Free sample, no account needed

AWS - Security Specialty Practice Questions & Free Practice Exam

5 free AWS - Security Specialty practice questions below, with instant explanations. The full simulator contains hundreds of exam-style questions across every topic.

Create a free account I already have an account

1Question 1You are here

While invalidating a compromised IAM access key, which action does NOT immediately stop existing STS session tokens previously issued from that key?

2Question 2

By default, a new AWS CloudTrail trail with no advanced event selectors does NOT record which class of events?

3Question 3

Which CloudWatch metric on an EC2 instance requires the CloudWatch agent because the hypervisor cannot observe it from outside the guest?

4Question 4

Session policy passed to sts:AssumeRole grants more actions than the role identity policy. What permissions does the resulting session hold?

5Question 5

Break-glass identity design hinges on one property that distinguishes it from regular federated access. Which property is required for a defensible break-glass identity during a federation outage?

Create a free account and keep going

Free members study the full AWS - Security Specialty theory course and get a much larger slice of the question bank, with progress tracking that remembers exactly where they stopped.

Full theory course

Every chapter, free