Security

Question 1

What does the AD Connector require, and what does it Provide

Answer 1

Requires an existing AD server
Provides access to AWS assets via AD

Question 2

How can AD Connector support MFA

Answer 2

Using a RADIUS based MFA server

Question 3

What AD features does Simple AD support?

Answer 3

User Accounts, Groups, Group Policies, Domains, Kerberos SSO

Question 4

Does Simple AD support MFA? Does it support Trust Relationships?

Answer 4

No to both

Question 5

NACL & SG: Which is Stateful and Stateless

Answer 5

NACL is Stateless
SG is Stateful

Question 6

What’s the difference between a Stateful and Stateless Firewall?

Answer 6

Stateful remembers connections, Stateless doesn’t.

Question 7

Do NACL’s and SG’s support outbound rules?

Answer 7

NACL’s do
SG’s don’t

Question 8

What are Ephemeral Ports and what is their port range?

Answer 8

Ports that are open one at a time for unique visitor requests. Port range is 1024 – 65535

Question 9

Describe CloudHSM

Answer 9

Physical client-provided encryption encryption key device for generating RSA and AES signatures. Required to pass FIPS 140-2 Level 3 compliance.

Question 10

Describe AWS KMS

Answer 10

Tool for Creating, Storing, Managing, and Auditing encryption keys within AWS.

Question 11

What’s the difference between CloudWatch and CloudTrail

Answer 11

CloudWatch tracks resource usage (like Zabbix). CloudTrail tracks API calls made within AWS.