3 AWS Security Services Online Quiz Questions

An application needs to read one specific storage location and should not have broad account access. Which AWS service should you use to grant it narrowly scoped permissions?

A detection service reports suspicious activity. Does that finding alone prove that an account was breached, without any further validation? True or false?

An investigator needs to check which user, role, or AWS service changed a resource and when. Which AWS service's event history can help?

A web application team wants to filter incoming web requests with rules that can help block common web exploits. Which AWS service best fits this need?

A team enables AWS Security Incident Response expecting it to independently detect malicious activity, without relying on findings from detection tools. Is this expectation correct?

An organization wants a service that helps protect its application from distributed denial-of-service attacks. Which AWS service should it consider?

A security team wants to assess its security posture against supported standards and best practices. Which AWS service is designed for this purpose?

A team wants a unified place to prioritize and respond to security issues, including findings from integrated services. Which AWS service best fits this need?

Select all services that fit these needs: assess supported workloads for software vulnerabilities and unintended network exposure, and discover sensitive data such as personally identifiable information stored in Amazon S3.

Select all services that fit these two needs: identify indicators of malicious or unauthorized behavior in supported activity, and identify when a resource configuration drifts from a desired setting.

After receiving a security finding, an investigation team needs to organize related security data and relationships to explore a timeline and possible root cause. Which AWS service can support this analysis?

A team receives a finding of suspicious activity that may involve compromised credentials. Describe a grounded response sequence from validating and triaging the finding through investigation, containment, and recovery. Include relevant AWS services and explain why the team should validate the finding before taking disruptive action.

An application needs to read data from one specific storage location. Which approach best applies least privilege?

A team wants to filter web requests with rules and separately manage cryptographic keys to protect data. Which pair of services fits those tasks?

A team needs to assess workloads for software vulnerabilities and, separately, monitor activity for indicators of malicious behavior. Which service pairing matches those needs?

A GuardDuty finding should be treated as a signal to investigate, not as automatic proof that a breach occurred.

Which AWS service helps discover and protect sensitive data, such as personally identifiable information stored in Amazon S3?

Which AWS service supports incident handling by reviewing and triaging alerts, investigating potential incidents, and guiding teams on containment, rather than detecting threats itself?