| 1 | How can an organization enable GuardDuty and Security Hub consistently across every account in an AWS Organization using delegated administration? AWS › AWS Security Hub & GuardDuty | AWS | AWS Security Hub & GuardDuty | Advanced |
| 2 | What is Amazon GuardDuty and how does it detect potential security threats within an AWS account? AWS › AWS Security Hub & GuardDuty | AWS | AWS Security Hub & GuardDuty | Beginner |
| 3 | What is AWS Security Hub and how does it aggregate security findings from multiple sources? AWS › AWS Security Hub & GuardDuty | AWS | AWS Security Hub & GuardDuty | Beginner |
| 4 | How should a security team design an end to end incident response workflow that integrates GuardDuty, Security Hub, EventBridge, and Step Functions for both automated triage and human escalation? AWS › AWS Security Hub & GuardDuty | AWS | AWS Security Hub & GuardDuty | Advanced |
| 5 | How can Security Hub's custom insights and automated response actions help security teams prioritize and manage findings more effectively at scale? AWS › AWS Security Hub & GuardDuty | AWS | AWS Security Hub & GuardDuty | Intermediate |
| 6 | How can GuardDuty findings be automatically remediated using EventBridge and Lambda for a faster incident response? AWS › AWS Security Hub & GuardDuty | AWS | AWS Security Hub & GuardDuty | Intermediate |
| 7 | How does GuardDuty support monitoring for threats specific to Amazon S3, EKS, and RDS beyond general EC2 and account level threats? AWS › AWS Security Hub & GuardDuty | AWS | AWS Security Hub & GuardDuty | Intermediate |
| 8 | How can Systems Manager be integrated with AWS Config and Security Hub to build a comprehensive automated compliance remediation pipeline? AWS › AWS Systems Manager | AWS | AWS Systems Manager | Advanced |
| 9 | What is AWS Config and what problem does it help solve? AWS › AWS Config | AWS | AWS Config | Beginner |
| 10 | What is AWS Trusted Advisor and what categories of recommendations does it provide? AWS › AWS Trusted Advisor | AWS | AWS Trusted Advisor | Beginner |
| 11 | What Specialty certifications does AWS offer, and who are they designed for? AWS › AWS Certification Paths & Career Roadmap | AWS | AWS Certification Paths & Career Roadmap | Intermediate |
| 12 | How does automatic key rotation work in KMS, and why is it a recommended security practice? AWS › AWS KMS & Data Encryption | AWS | AWS KMS & Data Encryption | Intermediate |
| 13 | What is the AWS Landing Zone or AWS Control Tower, and how does it help set up a well architected multi account environment quickly? AWS › AWS Organizations & Multi Account Strategy | AWS | AWS Organizations & Multi Account Strategy | Intermediate |
| 14 | How do Trusted Advisor's security checks help identify common misconfigurations before they become serious security incidents? AWS › AWS Trusted Advisor | AWS | AWS Trusted Advisor | Intermediate |
| 15 | How do AWS WAF managed rule groups simplify protecting applications against common, well known attack patterns? AWS › AWS WAF & Shield | AWS | AWS WAF & Shield | Intermediate |
| 16 | How does rate based rules in AWS WAF help mitigate application layer DDoS attacks and abusive traffic patterns? AWS › AWS WAF & Shield | AWS | AWS WAF & Shield | Intermediate |
| 17 | How does AWS Glue support sensitive data handling through features like the Glue Data Quality and Sensitive Data Detection capabilities? AWS › AWS Glue & ETL | AWS | AWS Glue & ETL | Advanced |
| 18 | How does AWS CloudHSM differ from KMS, and when would an organization need the additional control it provides? AWS › AWS KMS & Data Encryption | AWS | AWS KMS & Data Encryption | Advanced |
| 19 | How should an organization design a layered defense in depth strategy combining WAF, Shield, security groups, and network ACLs to protect a public facing application? AWS › AWS WAF & Shield | AWS | AWS WAF & Shield | Advanced |
| 20 | How does CloudTrail log file integrity validation help ensure that audit logs have not been tampered with? AWS › AWS CloudTrail & Auditing | AWS | AWS CloudTrail & Auditing | Intermediate |
| 21 | What is a Config conformance pack, and how does it simplify compliance management at scale? AWS › AWS Config | AWS | AWS Config | Intermediate |
| 22 | How does ECR image scanning help identify security vulnerabilities within container images before they are deployed? AWS › Elastic Container Registry (ECR) | AWS | Elastic Container Registry (ECR) | Intermediate |
| 23 | How do security groups and network ACLs differ in how they control traffic to and from resources within a VPC? AWS › VPC & Networking | AWS | VPC & Networking | Intermediate |
| 24 | How does EC2 Nitro System architecture improve performance, security, and efficiency compared to older EC2 hypervisor based virtualization? AWS › EC2 & Compute | AWS | EC2 & Compute | Advanced |
| 25 | How should an organization design a comprehensive container image governance strategy across multiple ECR repositories, teams, and AWS accounts? AWS › Elastic Container Registry (ECR) | AWS | Elastic Container Registry (ECR) | Advanced |
| 26 | How does a Network Load Balancer's preservation of the client's source IP address benefit certain applications compared to an Application Load Balancer? AWS › Elastic Load Balancing (ALB, NLB & CLB) | AWS | Elastic Load Balancing (ALB, NLB & CLB) | Intermediate |
| 27 | What is the principle of least privilege in IAM, and what practical strategies help apply it effectively? AWS › IAM | AWS | IAM | Intermediate |
| 28 | What is the difference between edge optimized, regional, and private API Gateway endpoints? AWS › Amazon API Gateway | AWS | Amazon API Gateway | Advanced |
| 29 | What is DNSSEC, and how does Route 53 support it to protect against DNS spoofing? AWS › Amazon Route 53 & DNS Management | AWS | Amazon Route 53 & DNS Management | Advanced |
| 30 | How should an organization design a comprehensive IAM governance strategy combining permission boundaries, service control policies, and regular access reviews across a growing organization? AWS › IAM | AWS | IAM | Advanced |
| 31 | How does S3 Object Lock support compliance requirements for write once read many, or WORM, data storage? AWS › S3 & Storage | AWS | S3 & Storage | Advanced |