to apply the security patches?
Which AWS hybrid storage service enables a user's on-premises applications to seamlessly use AWS Cloud storage?
Which of the following acts as a virtual firewall at the Amazon EC2 instance level to control traffic for one or more instances?
What is the most efficient way to establish network connectivity from on-premises to multiple VPCs in different AWS Regions?
Which AWS service or feature helps restrict the AWS services, resources, and individual API actions the users and roles in each member account can access?
A user would like to encrypt data that is received, stored, and managed by AWS CloudTrail. Which AWS service will provide this capability?
What credential components are required to gain programmatic access to an AWS account? (Choose two.)
Which AWS service provides the ability to detect inadvertent data leaks of personally identifiable information (PII) and user credential data?
Which of the following describes a security best practice that can be implemented using AWS IAM?
A company needs protection from expanded distributed denial of service (DDoS) attacks on its website and assistance from AWS experts during such events. Which AWS managed service will meet these requirements?
Under the AWS shared responsibility model, what are the customer's responsibilities? (Choose two.)
Which of the following allows an application running on an Amazon EC2 instance to securely write data to an Amazon S3 bucket without using long term credentials?
AWS Trusted Advisor provides recommendations on which of the following? (Choose two.)
Which of the following tasks can only be performed after signing in with AWS account root user credentials? (Choose two.)
A company is launching an e-commerce site that will store and process credit card data. The company requires information about AWS compliance reports and AWS agreements. Which AWS service provides on-demand access to these items?
Which AWS service can be used to track unauthorized API calls?
A user needs to regularly audit and evaluate the setup of all AWS resources, identify non-compliant accounts, and be notified when a resource changes. Which AWS service can be used to meet these requirements?
What is the recommended method to request penetration testing on AWS resources?
A user needs to automatically discover, classify, and protect sensitive data stored in Amazon S3. Which AWS service can meet these requirements?
Which components are required to build a successful site-to-site VPN connection on AWS? (Choose two.)
What is the MOST effective resource for staying up to date on AWS security announcements?
Which AWS managed services can be used to extend an on-premises data center to the AWS network? (Choose two.)
During a compliance review, one of the auditors requires a copy of the AWS SOC 2 report. Which service should be used to submit this request?
A company has a 500 TB image repository that needs to be transported to AWS for processing. Which AWS service can import this data MOST cost-effectively?
Under the AWS shared responsibility model, which of the following is a responsibility of AWS?
Which AWS service can be used to track resource changes and establish compliance?
A company wants to ensure that AWS Management Console users are meeting password complexity requirements. How can the company configure password complexity?
Under the AWS shared responsibility model, which of the following is the customer's responsibility?
Which of the following tasks is required to deploy a PCI-compliant workload on AWS?
A web developer is concerned that a DDoS attack could target an application. Which AWS services or features can help protect against such an attack? (Choose two.)
Which tool can be used to identify scheduled changes to the AWS infrastructure?
Which of the following is the customer's responsibility when using Amazon RDS?
What is the customer's responsibility when using AWS Lambda?
A company wants to be notified when its AWS Cloud costs or usage exceed defined thresholds. Which AWS service will support these requirements?
Which AWS services offer compute capabilities? (Choose two.)
A company wants to connect to AWS over a private, low-latency connection from its remote office. What is the recommended method to meet these requirements?
An external auditor has requested that a company provide a list of all its IAM users, including the status of users' credentials and access keys. What it the SIMPLEST way to provide this information?
A company wants to track AWS resource configuration changes for compliance reasons. Which AWS feature can be used to meet this requirement?
The AWS IAM best practice for granting least privilege is to:
Which AWS service or feature can be used to prevent SQL injection attacks?
Which AWS service automatically handles application health monitoring?
A company needs to track the activity in its AWS accounts, and needs to know when an API call is made against its AWS resources. Which AWS tool or service can be used to meet these requirements?
A company hosts images in an Amazon S3 bucket for a public-facing website that is viewed by millions of users around the globe. Which AWS service will deliver this content with reduced latency?
