test from brainwork

Question 1

customer security responsibilities

Answer 1

1- Data encryption (at rest and in transit)

2- Setting up access control

3- Monitoring user activity

4- Applying MFA

5- Using advanced managed security services such as Amazon Macie.

Question 2

aws organizations

Answer 2

) Centrally manage access polices across multiple AWS accounts.

2) Automate AWS account creation and management.
3) Control access to AWS services.
4) Consolidate billing across multiple AWS accounts.
5) Configure AWS services across multiple accounts.

Question 3

aws cloud directory

Answer 3

loud-native, highly scalable, high-performance directory service that provides web-based directories to make it easy for you to organize and manage all your application resources such as users, groups, locations, devices, and policies, and the rich relationships between them.

Question 4

Amazon Cognito

Answer 4

lets customers add user sign-up, sign-in, and access control to their web and mobile apps quickly and easily. Amazon Cognito scales to millions of users and supports sign-in with social identity providers, such as Facebook, Google, and Amazon, and enterprise identity providers via SAML 2.0.

Question 5

aws x-ray

Answer 5

• Review request behavior:
  Discover application issues:
  Improve application performance

Question 6

chime

Answer 6

Amazon Chime is an AWS communications service that is used for online meetings, video conferencing, calls, and chat.

Question 7

AWS Glue

Answer 7

AWS Glue is a fully-managed, pay-as-you-go, extract, transform, and load (ETL) service that automates the time-consuming steps of data preparation for analytics.

Question 8

aws serveless

Answer 8

Compute: AWS Lambda, AWS Fargate

Messaging: Amazon SNS, Amazon SQS

Database: Amazon DynamoDB, Amazon Aurora Serverless

Orchestration: AWS Step Functions

Question 9

Amazon Simple Queue Service

Answer 9

s a fully managed message queuing service that enables you to decouple and scale microservices, distributed systems, and serverless applications. Amazon SQS offers a reliable, highly-scalable hosted queue for storing messages as they travel between applications or microservices. It moves data between distributed application components and helps you decouple these components.

Question 10

“Amazon CloudSearch

Answer 10

Amazon CloudSearch is a managed service in the AWS Cloud that makes it simple and cost-effective to set up, manage, and scale a search solution for your website or application.

Question 11

Amazon Polly

Answer 11

Amazon Polly is a service that turns text into lifelike speech.

Question 12

AWS Key Management Service

Answer 12

is a managed service that enables customers to easily create and control the keys used for cryptographic operations. The service provides a highly available key generation, storage, management, and auditing solution for customers to encrypt or digitally sign data within their applications or to control the encryption of data across AWS services.

Question 13

AWS Application Load Balancer

Answer 13

s part of the AWS Elastic Load Balancing family that is specifically designed to handle HTTP and HTTPS traffic.

Question 14

Access Keys

Answer 14

Access keys are long-term credentials for an IAM user or the AWS account root user. Customers can use access keys to sign programmatic requests to the AWS CLI or AWS API (directly or using the AWS SDK).

Question 15

“AWS CloudHSM

Answer 15

AWS CloudHSM is a cloud-based hardware security module (HSM) that enables customers to easily generate and use their own encryption keys on the AWS Cloud.

Question 16

AWS Key Pair

Answer 16

The AWS Key pair cryptography enables customers to securely access their Amazon EC2 instances using a private key instead of a password.