What does Cognito Identity Pools provide?

Direct support for Active Directory

How does the API Gateway interact with Cognito?

It has direct support for Cognito tokens

It requires a separate identity pool

It only supports OAuth user tokens

It does not support Cognito at all

What does Guard Duty use to look for reconnaissance and instance compromise?

CloudTrail, VPC Flow Logs, and DNS Logs

WAF rules across CloudFront and ELB

What can Managed Microsoft AD do that Simple AD cannot?

Join to an existing AD with trust relationships

Manage WAF rules across CloudFront

Look for EC2 instance compromise

Where can the credentials for EC2 instances be found?

http://169.254.169.254/latest/meta-data/iam/security-credentials/

http://127.0.0.1/latest/meta-data/iam/security-credentials/

http://192.168.1.1/latest/meta-data/iam/security-credentials/

http://localhost/latest/meta-data/iam/security-credentials/

What is required for a user to launch an EC2 instance?

iam:PassRole for the relevant roles

iam:CreateRole for the relevant roles

iam:AttachRole for the relevant roles

iam:DetachRole for the relevant roles

What do permissions boundaries set in IAM?

The maximum permissions that an identity-based policy can grant to an IAM entity

The minimum permissions that an IAM entity can have

The default permissions that an IAM entity starts with

The exact permissions that an IAM entity is required to have

What does the "IfExists" operator return in IAM policy conditions?

True if the key exists and is null

False if the key exists and isn't null

True if the key exists with multiple values

Which of the following is NOT a use case for policy variables in IAM?

To specify the requested AWS region

To use in resource element conditions

To use string operators in conditions

To control access based on time of access

Can temporary credentials be revoked once issued?

C) Only if an IAM user created them

What is included in temporary credentials to invalidate them when necessary?

A) A token as well as access key & secret key

How does AWS KMS differ from standard IAM in terms of key policies?

KMS denies the request if the key policy doesn't allow it, regardless of identity policies.

KMS uses the same evaluation logic as IAM.

KMS allows any request if the key policy doesn't explicitly deny it.

What is the default policy for API-created CMKs in AWS KMS?

Allows kms:* for the account / root user

Allows full access to all IAM identities

Allows all AWS services to manage the CMK

What is the purpose of the kms:ViaService condition key in KMS policies?

To prevent direct API use or block specific service use

To allow direct API use of CMKs

To grant full access to all AWS services

Where are CMKs stored in AWS KMS?

In a virtual private cloud (VPC)

Can you import or automatically rotate keys in a custom key store?

No, neither import nor automatic rotation is possible.

Yes, both import and automatic rotation are possible.

Yes, but only automatic rotation is possible.

Yes, but only import is possible.

What is CloudHSM's compliance level?

Single tenant 140-2 level 3 HSM

Single tenant 140-2 level 1 HSM

Single tenant 140-2 level 2 HSM

What does Macie classify in S3?

PII, PHI, regulatory documents, API keys, and secret key material

Only Personal Health Information (PHI)

Only Personally Identifiable Information (PII)

What is required for configuring rotation in AWS Secrets Manager?

Creating and assigning a role to a Lambda function with IAMFullAccess

Setting up a CloudFront distribution

Configuring AWS Shield Advanced

What is the primary use case for AWS Single Sign-On (SSO)?

To manage multi-account access with Organizations

To integrate with CloudFront for non-AWS origins

To generate findings against CIS standards

AWS Certified Security Specialty Master Cheat Sheet Quiz

Authored by Hari R

Instructional Technology

12th Grade

AWS Certified Security Specialty Master Cheat Sheet Quiz

AI Actions

Add similar questions

Adjust reading levels

Convert to real-world scenario

Translate activity

More...

Content View

Student View

100 questions

Show all answers

MULTIPLE CHOICE QUESTION

30 sec • 1 pt

What is the purpose of AWS Artifact according to the AWS Certified Security Specialty Master Cheat Sheet?

It provides a list of AWS security services.

It is used for DNS validation.

It offers generic AWS compliance documents.

