What is the primary purpose of an IAM policy document?

To configure multi-factor authentication for the root account

To list all IAM users and their access keys

To specify the permissions that are granted to an IAM entity

To define the password rotation policy for IAM users

What is the purpose of automatic key rotation in AWS KMS?

To periodically replace the key material to reduce the risk of key compromise

To make keys available to all users

A company wants to deploy a new AWS environment with a consistent security baseline, including IAM roles with least privilege, security groups that restrict traffic, and AWS Config rules to monitor compliance. The environment must be reproducible across multiple accounts. Which approach should be used?

Use AWS Config to create the IAM roles and security groups automatically.

Use AWS Systems Manager to run a script that creates the resources in each account.

Use AWS Organizations to create the resources in all accounts.

Use AWS CloudFormation templates to define the IAM roles, security groups, and Config rules, and deploy them using StackSets across accounts.

Which AWS service is specifically designed to manage and respond to IT incidents, including creating response plans and engaging on-call teams?

AWS Systems Manager Incident Manager

What is the purpose of enabling default encryption on an S3 bucket?

To log all access to the bucket

To automatically encrypt objects when they are stored

To block public access to the bucket

To replicate objects to another region

GIAC AI Security Automation Engineer

Domain 2Objective 1

AWS Cloud Security and Incident Response Automation GASAE Practice Questions (Page 1)

Part of the Cloud Security Automation domain, which makes up ~21% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 180-minute exam (~70–120 total, ~15–25 in this domain), expect 8–13 from this objective — we provide 49 practice questions to prepare you well beyond it. (estimate)

49questions here

10free pages

15concepts

Questions 1–5

1foundation · easy
What is the primary purpose of an IAM policy document?
Select an answer first
2foundation · easy
What is the purpose of automatic key rotation in AWS KMS?
Select an answer first
3application · medium
A company wants to deploy a new AWS environment with a consistent security baseline, including IAM roles with least privilege, security groups that restrict traffic, and AWS Config rules to monitor compliance. The environment must be reproducible across multiple accounts. Which approach should be used?
Select an answer first
4foundation · easy
Which AWS service is specifically designed to manage and respond to IT incidents, including creating response plans and engaging on-call teams?
Select an answer first
5foundation · easy
What is the purpose of enabling default encryption on an S3 bucket?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GASAE

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GASAE” is a trademark of its owner, used for identification only.