AWS-Security-Specialty Practice Questions

A.  

Poll Trusted Advisor for abuse notifications by using a Lambda function.

B.  

Create an Amazon EventBridge rule that matches AWS Health events for AWS_ABUSE_DOS_REPORT and publishes to SNS.

C.  

Poll the AWS Support API for abuse cases by using a Lambda function.

D.  

Detect abuse reports by using CloudTrail logs and CloudWatch alarms.

A.  

Configure S3 Versioning to expire object versions that have been in the bucket for 72 hours.

B.  

Configure an S3 Lifecycle configuration rule on the bucket to expire objects after 72 hours.

C.  

Use the S3 Intelligent-Tiering storage class and configure expiration after 72 hours.

D.  

Generate presigned URLs that expire after 72 hours.

A.  

Analyze the logs by using Amazon OpenSearch Service. Search the logs from the OpenSearch API. Use OpenSearch Service Security Analytics to match logs with detection rules and to send alerts to the SNS topic.

B.  

Analyze the logs by using AWS Security Hub. Search the logs from the Findings page in Security Hub. Create custom actions to match logs with detection rules and to send alerts to the SNS topic.

C.  

Analyze the logs by using Amazon CloudWatch Logs. Use a subscription filter to match logs with detection rules and to send alerts to the SNS topic. Search the logs manually by using CloudWatch Logs Insights.

D.  

Analyze the logs by using Amazon QuickSight. Search the logs by listing the query results in a dashboard. Run queries to match logs with detection rules and to send alerts to the SNS topic.