AWS Certified Security - Specialty Exam Guide

Mock Tests

Mock exam 1

1. When IAM policies are being evaluated for their logic of access, which two of the following statements are incorrect?
   1. Explicit denies are always overruled by an explicit allow.
   2. The order in which the policies are evaluated does not matter regarding the end result.
   3. Explicit allows are always overruled by an explicit deny.
   4. Access to all resources is denied by default until access is granted.
   5. Access to all resources is allowed by default until access is denied.
2. Your security team has been tasked with implementing a solution to monitor your EC2 fleet of instances. Upon review, you decide to implement Amazon Inspector. What are the three prerequisites that you would need to implement before using Amazon Inspector? (Choose ...