Security and compliance
Practise only this domain. 13 questions with explanations, 20 at a time.
Start security and complianceSample questions
- Container images must be scanned continuously for new CVEs, including images pushed months ago. What should be enabled?Medium
- A security team wants a report of IAM roles and users across an AWS Organization that have not used any permissions in the last 90 days. The team wants a managed finding list it can review, without writing or maintaining scripts. Which feature should be used?Easy
- A monitoring vendor assumes a read-only role in the company's account. The company wants to prevent the confused deputy problem, where another customer of the vendor could cause the vendor to use this role against the company. Which trust policy control should be used?Medium