GoConqr has a new look! Let us know what you think.

Sign up free

Quiz

Chapter 11 - 13 The Security Pillar

Fausto Trindade 20 questions

Take the quiz

Questions in this quiz (20)

  1. 1Which of the following options can you not set in a password policy? (Choose two.)
    1. AMaximum length
    2. BRequire the use of numbers.
    3. CPrevent multiple users from using the same password.
    4. DRequire an administrator to reset an expired password.
  2. 2An IAM user is attached to a customer managed policy granting them sufficient access to
    carry out their duties. You want to require multifactor authentication (MFA) for this user to
    use the AWS CLI. What element should you change in the policy?
    1. AResource
    2. BCondition
    3. CAction
    4. DPrincipal
  3. 3You created an IAM policy that another administrator subsequently modified. You need
    to restore the policy to its original state but don’t remember how it was configured. What
    should you do to restore the policy? (Choose two.)
    1. AConsult CloudTrail global management event logs.
    2. BRestore the policy from a snapshot.
    3. CConsult CloudTrail data event logs.
    4. DRevert to the previous policy version.
  4. 4An IAM user with full access to all EC2 actions in all regions assumes a role that has access
    to only the EC2 RunInstances operation in the us-east-1 region. What will the user be able
    to do under the assumed role?
    1. ACreate a new instance in any region.
    2. BCreate a new instance in the us-east-1 region.
    3. CStart an existing instance in the us-east-1 region.
    4. DStart an existing instance in any region
  5. 5Several objects in a S3 bucket are encrypted using a KMS customer master key. Which of
    the following will give an IAM user permission to decrypt these objects?
    1. AAdd the user to the key policy as a key user.
    2. BGrant the user access to the key using an IAM policy.
    3. CAdd the user to the key policy as a key administrator.
    4. DAdd the user as a principal to the bucket policy.
  6. 6You run a public-facing application on EC2 instances. The application is backed by a database
    running on RDS. Users access it using multiple domain names that are hosted in Route
    53. You want to get an idea of what IP addresses are accessing your application. Which of
    the following would you stream to CloudWatch Logs to get this information?
    1. ARDS logs
    2. BDNS query logs
    3. CVPC flow logs
    4. DCloudTrail logs
  7. 7You’re running a web server that keeps a detailed log of web requests. You want to determine
    which IP address has made the most requests in the last 24 hours. What should you do
    to accomplish this? (Choose two.)
    1. ACreate a metric filter.
    2. BStream the web server logs to CloudWatch Logs.
    3. CUpload the web server log to S3
    4. DUse Athena to query the data.
  8. 8An application running on an EC2 instance has been updated to send large amounts of data
    to a server in your data center for backup. Previously, the instance generated very little traffic.
    Which GuardDuty finding type is this likely to trigger?
    1. ABehavior
    2. BBackdoor
    3. CStealth
    4. DResourceConsumption
  9. 9You’ve set up an AWS Config managed rule to check whether a particular security group
    is attached to every instance in a VPC. You receive an SNS notification that an instance is
    out of compliance. But when you check the instance a few hours later, the security group is
    attached. Which of the following may help explain the apparent discrepancy? (Choose two.)
    1. AThe AWS Config timeline
    2. BLambda logs
    3. CCloudTrail management event logs
    4. DVPC flow logs
  10. 10You want to use Amazon Inspector to analyze the security posture of your EC2 instances
    running Windows. Which rules package should you not use in your assessment?
    1. ACommon Vulnerabilities and Exposures
    2. BCenter for Internet Security Benchmarks
    3. CRuntime Behavior Analysis
    4. DSecurity Best Practices

Information

Description
AWS (AWS - Study Book) Quiz on Chapter 11 - 13 The Security Pillar, created by Fausto Trindade on 09/02/2020.
Language
Português
Views
0
Tags
awsaws - study book
Rating
No ratings yet
Rate this quiz
Rate this quiz

Feedback

What is it about?

What do you think of the new look?

How do you like it?