AWS Security & Encryption: KMS, SSM Parameter Store, Cloud HSM, Shield & WAF Flashcards by Jana Dohman

Q

What is Encryption in flight (SSL)?

A

How well did you know this?

1

Not at all

2

3

4

5

Perfectly

Q

What is Server side encryption at rest?

A

How well did you know this?

1

Not at all

2

3

4

5

Perfectly

Q

What is Client side encryption?

A

How well did you know this?

1

Not at all

2

3

4

5

Perfectly

Q

What is AWS KMS (Key Management Service)?

A

How well did you know this?

1

Not at all

2

3

4

5

Perfectly

Q

What are the different types of KMS Keys Types available?

A

How well did you know this?

1

Not at all

2

3

4

5

Perfectly

Q

What are the different types of KMS Keys?

A

How well did you know this?

1

Not at all

2

3

4

5

Perfectly

Q

How does automation key rotation work in AWS KMS?

A

How well did you know this?

1

Not at all

2

3

4

5

Perfectly

Q

How would you copy encrypted EBS snapshots across regions?

A

How well did you know this?

1

Not at all

2

3

4

5

Perfectly

Q

What are KMS Key Policies?

A

How well did you know this?

1

Not at all

2

3

4

5

Perfectly

Q

How are KMS Key Policies used in the process of copying encrypted snapshots across accounts?

A

How well did you know this?

1

Not at all

2

3

4

5

Perfectly

Q

What are KMS Multi-Region Keys?

A

How well did you know this?

1

Not at all

2

3

4

5

Perfectly

Q

Why would you use KMS Multi-Region Keys?

A

How well did you know this?

1

Not at all

2

3

4

5

Perfectly

Q

How does DynamoDB Global Tables and KMS MultiRegion Keys Client-Side encryption work?

A

How well did you know this?

1

Not at all

2

3

4

5

Perfectly

Q

How does Global Aurora and KMS Multi-Region Keys Client-Side encryption work?

A

How well did you know this?

1

Not at all

2

3

4

5

Perfectly

Q

What are some S3 Replication
Encryption Considerations?

A

How well did you know this?

1

Not at all

2

3

4

5

Perfectly

Q

Should you use Multi-Region KMS Keys with S3 replication?

A

You can use multi-region AWS KMS Keys, but they are currently treated as independent keys by Amazon S3 (the object will still be decrypted and then encrypted).

How well did you know this?

1

Not at all

2

3

4

5

Perfectly

Q

How do you share an AMI when the AMI is encrypted via a KMS key?

A

How well did you know this?

1

Not at all

2

3

4

5

Perfectly

Q

How do you share an AMI across accounts?

A

You modify the Launch Permission in the origin account and add the specified target account

How well did you know this?

1

Not at all

2

3

4

5

Perfectly

Q

What is SSM Parameter Store?

A

Q

How does the SSM Parameter Store Hierarchy work?

A

Q

What are the two tiers in the SSM Parameter Store?

A

Q

What are Parameters Policies (for advanced parameters) in SSM Parameter Store?

A

Q

What does SSM of SSM Parameter Store stand for?

A

Simple Systems Manager Parameter Store

Q

What is AWS Secrets Manager?

A

What are Multi-Region Secrets in AWS Secrets Manager?

What is the AWS Certificate Manager (ACM)?

What is the process to request public certificates in AWS Certificate Manager (ACM)?

How do you import certificates into AWS Certificate Manager (ACM)?

How does AWS Certificate Manager (ACM) integrate with Application Load Balancer (ALB)?

What are the different Endpoint Types in the API Gateway?

How do you integrate AWS Certificate Manager (ACM) with API Gateway?

What is AWS WAF – Web Application Firewall?

Can an AWS WAF be deployed on a Network Load Balancer?

No, only Application Load Balancers

How to set up security on an AWS WAF?

What if you want to get a fixed IP while using WAF with a Load Balancer?

What is AWS Shield?

What is AWS Firewall Manager?

What is the difference between WAF vs. Firewall Manager vs. Shield?

What are AWS Best Practices for DDoS Resiliency?

What are the AWS Best Practices for DDoS Resiliency?

AWS Best Practices for DDoS Resiliency?

AWS Best Practices for DDoS Resiliency?

What is Amazon GuardDuty?

What is the architecture of Amazon GuardDuty?

What is Amazon Inspector?

What does Amazon Inspector evaluate?

What is Amazon Macie?

Amazon Macie is a data security service that discovers sensitive data using machine learning and pattern matching, provides visibility into data security risks, and enables automated protection against those risks.