A company wants to securely access an Amazon S3 bucket from an Amazon EC2 instance without accessing the internet. What should the company use to accomplish this goal?
Which AWS service or feature provides information about ongoing or upcoming scheduled events that can affect an AWS account?
Using AWS Identity and Access Management (IAM), what can be attached to an Amazon EC2 instance to make service requests?
A security officer wants to enable IPsec communications to securely connect users from on-premises networks to AWS. Which AWS service or feature should the officer use?
Which of the following are benefits of running a database on Amazon RDS compared to an on-premises database? (Choose two.)
Which AWS services help to improve application performance by reducing latency while accessing content globally? (Choose two.)
Which task requires the use of AWS account root account user credentials?
Which AWS service enables users to monitor for specific phrases, values, or patterns and set up alarms based on metrics?
A company is looking for a way to encrypt data stored on Amazon S3. Which AWS managed service can be used to help to accomplish this?
Which AWS service enables risk auditing of an AWS account by tracking and recording user actions and source IP addresses?
Under the AWS shared responsibility model, what is the customer's responsibility when using an AWS managed service?
According to the AWS shared responsibility model, when using Amazon RDS, who is responsible for scheduling and performing backups?
Which of the following can be used to identify a specific user who stopped an Amazon EC2 instance?
Which security-related task is the responsibility of the customer in the AWS Cloud?
A company recently migrated to AWS and wants to enable intelligent threat protection and continuous monitoring across all of its AWS accounts. Which AWS service should the company use to achieve this goal?
A user can optimize Amazon EC2 costs by performing which of the following tasks? (Choose two.)
AWS Trusted Advisor can monitor and provide advice on what characteristics of an AWS account? (Choose two.)
Which AWS service would identify if unrestricted access to a resource has been allowed by a security group?
When using Amazon RDS, what is the customer responsible for?
To optimize costs and resource usage, a company needs to monitor the operational health of its entire system of AWS Cloud resources. Which AWS service will meet these requirements?
Which AWS service will track user activity on AWS?
A security officer wants a list of any potential vulnerabilities in Amazon EC2 security groups. Which AWS service should the officer use?
A cloud practitioner needs to obtain AWS compliance reports before migrating an environment to the AWS Cloud. How can these reports be generated?
Which tasks require using AWS account root user credentials? (Choose two.)
To avoid malicious compute activities, a user needs a quick way to determine if any Amazon EC2 instances have ports that allow unrestricted access. Which AWS service will support this requirement?
Which tasks are the responsibility of AWS according to the AWS shared responsibility model? (Select TWO.)
A cloud engineer needs to download AWS security and compliance documents for an upcoming audit. Which AWS service can provide the documents?
A company hosts an application on an Amazon EC2 instance. The EC2 instance needs to access several AWS resources, including Amazon S3 and Amazon DynamoDB. What is the MOST operationally efficient solution to delegate permissions?
What are the characteristics of Availability Zones? (Select TWO.)
An ecommerce company has migrated its IT infrastructure from an on-premises data center to the AWS Cloud. Which AWS service is used to track, record, and audit configuration changes made to AWS resources?
Which task is a customer's responsibility, according to the AWS shared responsibility model?
Which AWS service is always available free of charge to users?
Which AWS services allow users to monitor and retain records of account activities that include governance, compliance, and auditing? (Select TWO.)
Which of the following is the customer's responsibility, according to the AWS shared responsibility model?
A company's information security manager is supervising a move to AWS and wants to ensure that AWS best practices are followed. The manager has concerns about the potential misuse of AWS account root user credentials. Which of the following is an AWS best practice for using the AWS account root user credentials?
Which task is the responsibility of AWS, according to the AWS shared responsibility model?
Which of the following are user authentication services managed by AWS? (Select TWO.)
What does the Amazon S3 Intelligent-Tiering storage class offer?
