Start learning →

AWS DevOps Pro Dopsecurity — practice questions

Explore 3 free Dopsecurity questions in AWS DevOps Pro Cloudcomputing. Open each question or exercise to read its content, reference answers and available explanation.

Practise Dopsecurity with Quill →

Dopsecurity questions and exercises with answers

Showing questions 1–3 of 3.

Which AWS service issues temporary, expiring security tokens to assume roles (cross-account, federated, or via web identity)?Read the answer and worked solution →Which AWS service provides dedicated FIPS 140-2 Level 3 hardware HSMs for tenants with strict regulatory key-storage requirements?Read the answer and worked solution →Which AWS service automatically discovers and classifies sensitive data (PII, credentials, financial data) in Amazon S3 using ML?Read the answer and worked solution →

Worked practice questions

Which AWS service issues temporary, expiring security tokens to assume roles (cross-account, federated, or via web identity)?

  1. Amazon RDS
  2. AWS Snowball
  3. AWS Security Token Service (STS)
  4. Amazon Route 53
Show answer and solution

Correct answer: C. AWS Security Token Service (STS)

STS is AWS's short-lived-credential issuer (per DOP-C02 §6.1). The others aren't credential services.

Open this question →

Which AWS service provides dedicated FIPS 140-2 Level 3 hardware HSMs for tenants with strict regulatory key-storage requirements?

  1. Amazon Macie
  2. AWS CloudHSM
  3. Amazon GuardDuty
  4. Amazon RDS
Show answer and solution

Correct answer: B. AWS CloudHSM

CloudHSM is dedicated FIPS-3 HSM hardware (per DOP-C02 §6.2). The others aren't HSMs.

Open this question →

Which AWS service automatically discovers and classifies sensitive data (PII, credentials, financial data) in Amazon S3 using ML?

  1. Amazon Inspector
  2. AWS Shield
  3. Amazon GuardDuty
  4. Amazon Macie
Show answer and solution

Correct answer: D. Amazon Macie

Macie is the S3 sensitive-data classifier (per DOP-C02 §6.2). GuardDuty is threat-detection Inspector is vuln scan Shield is DDoS.

Open this question →

How to practise

  1. Choose a Dopsecurity question and try to work out your answer.
  2. Open the question to check the correct answer and read its worked solution.
  3. Continue in the app for bite-sized lessons, explanations and review with Quill. You can start without creating an account.

More Cloudcomputing topics

DopiacresilienceDopsdlcDopmonincident