Which of the following data sources does GuardDuty analyze to detect threats?

AWS Config configuration history

DNS logs, VPC Flow Logs, and CloudTrail management events

Under the AWS Shared Responsibility Model, which of the following is the customer's responsibility?

Patching the operating system of an Amazon EC2 instance

Physical security of AWS data centers

Management of the AWS global network infrastructure

Replacement of failed hardware in AWS availability zones

A company wants to ensure that all S3 buckets have versioning enabled and that they are not publicly accessible. They want to automatically remediate any bucket that is non-compliant. Which combination of services should be used?

AWS Systems Manager to run a script on a schedule that checks all buckets and enables versioning.

AWS Config rules for S3 bucket versioning and public access, with automatic remediation using Lambda functions that enable versioning and remove public access.

AWS CloudTrail to detect bucket creation without versioning and trigger a Lambda function to enable versioning.

AWS GuardDuty to detect non-compliant buckets and automatically enable versioning and remove public access.

What is the primary function of a security group in an AWS VPC?

To route traffic between subnets

To act as a virtual firewall for EC2 instances

GIAC AI Security Automation Engineer

Domain 2Objective 1

AWS Cloud Security and Incident Response Automation GASAE Practice Questions (Page 7)

Part of the Cloud Security Automation domain, which makes up ~21% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 180-minute exam (~70–120 total, ~15–25 in this domain), expect 8–13 from this objective — we provide 49 practice questions to prepare you well beyond it. (estimate)

49questions here

10free pages

15concepts

Questions 31–35

31foundation · easy
Which of the following data sources does GuardDuty analyze to detect threats?
Select an answer first
32foundation · easy
Under the AWS Shared Responsibility Model, which of the following is the customer's responsibility?
Select an answer first
33application · medium
A company wants to ensure that all S3 buckets have versioning enabled and that they are not publicly accessible. They want to automatically remediate any bucket that is non-compliant. Which combination of services should be used?
Select an answer first
34foundation · easy
Which AWS service aggregates and prioritizes security findings from multiple AWS services to provide a centralized view?
Select an answer first
35foundation · easy
What is the primary function of a security group in an AWS VPC?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GASAE

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GASAE” is a trademark of its owner, used for identification only.