Module 6: Security

Question 1

A way to consolidate and manage multiple AWS accounts within a central location.

Answer 1

AWS Organizations

Question 2

In AWS Organizations, you can centrally control permissions for the accounts in your organization by using

Answer 2

service control policies (SCPs)

Question 3

This enable you to place restrictions on the AWS services, resources, and individual API actions that users and roles in each account can access.

Answer 3

service control policies (SCPs)

Question 4

What can SCPs be applied to

Answer 4

An individual member account
root
OU

Question 5

An identity that you create in AWS

Answer 5

IAM user

Question 6

IAM users have no default permissions assigned, True or False

Answer 6

True

Question 7

A document that allows or denies permissions to AWS services and resources

Answer 7

IAM policy

Question 8

A collection of IAM users

Answer 8

IAM group

Question 9

An identity that you can assume to gain temporary access to permissions

Answer 9

IAM role

Question 10

shared responsibility model: Database

Answer 10

AWS

Question 11

shared responsibility model: Server side encryption

Answer 11

Customer

Question 12

shared responsibility model: Networking

Answer 12

AWS

Question 13

shared responsibility model: Storage

Answer 13

AWS

Question 14

shared responsibility model: Customer Data

Answer 14

Customer

Question 15

shared responsibility model: Storage

Answer 15

AWS

Question 16

shared responsibility model: Regions

Answer 16

AWS

Question 17

shared responsibility model: Network traffic protection

Answer 17

Customer

Question 18

a service that provides on-demand access to AWS security and compliance reports and select online agreements

Answer 18

AWS Artifact

Question 19

With this you can review, accept, and manage agreements for an individual account and for all your accounts in AWS Organizations. Different types of agreements are offered to address the needs of customers who are subject to specific regulations, such as the Health Insurance Portability and Accountability Act (HIPAA).

Answer 19

AWS Artifact Agreements

Question 20

This report provides compliance reports from third-party auditors

Answer 20

AWS Artifact Reports

Question 21

A service that protects applications against DDoS attacks

Answer 21

AWS Shield

Question 22

AWS Shield provides two levels of protection:

Answer 22

Standard and Advanced

Question 23

This level of aws shield automatically protects all AWS customers at no cost. It protects your AWS resources from the most common, frequently occurring types of DDoS attacks.

Answer 23

Standard

Question 24

This level of aws shield is a paid service that provides detailed attack diagnostics and the ability to detect and mitigate sophisticated DDoS attacks.

Answer 24

Advanced

Question 25

This level of aws shield integrates with other services such as Amazon CloudFront, Amazon Route 53, and Elastic Load Balancing. Additionally, you can integrate AWS Shield with AWS WAF by writing custom rules to mitigate complex DDoS attacks.

Answer 25

Advanced