AWS Security & Compliance 1 — Questions and Answers

Question 1: Which AWS service is used for managing user access and permissions?

AWS IAM (Correct answer)
Amazon S3
AWS Lambda
Amazon RDS

Correct answer: AWS IAM

AWS Identity and Access Management (IAM) is the service used for securely managing access to AWS services and resources. It allows administrators to create and manage AWS users and groups, and use permissions to allow or deny their access to specific resources. IAM is fundamental for implementing the principle of least privilege and maintaining a secure cloud environment.

Question 2: Which AWS service provides centralized logging and monitoring?

AWS CloudTrail (Correct answer)
AWS Auto Scaling
AWS Route 53
Amazon Lightsail

Correct answer: AWS CloudTrail

AWS CloudTrail is a service that enables governance, compliance, operational auditing, and risk auditing of your AWS account. It records API calls and related events made by a user, role, or an AWS service, providing a history of activity for security analysis and troubleshooting. This centralized logging helps monitor actions taken across your AWS infrastructure.

Question 3: How does AWS Shield protect cloud applications?

Provides DDoS protection for applications (Correct answer)
Stores application backups
Optimizes cloud costs
Manages user authentication

Correct answer: Provides DDoS protection for applications

AWS Shield is a managed Distributed Denial of Service (DDoS) protection service that safeguards applications running on AWS. It provides always-on detection and automatic inline mitigations that minimize application downtime and latency. Shield offers two tiers: Standard, which is automatically included for all AWS customers, and Advanced, which provides enhanced protections and cost savings.

Question 4: Which AWS service is used to encrypt and manage cryptographic keys?

AWS KMS (Correct answer)
AWS Elastic Beanstalk
AWS Glue
Amazon CloudFront

Correct answer: AWS KMS

AWS Key Management Service (KMS) is a managed service that makes it easy for you to create and control the cryptographic keys used to encrypt your data. It integrates with other AWS services to encrypt data at rest and in transit, ensuring strong security and compliance. KMS allows you to manage access permissions to these keys, providing fine-grained control over your encryption strategy.

Question 5: What is the purpose of AWS Security Hub?

Provides a centralized view of security alerts (Correct answer)
Hosts static websites
Creates virtual private networks
Manages cloud billing

Correct answer: Provides a centralized view of security alerts

AWS Security Hub provides a comprehensive view of your security posture across your AWS accounts. It aggregates, organizes, and prioritizes security alerts and findings from various AWS services, such as GuardDuty, Inspector, and Macie, as well as from integrated AWS Partner solutions. This centralization helps you identify and address security issues more effectively.

Question 6: Which AWS service ensures compliance with regulatory standards?

AWS Artifact (Correct answer)
AWS Batch
AWS Step Functions
Amazon DynamoDB

Correct answer: AWS Artifact

AWS Artifact is your go-to central resource for compliance-related information and agreements. It provides on-demand access to AWS security and compliance reports, such as ISO certifications and SOC reports, and allows you to accept agreements like the Business Associate Addendum (BAA). This service helps customers understand and meet their regulatory and compliance obligations when using AWS.

AWS Security & Compliance 1

Which AWS service is used for managing user access and permissions?