A company is using Amazon DynamoDB. Which task is the company's responsibility, according to the AWS shared responsibility model?
What is a customer responsibility when using AWS Lambda according to the AWS shared responsibility model?
Which task is the customer’s responsibility, according to the AWS shared responsibility model?
Which task is a customer’s responsibility, according to the AWS shared responsibility model?
Which maintenance task is the customer’s responsibility, according to the AWS shared responsibility model?
Which of the following are benefits of AWS Trusted Advisor? (Choose two.)
Which of the following is the customer's responsibility under the AWS shared responsibility model? (Choose two.)
Which task can a company perform by using security groups in the AWS Cloud?
A company has a managed IAM policy that does not grant the necessary permissions for users to accomplish required tasks. How can this be resolved?
A company wants a report that lists the status of multi-factor authentication (MFA) devices that all users in the company's AWS account use. Which AWS feature or service will meet this requirement?
A company wants to use machine learning capabilities to analyze log data from its Amazon EC2 instances and efficiently conduct security investigations. Which AWS service will meet these requirements?
Which AWS service or feature can a user configure to limit network access at the subnet level?
Which AWS service provides users with AWS issued reports, certifications, accreditations, and third-party attestations?
A company runs an on-premises contact center for customers. The company needs to migrate to a cloud-based solution that can deliver artificial intelligence features to improve user experience. Which AWS service will meet these requirements?
Which AWS service can be used to send alerts when a specific Amazon CloudWatch alarm is invoked?
Which AWS service or feature provides a firewall at the subnet level within a VPC?
A company wants to use automated video analysis to identify employees that are accessing its offices. Which AWS service will meet this requirement?
A company needs a firewall that will control network connections to and from a single Amazon EC2 instance. This firewall will not control network connections to and from other instances that are in the same subnet. Which AWS service or feature can the company use to meet these requirements?
Which VPC component can a company use to set up a virtual firewall at the Amazon EC2 instance level?
A company's compliance officer wants to review the AWS Service Organization Control (SOC) reports. Which AWS service or feature should the compliance officer use to complete this task?
What is the main benefit of AWS Global Accelerator?
Which AWS service helps detect unusual activity in AWS accounts that may indicate security risks?
Which AWS service provides real-time monitoring of AWS resources and applications?
Which AWS service helps you centrally enforce policies across multiple AWS accounts?
Which AWS service enables you to monitor API activity within your AWS account?
Which AWS service allows you to set up multi-account governance with best practices?
Which AWS service offers dedicated physical servers for compliance requirements?
Which AWS tool helps ensure your workloads follow security best practices?
Which AWS service provides centralized logging of AWS API calls?
Which AWS service helps ensure compliance by recording resource configuration changes?
Which AWS service provides secure VPN-like private network connections to AWS?
Which AWS service automatically creates network diagrams and architecture visualizations?
Which AWS service provides edge security against DDoS attacks?
Which AWS service helps secure applications using custom web security rules?
Which AWS service allows you to query log data interactively using SQL?
Which AWS service helps manage and rotate encryption keys?
Which AWS service securely stores and retrieves application secrets?
Which AWS service helps to integrate on-premises networks with AWS using a VPN?
Which AWS service provides a relational graph of resources and compliance monitoring?
Which AWS service helps govern hybrid and multi-account environments?
Which AWS service provides resource-level monitoring of EC2 CPU utilization?
Which AWS service helps detect vulnerabilities in applications?
Which AWS service provides anomaly detection for monitoring metrics?
Which AWS service helps automate security checks for compliance frameworks?
Which AWS service helps detect fraudulent online activities?
Which AWS service helps you automatically discover and protect sensitive data such as PII in your S3 buckets?
A company wants to ensure data encryption at rest for Amazon S3. Which AWS feature should they use?
Which service provides firewall protection for applications against SQL injection and cross-site scripting?
Which service helps you track API calls made in your AWS account?
Which AWS service enables you to establish private connectivity between your on-premises data center and AWS?
