Custom Threat Detection with EventBridge Quiz

5 questions • Pass: 70% • +25 pts

Quiz covering Threat Detection Services

Custom Threat Detection with EventBridge Quiz

5 questions | Pass: 70% | Earn 25 points

Questions in this quiz

A preview of the 5 questions covered. Start the quiz above to answer them, check your score, and read the explanations.

  1. 1

    Which AWS service is primarily used to route system events, such as unauthorized API calls, to targets like Lambda or SNS for automated response?

  2. 2

    When configuring an EventBridge rule to detect sensitive actions, what is the purpose of the 'Event Pattern'?

  3. 3

    You want to trigger a Lambda function only when a 'DeleteBucket' action occurs in CloudTrail. Which EventBridge field is best used to filter this specific action?

  4. 4

    If you are using EventBridge to detect security threats from multiple AWS accounts, what architectural component is required to aggregate events into a single central security account?

  5. 5

    A security engineer notices that a rule is set up for 'Console Login' events, but no alerts are being triggered. The rule is enabled and the pattern is correct. What is the most likely reason for the failure?