SecHari1

Which of the following are examples of securely using access keys? Select all that apply.

• Keep unused keys

• Embed keys into code

• Disable keys to revoke access

• Regularly rotate keys

What are some of the best practices when using AWS CloudTrail? (Select TWO)

• Save logs in separated Amazon S3 buckets for each region.

• Send all CloudTrail logs to Amazon S3

• Centralize collecting of logs to a dedicated account.

• Stop CloudTrail logging when carrying out automated maintenance tasks

Which AWS Control Tower controls are turned on by default and applied to provisioned accounts in a newly created landing zone?

• Mandatory controls

• Elective controls

• Strongly recommended controls

• Detective controls

What are the two types of AWS Control Tower guardrail controls and how are they implemented

• Preventive controls using SCP

• Preventive controls using AWS Config rules

• Detective controls using SCP

• Detective controls using AWS Config rules

Which directory service does the security engineer need to choose if a company requires managed an Active Directory with full features on AWS Cloud?

• Simple AD

• AD Connector

• AWS Managed Microsoft AD