Security Hub overview in AWS - Cheat Sheet & Quick Revision

Recall & Review

beginner

What is AWS Security Hub?

AWS Security Hub is a service that helps you see and manage security alerts and compliance status across your AWS accounts in one place.

beginner

How does Security Hub collect security findings?

Security Hub gathers findings from AWS services like GuardDuty, Inspector, and from partner products, then organizes them for easy review.

beginner

What is a security standard in Security Hub?

A security standard is a set of rules or best practices that Security Hub checks your AWS resources against to find potential security issues.

beginner

What does Security Hub's dashboard show?

The dashboard shows a summary of your security findings, compliance status, and trends to help you quickly understand your security posture.

intermediate

Can Security Hub send alerts to other tools?

Yes, Security Hub can send findings to other tools like AWS Lambda, Amazon SNS, or third-party systems for automated responses or notifications.

What is the main purpose of AWS Security Hub?

A To store data backups

B To centralize security alerts and compliance checks

C To manage user permissions

D To monitor network traffic

AWS Security Hub centralizes security alerts and compliance status from multiple sources.

Which of these services can send findings to Security Hub?

A Amazon S3

B Amazon EC2

C AWS CloudFormation

D AWS GuardDuty

AWS GuardDuty is a security service that sends findings to Security Hub.

What does a security standard in Security Hub do?

A Defines rules to check your resources for security issues

B Manages user access

C Creates backups of your data

D Monitors billing costs

Security standards define rules to check your AWS resources for security best practices.

How can Security Hub findings be used outside the service?

A They can be sent to other tools for automated actions

B They cannot be used outside Security Hub

C They are deleted automatically

D They are converted to billing reports

Security Hub can send findings to other tools like Lambda or SNS for automation.

What does the Security Hub dashboard help you do?

A Create user accounts

B Launch new AWS services

C View a summary of security alerts and compliance

D Manage network settings

The dashboard shows a summary of your security alerts and compliance status.

Explain how AWS Security Hub helps manage security across multiple AWS accounts.

Think about how it collects and shows security alerts from different places.

Describe the role of security standards in AWS Security Hub and why they are important.

Consider how standards guide what Security Hub looks for.