AWS Security & Encryption: KMS, SSM Parameter Store, Cloud HSM, Shield & WAF Flashcards by Jana Dohman | Brainscape

Q

What is Encryption in flight (SSL)?

A

How well did you know this?

1

Not at all

2

3

4

5

Perfectly

Q

What is Server side encryption at rest?

A

How well did you know this?

1

Not at all

2

3

4

5

Perfectly

Q

What is Client side encryption?

A

How well did you know this?

1

Not at all

2

3

4

5

Perfectly

Q

What is AWS KMS (Key Management Service)?

A

How well did you know this?

1

Not at all

2

3

4

5

Perfectly

Q

What are the different types of KMS Keys Types available?

A

How well did you know this?

1

Not at all

2

3

4

5

Perfectly

Q

What are the different types of KMS Keys?

A

How well did you know this?

1

Not at all

2

3

4

5

Perfectly

Q

How does automation key rotation work in AWS KMS?

A

How well did you know this?

1

Not at all

2

3

4

5

Perfectly

Q

How would you copy encrypted EBS snapshots across regions?

A

How well did you know this?

1

Not at all

2

3

4

5

Perfectly

Q

What are KMS Key Policies?

A

How well did you know this?

1

Not at all

2

3

4

5

Perfectly

Q

How are KMS Key Policies used in the process of copying encrypted snapshots across accounts?

A

How well did you know this?

1

Not at all

2

3

4

5

Perfectly

Q

What are KMS Multi-Region Keys?

A

How well did you know this?

1

Not at all

2

3

4

5

Perfectly

Q

Why would you use KMS Multi-Region Keys?

A

How well did you know this?

1

Not at all

2

3

4

5

Perfectly

Q

How does DynamoDB Global Tables and KMS MultiRegion Keys Client-Side encryption work?

A

How well did you know this?

1

Not at all

2

3

4

5

Perfectly

Q

How does Global Aurora and KMS Multi-Region Keys Client-Side encryption work?

A

How well did you know this?

1

Not at all

2

3

4

5

Perfectly

Q

What are some S3 Replication
Encryption Considerations?

A

How well did you know this?

1

Not at all

2

3

4

5

Perfectly

Q

Should you use Multi-Region KMS Keys with S3 replication?

A

You can use multi-region AWS KMS Keys, but they are currently treated as independent keys by Amazon S3 (the object will still be decrypted and then encrypted).

How well did you know this?

1

Not at all

2

3

4

5

Perfectly

Q

How do you share an AMI when the AMI is encrypted via a KMS key?

A

How well did you know this?

1

Not at all

2

3

4

5

Perfectly

Q

How do you share an AMI across accounts?

A

You modify the Launch Permission in the origin account and add the specified target account

How well did you know this?

1

Not at all

2

3

4

5

Perfectly

Q

What is SSM Parameter Store?

A

Q

How does the SSM Parameter Store Hierarchy work?

A

Q

What are the two tiers in the SSM Parameter Store?

A

Q

What are Parameters Policies (for advanced parameters) in SSM Parameter Store?

A

Q

What does SSM of SSM Parameter Store stand for?

A

Simple Systems Manager Parameter Store

Q

What is AWS Secrets Manager?

A

Q

What are Multi-Region Secrets in AWS Secrets Manager?

A

Q

What is the AWS Certificate Manager (ACM)?

A

Q

What is the process to request public certificates in AWS Certificate Manager (ACM)?

A

Q

How do you import certificates into AWS Certificate Manager (ACM)?

A

Q

How does AWS Certificate Manager (ACM) integrate with Application Load Balancer (ALB)?

A

Q

What are the different Endpoint Types in the API Gateway?

A

Q

How do you integrate AWS Certificate Manager (ACM) with API Gateway?

A

Q

What is AWS WAF – Web Application Firewall?

A

Q

Can an AWS WAF be deployed on a Network Load Balancer?

A

No, only Application Load Balancers

Q

How to set up security on an AWS WAF?

A

Q

What if you want to get a fixed IP while using WAF with a Load Balancer?

A

Q

What is AWS Shield?

A

Q

What is AWS Firewall Manager?

A

Q

What is the difference between WAF vs. Firewall Manager vs. Shield?

A

Q

What are AWS Best Practices for DDoS Resiliency?

A

Q

What are the AWS Best Practices for DDoS Resiliency?

A

Q

AWS Best Practices for DDoS Resiliency?

A

Q

AWS Best Practices for DDoS Resiliency?

A

Q

What is Amazon GuardDuty?

A

Q

What is the architecture of Amazon GuardDuty?

A

Q

What is Amazon Inspector?

A

Q

What does Amazon Inspector evaluate?

A

Q

What is Amazon Macie?

A

Amazon Macie is a data security service that discovers sensitive data using machine learning and pattern matching, provides visibility into data security risks, and enables automated protection against those risks.