| 1 | What is AWS CloudTrail and why is it important for security and compliance? AWS › AWS CloudTrail & Auditing | AWS | AWS CloudTrail & Auditing | Beginner |
| 2 | How can an organization consolidate CloudTrail logging across multiple AWS accounts using AWS Organizations? AWS › AWS CloudTrail & Auditing | AWS | AWS CloudTrail & Auditing | Intermediate |
| 3 | How does CloudTrail log file integrity validation help ensure that audit logs have not been tampered with? AWS › AWS CloudTrail & Auditing | AWS | AWS CloudTrail & Auditing | Intermediate |
| 4 | What is the difference between CloudTrail management events and data events, and when should data events be enabled? AWS › AWS CloudTrail & Auditing | AWS | AWS CloudTrail & Auditing | Advanced |
| 5 | How does CloudTrail Lake differ from traditional CloudTrail trails for running complex audit queries? AWS › AWS CloudTrail & Auditing | AWS | AWS CloudTrail & Auditing | Advanced |
| 6 | What is the difference between CloudTrail Event history and a CloudTrail trail? AWS › AWS CloudTrail & Auditing | AWS | AWS CloudTrail & Auditing | Beginner |
| 7 | How can you set up real time alerting based on specific CloudTrail events using CloudWatch Logs and alarms? AWS › AWS CloudTrail & Auditing | AWS | AWS CloudTrail & Auditing | Intermediate |
| 8 | What is AWS Config and what problem does it help solve? AWS › AWS Config | AWS | AWS Config | Beginner |
| 9 | What is Amazon GuardDuty and how does it detect potential security threats within an AWS account? AWS › AWS Security Hub & GuardDuty | AWS | AWS Security Hub & GuardDuty | Beginner |
| 10 | What is AWS Security Hub and how does it aggregate security findings from multiple sources? AWS › AWS Security Hub & GuardDuty | AWS | AWS Security Hub & GuardDuty | Beginner |
| 11 | How does the AWS Config configuration timeline help with troubleshooting and root cause analysis? AWS › AWS Config | AWS | AWS Config | Intermediate |
| 12 | How should an organization design a comprehensive secrets management strategy across multiple environments and AWS accounts, balancing security with operational complexity? AWS › AWS Secrets Manager & Parameter Store | AWS | AWS Secrets Manager & Parameter Store | Advanced |
| 13 | How does AWS Shield Advanced provide cost protection and access to specialized DDoS response support during a major attack? AWS › AWS WAF & Shield | AWS | AWS WAF & Shield | Advanced |
| 14 | How does ACM handle automatic certificate renewal, and what is required to keep this working smoothly? AWS › AWS Certificate Manager (ACM) | AWS | AWS Certificate Manager (ACM) | Intermediate |
| 15 | How do KMS key policies and grants control who can use a specific encryption key? AWS › AWS KMS & Data Encryption | AWS | AWS KMS & Data Encryption | Intermediate |
| 16 | How does automatic key rotation work in KMS, and why is it a recommended security practice? AWS › AWS KMS & Data Encryption | AWS | AWS KMS & Data Encryption | Intermediate |
| 17 | How can IAM policies restrict access to specific secrets, ensuring only authorized applications or users can retrieve sensitive credentials? AWS › AWS Secrets Manager & Parameter Store | AWS | AWS Secrets Manager & Parameter Store | Intermediate |
| 18 | What are Systems Manager Automation documents, or runbooks, and how do they help standardize common operational procedures? AWS › AWS Systems Manager | AWS | AWS Systems Manager | Intermediate |
| 19 | What advanced account security measures should a mature organization implement beyond the basic new account setup steps? AWS › AWS Free Tier & Account Setup | AWS | AWS Free Tier & Account Setup | Advanced |
| 20 | How do CloudFormation StackSets support deploying the same infrastructure template consistently across multiple AWS accounts and regions simultaneously? AWS › IaC (CloudFormation) | AWS | IaC (CloudFormation) | Advanced |
| 21 | What types of endpoints can subscribe to an SNS topic? AWS › Amazon SNS (Simple Notification Service) | AWS | Amazon SNS (Simple Notification Service) | Beginner |
| 22 | What is the principle of least privilege in IAM, and what practical strategies help apply it effectively? AWS › IAM | AWS | IAM | Intermediate |
| 23 | How does IAM policy evaluation logic determine the final outcome when a user has multiple applicable policies, including identity based and resource based policies? AWS › IAM | AWS | IAM | Intermediate |
| 24 | How does CloudWatch Logs Insights let you query and analyze log data to troubleshoot application issues? AWS › Monitoring (CloudWatch) | AWS | Monitoring (CloudWatch) | Intermediate |
| 25 | How does automated backup and point in time recovery work in RDS, and what recovery options does it provide? AWS › RDS & Databases | AWS | RDS & Databases | Intermediate |
| 26 | How should an organization design a comprehensive observability strategy combining CloudWatch metrics, logs, alarms, and dashboards across a complex, multi service application? AWS › Monitoring (CloudWatch) | AWS | Monitoring (CloudWatch) | Advanced |