Practice Test GeeksAWS Practice Test
← All AWS Flashcard Decks

AWS Security and IAM Flashcards

6 cards from real AWS practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.

Read the first 6 AWS Security and IAM flashcards as text

  1. Which AWS service continuously monitors for malicious activity and unauthorized behavior in your AWS account?

    Answer: AWS GuardDuty

    AWS GuardDuty is a threat detection service that continuously monitors for malicious activity and unauthorized behavior.

  2. What is the purpose of AWS CloudTrail?

    Answer: To log and track all API calls made in your AWS account

    AWS CloudTrail records all API calls and user activity in your AWS account for auditing and compliance.

  3. Which AWS service helps you assess, audit, and evaluate the configurations of your AWS resources?

    Answer: AWS Config

    AWS Config continuously monitors and records your AWS resource configurations and evaluates them against desired settings.

  4. What type of AWS IAM credential is recommended for programmatic access to AWS services?

    Answer: Access keys (Access Key ID and Secret Access Key)

    Access keys, consisting of an Access Key ID and Secret Access Key, are used for programmatic access to AWS APIs.

  5. Which AWS service uses machine learning to automatically discover and protect sensitive data in S3?

    Answer: AWS Macie

    AWS Macie uses machine learning to automatically discover, classify, and protect sensitive data stored in Amazon S3.

  6. What is the purpose of an AWS Security Group?

    Answer: To act as a virtual firewall controlling inbound and outbound traffic for EC2 instances

    Security Groups act as virtual firewalls that control inbound and outbound traffic to EC2 instances at the instance level.