Security Runbooks with Systems Manager Quiz

What you'll be asked

1. What is the primary purpose of an AWS Systems Manager Runbook in an incident response context?
2. When designing a Runbook to isolate a compromised EC2 instance, which Systems Manager capability is most appropriate for executing the isolation script?
3. You want to ensure that your Incident Response Runbook can be triggered automatically when a specific GuardDuty finding is detected. Which service integration should you configure?
4. Which IAM configuration is required for a Systems Manager Automation document to successfully modify an EC2 instance's security group during an incident?
5. During a cross-account incident response scenario, how can you execute an SSM Automation Runbook residing in a central security account against an EC2 instance in a member account?

Answers and explanations come after you submit.