AWS - Security Specialty Practice Questions & Free Practice Exam
5 free AWS - Security Specialty practice questions below, with instant explanations. The full simulator contains hundreds of exam-style questions across every topic.
While invalidating a compromised IAM access key, which action does NOT immediately stop existing STS session tokens previously issued from that key?
Question 2
By default, a new AWS CloudTrail trail with no advanced event selectors does NOT record which class of events?
Question 3
Which CloudWatch metric on an EC2 instance requires the CloudWatch agent because the hypervisor cannot observe it from outside the guest?
Question 4
Session policy passed to sts:AssumeRole grants more actions than the role identity policy. What permissions does the resulting session hold?
Question 5
Break-glass identity design hinges on one property that distinguishes it from regular federated access. Which property is required for a defensible break-glass identity during a federation outage?
Ready for the full AWS - Security Specialty exam simulator?
Unlock the complete question bank, weighted mock exams, saved-question flashcards, and the Shark AI tutor - all inside your MyCertStack account.
