CloudFormation Security Quiz

5 questions Pass: 70% +25 pts (50 with Pro)

Quiz covering Security Deployment

What you'll be asked

  1. Which AWS service is used to define and provision infrastructure as code using templates, allowing for consistent security configurations?
  2. When using CloudFormation to deploy resources, what is the most secure way to handle sensitive data such as database passwords?
  3. What is the primary purpose of using 'Stack Policies' in AWS CloudFormation?
  4. If you need to ensure that your CloudFormation templates comply with organizational security standards (e.g., forbidding public S3 buckets) before deployment, which service should you use?
  5. You are auditing a stack and notice that the actual configuration of a security group differs from the configuration defined in the template. Which CloudFormation feature identifies this discrepancy?

Answers and explanations come after you submit.