Which AWS service can provide automated remediation for non-compliant resources?
Which AWS service helps protect against DDoS attacks at the network and application layer?
Which AWS service is used to manage SSL/TLS certificates for securing websites?
Which AWS feature enables organizations to isolate workloads into separate accounts while maintaining centralized governance?
Which AWS tool provides best practice checks for cost, performance, and security?
Which AWS service helps manage encryption keys?
Which AWS service helps improve application availability by distributing traffic across multiple targets?
Which AWS service provides security assessment of applications running on EC2?
Which AWS service helps you centrally log and audit configuration changes?
Which AWS service helps secure applications using machine learning-based threat detection?
Which of the following AWS services is specifically designed to store data that must remain immutable for compliance?
Which AWS service provides templates for quickly deploying standardized environments?
What does the AWS Shared Responsibility Model state for IAM password policies?
Which AWS service allows centralized logging of API calls across accounts?
Which AWS service enables infrastructure deployment across multiple accounts following best practices?
Which AWS service helps detect unusual activity such as compromised accounts?
Which AWS service allows automatic DNS failover between AWS Regions?
Which AWS service helps in real-time application monitoring with custom metrics and alarms?
Which AWS service provides encryption key management for services and applications?
Which service enables secure, private connections between on-premises networks and AWS?
Which AWS service helps ensure compliance by recording resource configurations?
Which AWS service is best for secure storage of secrets like database passwords?
Which AWS service allows web app protection against SQL injection and cross-site scripting?
Which AWS service can help detect sensitive data like PII in S3 buckets?
Which AWS service automates backups and restores of databases?
Which AWS service provides compliance-ready digital certificates?
Which service allows users to authenticate via Google or Facebook for AWS applications?
Which AWS service provides centralized identity and access management across accounts?
Which AWS service provides managed DDoS protection?
Which AWS service helps secure accounts by providing detailed security findings from multiple services?
Which AWS service provides managed distributed denial-of-service (DDoS) protection at no additional cost?
Which AWS service helps ensure compliance by providing a detailed inventory of AWS resources and their changes?
What is the main benefit of using Amazon CloudWatch Alarms?
Which AWS service provides centralized security management across multiple accounts?
Which AWS service lets you test applications for security vulnerabilities?
Which AWS service is designed to connect on-premises Active Directory with AWS?
Which AWS service allows for user sign-up, sign-in, and access control to web/mobile apps?
Which AWS service allows customers to centrally manage access to multiple AWS accounts?
Which AWS service provides real-time application tracing and debugging?
Which AWS service provides centralized log collection and analysis?
Which AWS service provides centralized secrets management and rotation?
Which AWS service can detect and classify personally identifiable information (PII) in S3?
Which AWS service allows you to evaluate workloads against AWS best practices?
Which AWS service enables you to model and provision cloud resources using code templates?
Which AWS service helps reduce cost and improve resiliency by recommending optimal EC2 instance types?
What's the purpose of Elastic Load Balancing (ELB)?
What does AWS provide under the Shared Responsibility Model for EC2?
Which AWS service enables you to manage encryption keys?
What does the term "elasticity" mean in AWS?
Which AWS service helps protect your applications against common web attacks?
Which AWS service helps identify unused and underutilized resources to reduce costs?
Which AWS service is used to create alerts when specific metrics exceed a threshold?
Which of the following is an advantage of AWS availability zones?
Which AWS service can automatically scale EC2 instances based on CPU usage?
Which AWS feature allows you to tag resources for better cost allocation and management?
Which AWS service provides threat detection using machine learning?
Which AWS service provides end-to-end visibility into request traces across microservices?
Which AWS service helps ensure compliance and governance by evaluating configurations?
Which AWS service helps centralize security findings across AWS accounts?
Which AWS service helps automate patch management and compliance for EC2 instances?
Which AWS service helps users access applications securely without a VPN?
Which AWS feature enables centralized management of multiple accounts and permissions?
Which AWS service helps detect and remediate security vulnerabilities in workloads?
