AWS Components & Resources for Security

Question 1

1. What AWS resource provides official articles and videos answering common support questions?

Answer 1

AWS Knowledge Center

Question 2

2. Where can customers find community-driven Q&A with AWS experts and Knowledge Center content?

Answer 2

AWS re:Post

Question 3

3. What AWS resource regularly publishes expert security best practices and updates?

Answer 3

AWS Security Blog

Question 4

4. What are the four main goals of AWS Security Center?

Answer 4

Prevent, Detect, Respond, Remediate

Question 5

5. Where can customers find and purchase third-party security software for AWS?

Answer 5

AWS Marketplace

Question 6

6. What is BYOL in the AWS Marketplace?

Answer 6

Bring Your Own License

Question 7

7. What type of firewall applies at the subnet level and is stateless?

Answer 7

Network ACL (NACL)

Question 8

8. What is the default behavior of a new NACL in a default VPC?

Answer 8

Allows all inbound and outbound traffic

Question 9

9. What type of firewall applies at the instance level and is stateful?

Answer 9

Security Group

Question 10

10. How do Security Groups handle traffic by default?

Answer 10

Deny all traffic unless explicitly allowed

Question 11

11. What AWS service protects web apps from SQL injection and XSS attacks?

Answer 11

AWS WAF (Web Application Firewall)

Question 12

12. Where can AWS WAF be deployed?

Answer 12

CloudFront, ALB, API Gateway, AppSync

Question 13

13. What AWS service centrally manages firewall rules across accounts in an organization?

Answer 13

AWS Firewall Manager

Question 14

14. What managed AWS service provides advanced inspection and filtering for VPC traffic?

Answer 14

AWS Network Firewall

Question 15

15. What five categories does AWS Trusted Advisor check?

Answer 15

Cost Optimization, Performance, Security, Fault Tolerance, Service Limits