GoConqr hat ein neues Design! Sag uns, wie es dir gefällt.

Kostenlos registrieren

Quiz

Chapter 11 - 13 The Security Pillar

Fausto Trindade 20 Fragen

Quiz starten

Fragen in diesem Quiz (20)

  1. 1Which of the following options can you not set in a password policy? (Choose two.)
    1. AMaximum length
    2. BRequire the use of numbers.
    3. CPrevent multiple users from using the same password.
    4. DRequire an administrator to reset an expired password.
  2. 2An IAM user is attached to a customer managed policy granting them sufficient access to
    carry out their duties. You want to require multifactor authentication (MFA) for this user to
    use the AWS CLI. What element should you change in the policy?
    1. AResource
    2. BCondition
    3. CAction
    4. DPrincipal
  3. 3You created an IAM policy that another administrator subsequently modified. You need
    to restore the policy to its original state but don’t remember how it was configured. What
    should you do to restore the policy? (Choose two.)
    1. AConsult CloudTrail global management event logs.
    2. BRestore the policy from a snapshot.
    3. CConsult CloudTrail data event logs.
    4. DRevert to the previous policy version.
  4. 4An IAM user with full access to all EC2 actions in all regions assumes a role that has access
    to only the EC2 RunInstances operation in the us-east-1 region. What will the user be able
    to do under the assumed role?
    1. ACreate a new instance in any region.
    2. BCreate a new instance in the us-east-1 region.
    3. CStart an existing instance in the us-east-1 region.
    4. DStart an existing instance in any region
  5. 5Several objects in a S3 bucket are encrypted using a KMS customer master key. Which of
    the following will give an IAM user permission to decrypt these objects?
    1. AAdd the user to the key policy as a key user.
    2. BGrant the user access to the key using an IAM policy.
    3. CAdd the user to the key policy as a key administrator.
    4. DAdd the user as a principal to the bucket policy.
  6. 6You run a public-facing application on EC2 instances. The application is backed by a database
    running on RDS. Users access it using multiple domain names that are hosted in Route
    53. You want to get an idea of what IP addresses are accessing your application. Which of
    the following would you stream to CloudWatch Logs to get this information?
    1. ARDS logs
    2. BDNS query logs
    3. CVPC flow logs
    4. DCloudTrail logs
  7. 7You’re running a web server that keeps a detailed log of web requests. You want to determine
    which IP address has made the most requests in the last 24 hours. What should you do
    to accomplish this? (Choose two.)
    1. ACreate a metric filter.
    2. BStream the web server logs to CloudWatch Logs.
    3. CUpload the web server log to S3
    4. DUse Athena to query the data.
  8. 8An application running on an EC2 instance has been updated to send large amounts of data
    to a server in your data center for backup. Previously, the instance generated very little traffic.
    Which GuardDuty finding type is this likely to trigger?
    1. ABehavior
    2. BBackdoor
    3. CStealth
    4. DResourceConsumption
  9. 9You’ve set up an AWS Config managed rule to check whether a particular security group
    is attached to every instance in a VPC. You receive an SNS notification that an instance is
    out of compliance. But when you check the instance a few hours later, the security group is
    attached. Which of the following may help explain the apparent discrepancy? (Choose two.)
    1. AThe AWS Config timeline
    2. BLambda logs
    3. CCloudTrail management event logs
    4. DVPC flow logs
  10. 10You want to use Amazon Inspector to analyze the security posture of your EC2 instances
    running Windows. Which rules package should you not use in your assessment?
    1. ACommon Vulnerabilities and Exposures
    2. BCenter for Internet Security Benchmarks
    3. CRuntime Behavior Analysis
    4. DSecurity Best Practices

Informationen

Beschreibung
AWS (AWS - Study Book) Quiz am Chapter 11 - 13 The Security Pillar, erstellt von Fausto Trindade am 09/02/2020.
Sprache
Português
Aufrufe
0
Schlagwörter
awsaws - study book
Bewertung
Noch keine Bewertungen
Bewerte dieses Quiz
Bewerte dieses Quiz

Feedback

Worum geht es?

Wie gefällt dir das neue Design?

Dein Eindruck