Which AWS service allows global user authentication for web and mobile apps?
A company wants to ensure their AWS environment meets compliance standards. Which tool helps with this?
Which AWS service manages the encryption keys used to protect your data?
Which service provides a secure, scalable DNS web service?
Which service offers a secure way to rotate and store API keys or database passwords?
Which AWS tool can automatically scale EC2 instances based on demand?
Which AWS service lets you set permissions at a granular level using JSON policies?
Which AWS service allows you to manage multiple AWS accounts under a single organization?
Which AWS service protects against DDoS attacks?
Which AWS tool checks infrastructure for security vulnerabilities?
Which AWS service enables developers to monitor application performance and detect bottlenecks in real time?
What AWS service allows centralized governance and compliance enforcement across multiple accounts?
Which AWS service can automatically create backups of EBS volumes?
Which AWS tool provides near real-time insights into performance metrics for AWS resources?
Which AWS service is best suited for managing and distributing digital certificates?
Which AWS service helps secure your web applications from SQL injection or cross-site scripting?
Which AWS service integrates with Microsoft Active Directory for user authentication?
Which AWS service provides real-time threat detection and continuous monitoring of AWS accounts?
What AWS service enables consistent security policies across hybrid and multi-account environments?
Which AWS service provides operational insights using machine learning to detect anomalies in metrics?
Which service provides a virtual private network inside AWS?
Which AWS service helps plan and track cloud adoption using best-practice frameworks?
Which AWS service allows you to define and track compliance rules for resource configurations?
Which AWS service helps detect personally identifiable information (PII) in text data?
Which AWS service allows automatic patching and compliance reporting for operating systems?
Which AWS service helps automate security checks using industry frameworks like CIS Benchmarks?
Which AWS service helps manage compliance documentation and third-party audit reports?
Which AWS service can detect configuration drifts between deployments?
Which AWS service provides identity federation for web and mobile applications?
Which AWS service helps detect, investigate, and remediate security findings from multiple AWS accounts?
Which AWS services or features provide disaster recovery solutions for Amazon EC2 instances? (Choose two.)
A company is migrating to the AWS Cloud instead of running its infrastructure on premises. Which of the following are advantages of this migration? (Choose two.)
Which AWS service or feature can a company use to determine which business unit is using specific AWS resources?
A company wants to migrate its workloads to AWS, but it lacks expertise in AWS Cloud computing. Which AWS service or feature will help the company with its migration?
Which AWS service or tool should a company use to centrally request and track service limit increases?
Which documentation does AWS Artifact provide?
Which task requires using AWS account root user credentials?
Which of the following are components of an AWS Site-to-Site VPN connection? (Choose two.)
A company needs to establish a connection between two VPCs. The VPCs are located in two different AWS Regions. The company wants to use the existing infrastructure of the VPCs for this connection. Which AWS service or feature can be used to establish this connection?
According to the AWS shared responsibility model, what responsibility does a customer have when using Amazon RDS to host a database?
What are some advantages of using Amazon EC2 instances to host applications in the AWS Cloud instead of on premises? (Choose two.)
A user needs to determine whether an Amazon EC2 instance's security groups were modified in the last month. How can the user see if a change was made?
Which AWS service will help protect applications running on AWS from DDoS attacks?
Which AWS service or feature acts as a firewall for Amazon EC2 instances?
A global media company uses AWS Organizations to manage multiple AWS accounts. Which AWS service or feature can the company use to limit the access to AWS services for member accounts?
A company wants to limit its employees' AWS access to a portfolio of predefined AWS resources. Which AWS solution should the company use to meet this requirement?
An online company was running a workload on premises and was struggling to launch new products and features. After migrating the workload to AWS, the company can quickly launch products and features and can scale its infrastructure as required. Which AWS Cloud value proposition does this scenario describe?
Which tasks are the responsibility of AWS, according to the AWS shared responsibility model? (Choose two.)
