Unapproved modification of firewall rules and Unauthorized access to a customer database are correct answers.

Unapproved modification of firewall rules should generate a security alert because firewall rules enforce network access boundaries. Changes made outside of approved change control can open attack paths or indicate compromised credentials or malicious insiders and therefore require immediate validation and remediation.

Unauthorized access to a customer database is a clear security incident because it involves potential exposure or tampering of sensitive customer data. This kind of event must be contained investigated and reported as appropriate given the regulatory and business impact for a payments company.

Routine successful email transmission is not a security event in this context because it describes normal, expected operation. It does not by itself indicate compromise unless it is anomalous or tied to other suspicious indicators.

Unexpected rise in server room temperature is primarily an environmental or facilities alert rather than a direct security event. It can cause outages and should be addressed quickly by facilities teams but it does not alone signal malicious activity unless correlated with other security signals.

Sudden large volume of outbound data transfers can be noisy and often has legitimate causes such as backups or scheduled uploads. It is an indicator to monitor and correlate with access patterns before escalating to a full security investigation to avoid excessive false positives.

Full AWS Practitioner Certification Question