It allows export of the private key.

MULTIPLE CHOICE QUESTION

30 sec • 1 pt

What is a characteristic of AWS Certificate Manager?

It validates DNS CA Authorization records first.

It allows export of the private key.

It is used for managing AWS user accounts.

It provides a list of AWS security services.

MULTIPLE CHOICE QUESTION

30 sec • 1 pt

Which AWS service allows export of the private key?

AWS Artifact

AWS Certificate Manager with private CA

AWS Cloud Directory

AWS Certificate Manager with public standard

MULTIPLE CHOICE QUESTION

30 sec • 1 pt

What is a limitation of AWS Certificate Manager's certificates?

They are not region-locked.

They can be issued instantly.

They are region-locked, unless CloudFront is used (with Virginia).

They do not support DNS validation.

MULTIPLE CHOICE QUESTION

30 sec • 1 pt

What is CloudHSM advertised as suitable for?

General purpose encryption

When you have contractual/regulatory constraints

As a replacement for Active Directory

For unlimited SQL Server and Oracle database encryption

MULTIPLE CHOICE QUESTION

30 sec • 1 pt

Which of the following is a feature of CloudHSM?

It is FIPS 140-2 Level 1 certified

It can be used for load balancing

It allows HSM users to authenticate with username and biometrics

It is FIPS 140-2 Level 3 certified

MULTIPLE CHOICE QUESTION

30 sec • 1 pt

What is the monthly active user limit for the free tier of Cognito User Pools?

10k monthly active users

25k monthly active users

50k monthly active users

100k monthly active users

Access all questions and much more by creating a free account

Create resources

Host any resource

Get auto-graded reports

Continue with Google

Continue with Email

Continue with Classlink

Continue with Clever

or continue with

Microsoft

Apple

Others

Already have an account?

Similar Resources on Wayground

105 questions

Artificial Intelligence

Quiz

•

12th Grade

100 questions

DanceLife Center Quiz

Quiz

•

12th Grade

Popular Resources on Wayground

15 questions

Fractions on a Number Line

Quiz

•

3rd Grade

20 questions

Equivalent Fractions

Quiz

•

3rd Grade

25 questions

Multiplication Facts

Quiz

•

5th Grade

29 questions

Alg. 1 Section 5.1 Coordinate Plane

Quiz

•

9th Grade

$fractions$

22 questions

fractions

Quiz

•

3rd Grade

11 questions

FOREST Effective communication

Lesson

•

20 questions

Main Idea and Details

Quiz

•

5th Grade

20 questions

Context Clues

Quiz

•

6th Grade

Discover more resources for Instructional Technology

20 questions

-AR -ER -IR present tense

Quiz

•

10th - 12th Grade

22 questions

El Imperfecto

Quiz

•

9th - 12th Grade

20 questions

SSS/SAS

Quiz

•

9th - 12th Grade

20 questions

verbos reflexivos en español

Quiz

•

9th - 12th Grade

14 questions

Making Inferences From Samples

Quiz

•

7th - 12th Grade

23 questions

CCG - CH8 Polygon angles and area Review

Quiz

•

9th - 12th Grade

8 questions

Momentum and Collisions

Lesson

•

9th - 12th Grade

28 questions

Ser vs estar

Quiz

•

9th - 12th Grade

AWS Certified Security Specialty Master Cheat Sheet Quiz

What is the purpose of AWS Artifact according to the AWS Certified Security Specialty Master Cheat Sheet?

What is a characteristic of AWS Certificate Manager?

Which AWS service allows export of the private key?

What is a limitation of AWS Certificate Manager's certificates?

What is CloudHSM advertised as suitable for?

Which of the following is a feature of CloudHSM?

What is the monthly active user limit for the free tier of Cognito User Pools?

What does Cognito Identity Pools provide?

How does the API Gateway interact with Cognito?

Which AWS service allows you to manage EC2 instances via group policies, among other features?

Access all questions and much more by creating a free account

Similar Resources on Wayground

Popular Resources on Wayground

Discover more resources for Instructional Technology