Which AWS service uses machine learning to help discover, monitor, and protect sensitive data that is stored in Amazon S3 buckets?
A large enterprise with multiple VPCs in several AWS Regions around the world needs to connect and centrally manage network connectivity between its VPCs. Which AWS service or feature meets these requirements?
A user wants to deploy a service to the AWS Cloud by using infrastructure-as-code (IaC) principles. Which AWS service can be used to meet this requirement?
Which IT controls do AWS and the customer share, according to the AWS shared responsibility model? (Choose two.)
A company is launching an application in the AWS Cloud. The application will use Amazon S3 storage. A large team of researchers will have shared access to the data. The company must be able to recover data that is accidentally overwritten or deleted. Which S3 feature should the company turn on to meet this requirement?
A company wants to migrate its applications from its on-premises data center to a VPC in the AWS Cloud. These applications will need to access on-premises resources. Which actions will meet these requirements? (Choose two.)
A company wants to implement threat detection on its AWS infrastructure. However, the company does not want to deploy additional software. Which AWS service should the company use to meet these requirements?
Which AWS service or feature checks access policies and offers actionable recommendations to help users set secure and functional policies?
Service control policies (SCPs) manage permissions for which of the following?
Which AWS service can be used to encrypt data at rest?
A user is storing objects in Amazon S3. The user needs to restrict access to the objects to meet compliance obligations. What should the user do to meet this requirement?
An online retail company has seasonal sales spikes several times a year, primarily around holidays. Demand is lower at other times. The company finds it difficult to predict the increasing infrastructure demand for each season. Which advantages of moving to the AWS Cloud would MOST benefit the company? (Choose two.)
In which situations should a company create an IAM user instead of an IAM role? (Choose two.)
Which AWS service helps protect against DDoS attacks?
Which AWS service can be used to decouple applications?
A company hosts an application on an Amazon EC2 instance. The EC2 instance needs to access several AWS resources, including Amazon S3 and Amazon DynamoDB. What is the MOST operationally efficient solution to delegate permissions?
A large organization has a single AWS account. What are the advantages of reconfiguring the single account into multiple AWS accounts? (Choose two.)
Which AWS service provides a feature that can be used to proactively monitor and plan for the service quotas of AWS resources?
Which of the following is the customer responsible for updating and patching, according to the AWS shared responsibility model?
Who has the responsibility to patch the host operating system of an Amazon EC2 instance, according to the AWS shared responsibility model?
A company is using an Amazon RDS DB instance for an application that is deployed in the AWS Cloud. The company needs regular patching of the operating system of the server where the DB instance runs. What is the company's responsibility in this situation, according to the AWS shared responsibility model?
A company has a serverless application that includes an Amazon API Gateway API, an AWS Lambda function, and an Amazon DynamoDB database. Which AWS service can the company use to trace user requests as they move through the application's components?
Which AWS service monitors AWS accounts for security threats?
Which task does AWS perform automatically?
A company wants to improve its security and audit posture by limiting Amazon EC2 inbound access. What should the company use to access instances remotely instead of opening inbound SSH ports and managing SSH keys?
An online retail company wants to migrate its on-premises workload to AWS. The company needs to automatically handle a seasonal workload increase in a cost- effective manner. Which AWS Cloud features will help the company meet this requirement? (Choose two.)
A company needs to build an application that uses AWS services. The application will be delivered to residents in European Counties. The company must abide by regional regulatory requirements. Which AWS service or program should the company use to determine which AWS services meet the regional requirements?
A company needs to implement identity management for a fleet of mobile apps that are running in the AWS Cloud. Which AWS service will meet this requirement?
A company has multiple applications and is now building a new multi-tier application. The company will host the new application on Amazon EC2 instances. The company wants the network routing and traffic between the various applications to follow the security principle of least privilege. Which AWS service or feature should the company use to enforce this principle?
A company's web application requires AWS credentials and authorizations to use an AWS service. Which IAM entity should the company use as best practice?
