3.5 - PaulDuvall/aws-compliance-workshop GitHub Wiki

Lesson 3 Quiz

Questions

1) When are AWS Config Rules run?

A. Before the provisioning of a resource

B. While an AWS resource is being provisioned

C. After an AWS resource has been provisioned

D. N/A

2) Can AWS Config be run against multiple AWS accounts?

A. Yes, using the Multiple AWS Accounts Collector

B. No

C. Yes, using the AWS Config Aggregator

D. Yes, once you have paid an additional fee to AWS to enable the feature

3) What's the difference between a Managed Config Rule and a Custom Config Rule?

A. A Managed Config Rule is written and maintained by AWS and can be configured to run against your AWS accounts. A Custom Config Rule is written and maintained by customers.

B. Managed Config Rules are written and maintained by the AWS Professional Services team as part of an engagement

C. Managed Config Rules are automatically run for customers by AWS without any intervention by customers

D. Managed Config Rules are a feature of EC2 and Custom Config Rules are a feature from Lambda

4) Which AWS resources must exist in order to enable AWS Config?

A. S3 bucket, SNS Topic, and IAM Role

B. CloudFormation, CodePipeline, and CodeBuild

C. CloudFormation, CloudTrail, and SNS

D. CloudTrail, CloudWatch, and EC2

5) Which CloudFormation resource do you use to enable a Config Rule?

A. AWS::Events::ConfigRule

B. AWS::Rules::Config

C. AWS::Events::Rule

D. AWS::Config::ConfigRule