What is a key feature of AWS Systems Manager Incident Manager?

It automatically patches all EC2 instances

It provides a data lake for security logs

It can automatically engage on-call personnel via chat and phone

It blocks malicious IP addresses at the network level

Which AWS service is used to create and manage encryption keys for protecting data at rest?

AWS Key Management Service (KMS)

Which design principle is part of the Security pillar of the AWS Well-Architected Framework?

Implement a strong identity foundation

Use serverless architectures whenever possible

Minimize the number of availability zones

A company requires that all S3 objects be encrypted at rest using AWS KMS customer managed keys. They want to automatically detect any S3 bucket that does not have default encryption enabled and remediate it by enabling encryption with a specific KMS key. Which approach should be used?

Use AWS GuardDuty to detect unencrypted S3 buckets and automatically enable encryption.

Use AWS Systems Manager to run a script on a schedule that checks all buckets and enables encryption.

Use AWS CloudTrail to detect bucket creation without encryption and trigger a Lambda function to enable encryption.

Use an AWS Config managed rule for S3 bucket default encryption, and set up automatic remediation with a Lambda function that enables default encryption using the specified KMS key.

GIAC AI Security Automation Engineer

Domain 2Objective 1

AWS Cloud Security and Incident Response Automation GASAE Practice Questions (Page 8)

Part of the Cloud Security Automation domain, which makes up ~21% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 180-minute exam (~70–120 total, ~15–25 in this domain), expect 8–13 from this objective — we provide 49 practice questions to prepare you well beyond it. (estimate)

49questions here

10free pages

15concepts

Questions 36–40

36foundation · easy
Which AWS feature captures information about IP traffic going to and from network interfaces in a VPC?
Select an answer first
37foundation · easy
What is a key feature of AWS Systems Manager Incident Manager?
Select an answer first
38foundation · easy
Which AWS service is used to create and manage encryption keys for protecting data at rest?
Select an answer first
39foundation · easy
Which design principle is part of the Security pillar of the AWS Well-Architected Framework?
Select an answer first
40application · medium
A company requires that all S3 objects be encrypted at rest using AWS KMS customer managed keys. They want to automatically detect any S3 bucket that does not have default encryption enabled and remediate it by enabling encryption with a specific KMS key. Which approach should be used?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GASAE

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GASAE” is a trademark of its owner, used for identification only.