AWS Certified Security Specialty Master Cheat Sheet Quiz

What is the purpose of AWS Artifact according to the AWS Certified Security Specialty Master Cheat Sheet?

• It provides a list of AWS security services.

• It is used for DNS validation.

• It offers generic AWS compliance documents.

• It allows export of the private key.

What is a characteristic of AWS Certificate Manager?

• It validates DNS CA Authorization records first.

• It allows export of the private key.

• It is used for managing AWS user accounts.

• It provides a list of AWS security services.

Which AWS service allows export of the private key?

• AWS Artifact

• AWS Certificate Manager with private CA

• AWS Cloud Directory

• AWS Certificate Manager with public standard

What is a limitation of AWS Certificate Manager's certificates?

• They are not region-locked.

• They can be issued instantly.

• They are region-locked, unless CloudFront is used (with Virginia).

• They do not support DNS validation.

What is CloudHSM advertised as suitable for?

• General purpose encryption

• When you have contractual/regulatory constraints

• As a replacement for Active Directory

• For unlimited SQL Server and Oracle database encryption

Which of the following is a feature of CloudHSM?

• It is FIPS 140-2 Level 1 certified

• It can be used for load balancing

• It allows HSM users to authenticate with username and biometrics

• It is FIPS 140-2 Level 3 certified

What is the monthly active user limit for the free tier of Cognito User Pools?

• 10k monthly active users

• 25k monthly active users

• 50k monthly active users

• 100k monthly active users

What does Cognito Identity Pools provide?

• Permanent AWS credentials

• Temporary AWS credentials

• Unlimited API calls

• Direct support for Active Directory

How does the API Gateway interact with Cognito?

• It requires a separate identity pool

• It has direct support for Cognito tokens

• It only supports OAuth user tokens

• It does not support Cognito at all

Which AWS service allows you to manage EC2 instances via group policies, among other features?

• IAM

• Guard Duty

• Firewall Manager

• AD Connector