Which AWS service or feature gives a company the ability to control incoming traffic and outgoing traffic for Amazon EC2 instances?
A company needs to evaluate its AWS environment and provide best practice recommendations in five categories: cost, performance, service limits, fault tolerance, and security. Which AWS service can the company use to meet these requirements?
Which AWS service provides threat detection by monitoring for malicious activities and unauthorized actions to protect AWS accounts, workloads, and data that is stored in Amazon S3?
A company needs an automated security assessment report that will identify unintended network access to Amazon EC2 instances. The report also must identify operating system vulnerabilities on those instances. Which AWS service or feature should the company use to meet this requirement?
Which of the following are economic advantages of the AWS Cloud? (Choose two.)
Which controls does the customer fully inherit from AWS in the AWS shared responsibility model?
Which AWS service tracks API calls and user activity?
Which of the following are shared controls that apply to both AWS and the customer, according to the AWS shared responsibility model? (Choose two.)
What information is found on an AWS Identity and Access Management (IAM) credential report? (Choose two.)
Which task is the responsibility of the customer according to the AWS shared responsibility model?
Which of the following is a cloud benefit that AWS offers to its users?
Which AWS service or tool can a company set up to send notifications that a custom spending threshold has been reached or exceeded?
Which AWS service contains built-in engines to protect web applications that run in the cloud from SQL injection attacks and cross-site scripting?
A company needs to set up user authentication for a new application. Users must be able to sign in directly with a user name and password, or through a third- party provider. Which AWS service should the company use to meet these requirements?
A company needs to identify personally identifiable information (PII), such as credit card numbers, from data that is stored in Amazon S3. Which AWS service should the company use to meet this requirement?
Which AWS services or tools are designed to protect a workload from SQL injections, cross-site scripting, and DDoS attacks? (Choose two.)
Which AWS service monitors CPU utilization on Amazon EC2 instances?
A company needs to label its AWS resources so that the company can categorize and track costs. What should the company do to meet this requirement?
Which task can a company complete by using AWS Organizations?
A user has been granted permission to change their own IAM user password. Which AWS services can the user use to change the password? (Choose two.)
Which task can a user complete by using AWS Identity and Access Management (IAM)?
Which AWS services can use AWS WAF to protect against common web exploitations? (Choose two.)
A company needs to report on events that involve the specific AWS services that the company uses. Which AWS service or resource can the company use with Amazon CloudWatch to meet this requirement?
A company is moving its office and must establish an encrypted connection to AWS. Which AWS service will help meet this requirement?
Which action will provide documentation to help a company evaluate whether its use of the AWS Cloud is compliant with local regulatory standards?
Which approach will enhance a user's security on AWS?
Which AWS service or tool is associated with an Amazon EC2 instance and acts as a virtual firewall to control inbound and outbound traffic?
A company wants to migrate its on-premises Microsoft SQL Server database server to the AWS Cloud. The company has decided to use Amazon EC2 instances to run this database. Which of the following is the company responsible for managing, according to the AWS shared responsibility model?
Which tasks require use of the AWS account root user? (Choose two.)
A company wants to secure its consumer web application by using SSL/TLS to encrypt traffic. Which AWS service can the company use to meet this goal?
A company stores configuration files in an Amazon S3 bucket. These configuration files must be accessed by applications that are running on Amazon EC2 instances. According to AWS security best practices, how should the company grant permissions to allow the applications for access the S3 bucket?
A company needs an AWS service that will continuously monitor the company's AWS account for suspicious activity. The service must have the ability to initiate automated actions against threats that are identified in the security findings. Which service will meet these requirements?
Who can create and manage access keys for an AWS account root user?
A company discovered unauthorized access to resources in its on-premises data center. Upon investigation, the company found that the requests originated from a resource hosted on AWS. Which AWS team should the company contact to report this issue?
Which of the following are aspects of the AWS shared responsibility model? (Choose two.)
A company needs real-time guidance to follow AWS best practices to save money, improve system performance, and close security gaps. Which AWS service should the company use?
