Realistic exam-style questions covering IAM, encryption, logging, incident response, and AWS security best practices