What is a key benefit of using CloudFormation to deploy security baseline configurations?

It encrypts all data in transit

It ensures that resources are created with the same security settings every time

It provides real-time monitoring of security events

It automatically detects and remediates security threats

A financial services company must ensure that all S3 buckets have encryption enabled and that versioning is turned on. They use AWS Config to assess compliance. The security team wants to deploy a baseline that automatically remediates non-compliant buckets. Which combination of AWS services should be used to achieve this?

Use AWS Config rules to detect non-compliant buckets, and then manually enable encryption and versioning through the S3 console.

Use AWS Config managed rules for S3 bucket encryption and versioning, and configure automatic remediation actions using AWS Systems Manager Automation documents that enable encryption and versioning on non-compliant buckets.

Use AWS Config custom rules written in Python, and have them directly modify the S3 bucket properties when they detect non-compliance.

Use AWS Trusted Advisor to check for unencrypted buckets, and enable automatic remediation through the Trusted Advisor console.

What is a typical security automation task that can be performed by an AWS Lambda function?

Updating the AWS account password policy

Removing a compromised EC2 instance from a security group

Deploying a new CloudFormation stack

GIAC AI Security Automation Engineer

Domain 2Objective 1

AWS Cloud Security and Incident Response Automation GASAE Practice Questions (Page 9)

Part of the Cloud Security Automation domain, which makes up ~21% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 180-minute exam (~70–120 total, ~15–25 in this domain), expect 8–13 from this objective — we provide 49 practice questions to prepare you well beyond it. (estimate)

49questions here

10free pages

15concepts

Questions 41–45

41foundation · easy
What is a key benefit of using CloudFormation to deploy security baseline configurations?
Select an answer first
42foundation · easy
Which AWS service is used to define and deploy infrastructure as code, enabling consistent security baselines?
Select an answer first
43application · medium
A financial services company must ensure that all S3 buckets have encryption enabled and that versioning is turned on. They use AWS Config to assess compliance. The security team wants to deploy a baseline that automatically remediates non-compliant buckets. Which combination of AWS services should be used to achieve this?
Select an answer first
44foundation · easy
What is a typical security automation task that can be performed by an AWS Lambda function?
Select an answer first
45foundation · easy
Which AWS service is used to route events from services like GuardDuty to trigger automated responses?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GASAE

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GASAE” is a trademark of its owner, used for identification only.

AWS Cloud Security and Incident Response Automation GASAE Practice Questions (Page 9)

Questions 41–45

What is a key benefit of using CloudFormation to deploy security baseline configurations?

Which AWS service is used to define and deploy infrastructure as code, enabling consistent security baselines?

What is a typical security automation task that can be performed by an AWS Lambda function?

Which AWS service is used to route events from services like GuardDuty to trigger automated responses?

Keep studying — Cloud Security Automation