Security
Practise only this domain. 53 questions with explanations, 20 at a time.
Start securitySample questions
- A mobile game lets players sign in with Google or Facebook and then upload save files directly to a per-player S3 prefix. The app needs temporary AWS credentials for that upload. Which Cognito component provides them?Easy
- A healthcare startup must guarantee that plaintext patient files never reach AWS storage servers, even briefly, and the encryption keys must stay under the company's control. Which approach meets both requirements?Hard
- A Lambda function reads a database password from a plaintext environment variable. The team wants the secret removed from configuration, rotated regularly, and fetched at runtime. What should they use?Easy
- A team schedules deletion of a KMS customer managed key. What happens next?Medium
- Which AWS service automatically scans EC2 instances, container images, and Lambda functions for software vulnerabilities and unintended network exposure?Medium