About This Flashcard Deck
This flashcard deck contains 6 cards covering key Security and Compliance concepts for the SOA-C03 exam. Cards for SOA-C03 IAM, KMS, CloudTrail, AWS Config, GuardDuty, Security Hub, and compliance operations. Use active recall by attempting to answer each question before revealing the answer. Research shows that flashcard-based active recall is one of the most effective study techniques for certification exams.
Question
What always overrides IAM allows?
Click to reveal answer
Answer
An explicit deny.
Click to flip back
All Security and Compliance Flashcards
Q: What always overrides IAM allows?
A: An explicit deny.
Q: Which service records AWS account API activity?
A: AWS CloudTrail.
Q: Which service evaluates resource configuration compliance?
A: AWS Config.
Q: Which service aggregates security findings from multiple AWS services?
A: AWS Security Hub.
Q: Which service detects suspicious account or workload activity?
A: Amazon GuardDuty.
Q: Which KMS document controls key administration and usage?
A: The KMS key policy.