Brainscape's Knowledge GenomeTM

Browse over 1 million classes created by top students, professors, publishers, and experts.


See full index

A Cloud Guru - AWS > Security > Flashcards

Security Flashcards

1
Q

How to block IP at EC2 Instance level?

A

“Host based firewall
Linux:iptables,ufw,firewalid
Windows: Windows Firewall”

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

How to block IP at EC2 in Security group Instance level?

A

“Using Security group can allow only valid IP & all other will be denied.
Add host based firewall at EC2 instance”

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

How to block IP at EC2 in Security group with VPC?

A

“preferably Add WAF to filter IP address or Add NACL & permit only valid address & reject bad address.
Using Security group can allow only valid IP & all other will be denied.
Add host based firewall at EC2 instance”

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

How to block IP at EC2 in Security group with VPC along with Application load balancer?

A

“ALB hide end user ip; preferably Add WAF to filter IP address or add NACL before ALB.
Security group & host based firewall is ineffective in this case.”

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

How to block IP at EC2 in Security group with VPC along with network load balancer?

A

“NLB do not hide end user IP; So Security group & Host based firewall will be effective.
preferably Add WAF to filter IP address or Add NACL before NLB so that we allow only valid traffic to NLB”

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

How to block IP at EC2 in Security group with VPC along with ALB & Cloud front?

A

“Cloud front will hide end user IP & its outside VPC so NACL cant be used;
Add WAF before cloud front to filter IP address .
Security group & host based firewall is ineffective in this case.”

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

How to block all IP coming from a country?

A

Cloud Front Geo match feature can block all IP originated from a particular country.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

Is KMS is global service?

A

No KMS is a reginal managed service.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

Abbreviation for KMS?

A

Key Managed Service

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

What is the use of KMS?

A

KMS is used to manage security keys which is used to encrypt & decrypt data.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

abbreviation for CMK?

A

Customer managed keys

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

What is use of CMK?

A

CMK is the logical representation of a key

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

Can we transfer CMK from one region to another?

A

No CMK will never leave the region.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

What is the max size of data KMS can encrypt/decrypt?

A

4KB

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

What KMS service is charged?

A

KMS service charged is based on pay per API call?

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

Can we see audit logs for KMS?

A

Yes using CloudTrail; we can do audit log for KMS which is delivered to s3.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

What is the cryptography standard achieved by KMS service?

A

FIPS 140-2 level 2

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

What is the cryptography standard achieve by Cloud HSM service?

A

FIPS 140-2 level 3

19
Q

What are the different types of KMS?

A

“AWS Managed CMK
Customer Managed CMK
AWS Owned CMK”

20
Q

what are the different type of encryption used in CMK?

A

“Symmetric

Asymmetric”

21
Q

Where we use Symmetric encryption?

A

Used for encrypt & decrypt data.

22
Q

Symmetric encryption uses which standards?

A

AES-256

23
Q

Where we use Asymmetric encryption?

A

Used for sign messages & verify signatures

24
Q

Asymmetric encryption uses which standards?

A

RSA \ ECC

25
Q

What is abbreviation for HSM?

A

Hardware security Module

26
Q

What is use of HSM?

A

HSM provide tamper resistant environment for managing keys.

27
Q

Difference between KMS & HSM?

A

“In KMS AWS manage our keys

in HSM we manage our keys”

28
Q

What is the use of Parameter store?

A

parameter store allows you to securly store parameter values in AWS.

29
Q

How parameter in parameter store are organized?

A

hierarchy

30
Q

Which API call allows you to rederive all parameter from hierarchy?

A

GetParameterByPath

31
Q

What is the max level we can organize parameter in parameter store?

A

15

32
Q

What can be stored in parameter store?

A

DB password, connection string & app config

33
Q

Parameter store is free service?

A

Yes

34
Q

What is secrets manager service?

A

It is similar to parameter store with addition of password rotation & updated to RDS service.

35
Q

secrets manager is free service?

A

no

36
Q

What is difference between parameter store & secrets manager?

A

Automatic password rotation & update in RDS

37
Q

What is AWS Shield?

A

AWS Sheld service provide protection against DDOS attack

38
Q

Wat are the different types of AWS Shield?

A

“AWS Shield Standard

AWS Shield Advance”

39
Q

AWS Shield Standard is free service?

A

Yes

40
Q

AWS Shield Advance is free service?

A

no

41
Q

Where we can use WAF?

A

WAF monitor traffic of CloudFront ,ALB & API Gateway

42
Q

What are the different behaviors of WAF?

A

Allow, Block & Count

43
Q

What is AWS Firewall Manger?

A

AWS Firewall manager allows you manage firewall rules across an organization

A Cloud Guru - AWS (11 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2024 Bold Learning Solutions. Terms and Conditions