AWS Security Services Quiz

A company is looking to protect his website from Distributed Denial of Service (DDoS) attacks. Which AWS service should he choose for managed security?

• AWS Armor

• AWS Guard

• AWS Fortress

• AWS Shield

Answer explanation

To protect the website from DDoS attacks, the company should choose AWS Shield for managed security.

Which AWS service helps you protect an online store from common web exploits?

• AWS Security Shield

• AWS SecureGuard

• AWS Web Application Firewall (WAF)

• AWS Shield

Answer explanation

AWS Web Application Firewall (WAF) helps protect an online store from common web exploits, providing security against various threats.

Which AWS service offers fully managed encryption keys stored in Hardware Security Modules (HSMs) to enhance data security?

• AWS Secure Key Vault

• AWS Encryption Key Vault

• AWS Key Management Service (KMS)

• AWS Secure Key Service

Answer explanation

AWS Key Management Service (KMS) offers fully managed encryption keys stored in Hardware Security Modules (HSMs) to enhance data security.

Which AWS service helps you automatically identify potential security threats in your AWS environment?

• AWS Trusted Advisor

• AWS Config

• Amazon GuardDuty

• Amazon Inspector

Answer explanation

Amazon Inspector is the AWS service that helps automatically identify potential security threats in your AWS environment.

Which AWS service is designed to help you monitor and protect your AWS accounts and workloads from potential security threats?

• Amazon Shield

• Amazon GuardDuty

• Amazon Macie

• AWS WAF

Answer explanation

Amazon GuardDuty is designed to help monitor and protect AWS accounts and workloads from security threats.

Which AWS service would you use to protect your AWS resources from unauthorized access and malicious activities?

• AWS WAF

• AWS Shield

• AWS Network Firewall

• AWS Security Hub

Answer explanation

You would use AWS Shield to protect your AWS resources from unauthorized access and malicious activities.

A company is looking to enhance the security of their sensitive data stored in Amazon S3. Which AWS service should they use to automatically discover and classify this data?

• Amazon Macie

• Amazon Rekognition

• Amazon GuardDuty

• Amazon Inspector

Answer explanation

To automatically discover and classify sensitive data stored in Amazon S3, the company should use Amazon Macie.

Which AWS service helps you continuously monitor and analyze the security of your AWS environment?

• Cloud Sentinel

• Amazon GuardDuty

• AWS Security Inspector

• Amazon Watchman

Answer explanation

Amazon GuardDuty is the AWS service that helps continuously monitor and analyze the security of your AWS environment, making it the correct choice.

As a cloud security architect, you are tasked with ensuring robust security measures across multiple AWS accounts and resources. Which AWS service would you use to centrally configure and manage firewall rules to safeguard your infrastructure?

• AWS WAF

• AWS Security Hub

• AWS Firewall Manager

• AWS Shield

Answer explanation

As a cloud security architect managing multiple AWS accounts, AWS Firewall Manager is the service to centrally configure and manage firewall rules across the infrastructure, ensuring robust security measures.

Which AWS service is used to securely store and manage configuration data, secrets, and other sensitive information in a hierarchical structure?

• AWS Key Management Service

• Amazon S3

• AWS CloudFormation

• AWS Systems Manager Parameter Store

Answer explanation

AWS Systems Manager Parameter Store is used to securely store and manage configuration data, secrets, and other sensitive information in a hierarchical structure.