EC2 Instance Hardening Quiz
Quiz covering Compute Security
EC2 Instance Hardening Quiz
5 questions | Pass: 70% | Earn 25 points
Questions in this quiz
A preview of the 5 questions covered. Start the quiz above to answer them, check your score, and read the explanations.
- 1
Which of the following is the most effective way to restrict network access to an EC2 instance?
- 2
When managing access to EC2 instances, why should you avoid using static IAM user credentials stored on the instance?
- 3
Which practice best ensures that an EC2 instance remains secure against known software vulnerabilities over time?
- 4
You need to ensure that data stored on an EC2 instance's EBS volume is protected if the physical disk is stolen or decommissioned. What is the most direct method?
- 5
To audit and enforce security configurations on EC2 instances at scale, which AWS service should be used to detect non-compliant resources, such as instances with open SSH ports?
- AWS Incident Response Framework
- AWS Incident Response Framework Quiz5q
- Security Runbooks with Systems Manager
- Security Runbooks with Systems Manager Quiz5q
- Forensics and Evidence Collection
- Forensics and Evidence Collection Quiz5q
- Containment and Eradication Strategies
- Containment and Eradication Strategies Quiz5q
- Amazon GuardDuty Deep Dive
- Amazon GuardDuty Deep Dive Quiz5q
- Security Hub and ASFF Format
- Security Hub and ASFF Format Quiz5q
- Amazon Detective for Investigation
- Amazon Detective for Investigation Quiz5q
- Inspector for Vulnerability Assessment
- Inspector for Vulnerability Assessment Quiz5q
- Custom Threat Detection with EventBridge
- Custom Threat Detection with EventBridge Quiz5q
- CloudTrail Configuration and Analysis
- CloudTrail Configuration and Analysis Quiz5q
- CloudTrail Lake and Athena Queries
- CloudTrail Lake and Athena Queries Quiz5q
- VPC Flow Logs Deep Dive
- VPC Flow Logs Deep Dive Quiz5q
- S3 Access Logging and Analysis
- S3 Access Logging and Analysis Quiz5q
- ELB and CloudFront Logging
- ELB and CloudFront Logging Quiz5q
- OpenSearch for Log Analytics
- OpenSearch for Log Analytics Quiz5q
- Kinesis for Real-Time Log Processing
- Kinesis for Real-Time Log Processing Quiz5q
- Multi-Account Logging Strategy
- Multi-Account Logging Strategy Quiz5q
- Log Retention and Compliance
- Log Retention and Compliance Quiz5q
- SIEM Integration Patterns
- SIEM Integration Patterns Quiz5q
- AWS WAF Rules and Managed Rules
- AWS WAF Rules and Managed Rules Quiz5q
- OWASP Top 10 Protection with WAF
- OWASP Top 10 Protection with WAF Quiz5q
- AWS Shield Standard and Advanced
- AWS Shield Standard and Advanced Quiz5q
- CloudFront Security Features
- CloudFront Security Features Quiz5q
- DDoS Mitigation Strategies
- DDoS Mitigation Strategies Quiz5q
Enjoying the courses?
Everything stays free. Pro shows fewer ads, doubles the points you earn on every lesson and quiz so you progress twice as fast, unlocks half of every practice exam — plus full case studies — with the Learn & Exam study modes, and lets you read each lesson on one page.
- ✓ Fewer advertisements
- ✓ 2× points per lesson & quiz
- ✓ 50% of every exam unlocked
- ✓ Learn & Exam modes
- ✓ Distraction-free lessons