Brainscape's Knowledge GenomeTM

Browse over 1 million classes created by top students, professors, publishers, and experts.


See full index

AWS Cloud Practitioner Essentials > Security > Flashcards

Security Flashcards

1
Q

What is the Shared Responsibility Model?

A

AWS is responsible for “Security of Cloud” & you’re responsible for “Security in Cloud”

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

What is the Customer’s Responsibility in the Cloud?

A
  • Customer Data
  • Platform, Applications, Identify & Access Management
  • OS’s, Network, & Firewall Configurations
  • Client-side Data Encryption
  • Server-Side Encryption
  • Networking Traffic Protection
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

What is AWS’s Responsibility of the Cloud?

A
  • Software
  • Compute
  • Storage
  • Database
  • Networking
  • Hardware/AWS Global Infrastructure
  • Regions
  • Availability Zones
  • Edge Locations
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

What is AWS Identity & Access Management (IAM)?

A

Manage access to AWS services & resources securely & lets you configure access based on your company’s specific operation & security needs.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

What is an IAM User?

A

Identity you create in AWS that represents person or application that interacts with AWS services & resources.
- Consists of name & credentials.
- Default: has no permissions associated w/ it.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

What is an IAM Policy?

A

JSON Document that allows or denies permissions to AWS services & resources.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

What is an IAM Group?

A

Collection of IAM Users where all users in group have only the permissions of the policy of the IAM Group.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

What is an IAM Role?

A

Identity user can assume to gain temporary access to permissions.
- Must be granted permissions to switch to role.
- Abandons all previous permissions and has only new permissions.
- Ideal for user needs TEMPORARY access to services/resources, NOT LONG-TERM.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

What is Multi-factor Authentication (MFA)?

A

Requires user to give more than one form of verification to access account which provides extra layer of security to AWS account.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

What is an AWS Organization?

A

Consolidates & manages multiple AWS accounts w/in a central location.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

What is an AWS Organizational Unit?

A

Grouping of AWS accounts to make it easier to manage accounts w/ similar business or security requirements.
- When you apply a policy to an OU, all the accounts in the OU automatically inherit the permissions specified in the policy.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

What is AWS Artificat?

A

Provides on-demand access to AWS security & compliance reports & select online agreements.
Consists of two main sections:
- AWS Artifact Agreements
- AWS Artifact Reports

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

What are AWS Artifact Agreements?

A

You can review, accept, & manage agreements for an individual account & for all your accounts in AWS Organizations.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

What are AWS Artifact Reports?

A

Provide compliance reports from 3-party auditors who have tested & verified that AWS is compliant w/ variety of global, regional, & industry specific security standards & regulations & always stay up to date.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

What is the Customer Compliance Center?

A

Group of resources that helps you more a/b AWS compliance.
- Can help you w/ compliance questions & auditing security checklist.
- Can see how other companies solved compliance problems.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

What is AWS Shield?

A

Protects applications from DDoS attacks.
Has two levels:
- Standard
- Advanced

17
Q

What is AWS Shield Standard?

A

Automatically protects all AWS customers for free from most common frequent DDoS attacks.

18
Q

What is AWS Shield Advanced?

A

Protects from sophisticated DDoS attacks & integrates w/ other services s/a:
- Amazon CloudFront
- Amazon Rout 53
- Elastic Load Balancing

Also you can integrate with AWS WAF to write complex rules to mitigate DDoS attacks.

19
Q

What is AWS Key Management Service (AWS KMS)?

A

Managed service that makes it easy to create & control encryption keys that are used to encrypt your data.

20
Q

What is AWS WAF (Web Application Firewall)?

A

Web Application Firewall that monitors network requests that come into your web applications.

21
Q

What is Amazon Inspector?

A

Helps improve security & compliance of applications by running automated security assessments that check for weaknesses & changes from security best practices & offers recommendations on how to fix them.

22
Q

What is Amazon GuardDuty?

A

Proved intelligent threat detection for AWS infrastructure & resources by identifying threats by always monitoring network activity & account behavior w/in AWS environment.

AWS Cloud Practitioner Essentials (14 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2024 Bold Learning Solutions. Terms and Conditions