Security Runbooks with Systems Manager Quiz

Quiz covering Incident Response Planning

Questions in this quiz

A preview of the 5 questions covered. Start the quiz above to answer them, check your score, and read the explanations.

1. 1

   What is the primary purpose of an AWS Systems Manager Runbook in an incident response context?

2. 2

   When designing a Runbook to isolate a compromised EC2 instance, which Systems Manager capability is most appropriate for executing the isolation script?

3. 3

   You want to ensure that your Incident Response Runbook can be triggered automatically when a specific GuardDuty finding is detected. Which service integration should you configure?

4. 4

   Which IAM configuration is required for a Systems Manager Automation document to successfully modify an EC2 instance's security group during an incident?

5. 5

   During a cross-account incident response scenario, how can you execute an SSM Automation Runbook residing in a central security account against an EC2 instance in a member account?