A company runs applications that process credit card information. Auditors have asked if the AWS environment has changed since the previous audit. If the AWS environment has changed, the auditors want to know how it has changed. Which AWS services can provide this information? (Choose two.)
A company is reviewing the current costs of running its own infrastructure on premises. The company wants to compare these on-premises costs to the costs of running infrastructure in the AWS Cloud. How should the company make this comparison?
A company needs a low-code, visual workflow service that developers can use to build distributed applications. Which AWS service is designed to meet these requirements?
What should a user do if the user loses an IAM secret access key?
A gaming company wants to move its on-premises environment to AWS. The company needs its resources to be highly available. Which benefit does the AWS Cloud provide to meet this requirement?
A company needs stateless network filtering for its VPC. Which AWS service, tool, or feature will meet this requirement?
A company needs to audit its AWS resources. The company must document any changes that have been made to the resources. Which AWS service will meet these requirements?
A company is running an Amazon EC2 instance in a VPC. Which of the following can the company use to route and filter incoming network requests for the EC2 instance?
A company wants to set up a Domain Name System (DNS) record for its application with a failover routing policy that is based on health checks. Which AWS service or resource should the company use to achieve this goal?
Which of the following are AWS best practice recommendations for the use of AWS Identity and Access Management (IAM)? (Choose two.)
A company is using Amazon RDS. Which task is the company's responsibility, according to the AWS shared responsibility model?
A company recently created its first AWS account. Which AWS services will require the use of a VPC? (Choose two.)
A company is using Amazon EC2 instances. Which tasks are the company's responsibility, according to the AWS shared responsibility model? (Choose two.)
A company uses a database that has a simple sign-up page to create users, and a basic login form to authenticate users so they can access the database. The company wants to give users the ability to store personal information, but user access must be controlled in a more secure and reliable way. Which AWS service or feature will meet these requirements?
A company is undergoing a security audit. The audit includes security validation and compliance validation of the AWS infrastructure and services that the company uses. The auditor needs to locate compliance-related information and must download AWS security and compliance documents. These documents include the System and Organization Control (SOC) reports. Which AWS service or group can provide these documents?
A company is developing a new web application. The company must give users the ability to log in to the application through social identity providers. Which AWS service will meet these requirements?
According to the AWS shared responsibility model, which activities are the customer's responsibility for security in the AWS Cloud? (Choose two.)
Which duty is a responsibility of AWS under the AWS shared responsibility model?
A user is a new AWS account owner who has no special access requirements. What should this user do with the AWS account root user access keys?
A company's system administrator discovers that someone logged in to the company's AWS account during the weekend and terminated an Amazon EC2 instance. Which AWS service should the system administrator use to identify who made this change?
Which AWS service or tool lists all the users in an account and reports on the status of account details, including passwords, access keys, and multi-factor authentication (MFA) devices?
A user wants to control AWS services by using the AWS CLI. What are the MINIMUM security credentials that the user needs to achieve this goal?
Which AWS service or feature enables users to block the incoming or outgoing traffic associated with specific IP addresses flowing through a VPC?
A company wants to receive alerts when resources that are launched in the company's AWS account reach 80% of their service quotas. Which AWS service should the company use to meet this requirement?
Which AWS tool acts as a firewall to control traffic in and out of subnets within a VPC?
A company needs to use machine learning and pattern matching to identify and protect sensitive data that the company stores in the AWS Cloud. Which AWS service will meet these requirements?
A company has acquired several other companies. All the companies host their IT infrastructure in the AWS Cloud. Which AWS service should the acquiring company use to centralize the account management?
A company needs to analyze its AWS Cloud environment to determine whether the company is following security best practices. The company wants recommendations about how to close security gaps. Which AWS service should the company use to obtain these recommendations?
What is the security best practice concerning sensitive data stored in Amazon S3?
A company needs to block SQL injection attacks. Which AWS service or feature provides this functionality?