Questions

Answer the following questions to test your knowledge of the topics covered in this chapter:

1. Which of the following is part of the customers' responsibility regarding the Shared Security Model? (Choose 2.)
   1. Patch Windows EC2 instances with the latest security patches.
   2. Configure NACL to only allow inbound ports 80 and 443 to Linux web servers from the internet.
   3. Update the network cabling in the us-east-1 data centers.
   4. Upgrade the underlying infrastructure support for the Lambda service.
   5. Upgrade the biometric readers in the London Region.
2. Which service in AWS protects your virtual network and resources from common DDoS attacks?
   1. AWS WAF
   2. AWS Shield
   3. AWS Detective
   4. Amazon Macie
3. Which of the following AWS Security tools can protect your web applications or APIs against common web exploits that may affect availability, compromise security, or consume excessive resources?
   1. AWS WAF
   2. AWS GuardDuty
   3. AWS Shield
   4. AWS NACL

4. Which AWS service uses machine learning to classify...