Brainscape's Knowledge GenomeTM


Top Flashcards (Certified)
All Flashcards

AWS Data Engineering > 9. Security, Identity and Compliance > Flashcards

9. Security, Identity and Compliance Flashcards

(73 cards)

Start Studying
1
Q

What does AWS stand for?

A

Amazon Web Services

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

True or False: AWS provides a shared responsibility model for security.

A

True

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

What is the primary purpose of AWS Identity and Access Management (IAM)?

A

To manage access to AWS services and resources securely.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

Fill in the blank: IAM policies are written in __________.

A

JSON

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

What service can be used to manage user access to AWS resources?

A

AWS IAM

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

Which AWS service allows you to define user roles and permissions?

A

AWS IAM

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

What is an IAM role?

A

An IAM role is an AWS identity with specific permissions that can be assumed by trusted entities.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

True or False: AWS Organizations allows you to manage multiple AWS accounts.

A

True

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

What is the purpose of AWS CloudTrail?

A

To enable governance, compliance, and operational and risk auditing of your AWS account.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

What does MFA stand for in the context of AWS security?

A

Multi-Factor Authentication

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

What is the use of AWS Key Management Service (KMS)?

A

To create and control cryptographic keys for your applications and services.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

Which AWS service provides a centralized way to manage and audit access to AWS resources?

A

AWS IAM

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

What is the difference between an IAM user and an IAM role?

A

An IAM user is a permanent identity with long-term credentials, while an IAM role is a temporary identity with specific permissions.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

Which AWS service can be used to encrypt data at rest?

A

AWS KMS

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

True or False: Security groups act as a firewall for your Amazon EC2 instances.

A

True

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

What is a VPC in AWS?

A

A Virtual Private Cloud that enables you to launch AWS resources in a virtual network.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

What does the AWS Well-Architected Framework include?

A

Best practices for building secure, high-performing, resilient, and efficient infrastructure for applications.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

Fill in the blank: AWS provides __________ to help you monitor your applications and resources.

A

CloudWatch

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

What is the purpose of AWS Config?

A

To provide AWS resource inventory, configuration history, and configuration change notifications.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

True or False: AWS Shield provides DDoS protection.

A

True

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

Which AWS service helps you manage compliance with security standards?

A

AWS Artifact

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

What is the main function of Amazon GuardDuty?

A

To provide intelligent threat detection and continuous monitoring for malicious activity.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

What is the purpose of AWS Secrets Manager?

A

To protect access to your applications, services, and IT resources without the upfront investment and on-going maintenance costs of operating your own infrastructure.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

Fill in the blank: __________ is the service that allows you to set up a firewall to control access to your AWS resources.

A

AWS WAF

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
True or False: IAM policies can be attached to users, groups, and roles.
True
26
What does AWS Security Hub do?
It provides a comprehensive view of your high-priority security alerts and compliance status across AWS accounts.
27
What is a common best practice for managing AWS IAM credentials?
Rotate IAM credentials regularly.
28
What type of authentication does AWS Cognito provide?
User authentication and access control for applications.
29
Fill in the blank: AWS __________ allows you to build applications that require authentication and authorization.
Cognito
30
True or False: You can use IAM roles to grant permissions to AWS services to access other AWS resources.
True
31
What is the main benefit of using an AWS VPN?
To securely connect your on-premises network to an AWS VPC.
32
Which AWS service provides a way to monitor and respond to security incidents?
AWS Security Hub
33
Fill in the blank: __________ is used to manage and rotate database credentials.
AWS Secrets Manager
34
What is the main purpose of AWS Artifact?
To provide access to AWS's compliance documentation.
35
What does the principle of least privilege mean?
Users should only have the permissions necessary to perform their job functions.
36
True or False: Data in transit can be encrypted using AWS services.
True
37
What is the purpose of AWS CloudFormation in the context of security?
To automate the deployment of AWS resources with predefined security configurations.
38
Fill in the blank: __________ is used to create and manage user permissions for AWS resources.
AWS IAM
39
What security feature does Amazon S3 offer to control access to buckets?
Bucket policies and access control lists (ACLs).
40
What is AWS Inspector used for?
To assess the security and compliance of applications deployed on AWS.
41
True or False: AWS provides automatic backups for all services.
False
42
What is a security group in AWS?
A virtual firewall that controls inbound and outbound traffic for AWS resources.
43
Fill in the blank: AWS __________ provides a scalable and secure way to store and retrieve any amount of data.
S3
44
What is the purpose of AWS CloudTrail?
To log, continuously monitor, and retain account activity related to actions across your AWS infrastructure.
45
What type of encryption does AWS S3 support?
Server-side and client-side encryption.
46
True or False: AWS accounts can be linked together for consolidated billing.
True
47
What is the function of AWS Lambda in terms of security?
To run code in response to events without provisioning or managing servers.
48
Fill in the blank: __________ allows you to set up rules to block malicious web traffic.
AWS WAF
49
What does the term 'data sovereignty' refer to?
The concept that data is subject to the laws and governance structures within the nation it is collected.
50
What is the role of AWS Organizations in security?
To manage multiple AWS accounts and apply security policies across them.
51
What is the purpose of AWS Control Tower?
To set up and govern a secure, multi-account AWS environment based on best practices.
52
True or False: AWS allows you to set up custom security policies for IAM users.
True
53
What is a bastion host?
A special-purpose instance that acts as a gateway to access instances in a private subnet.
54
Fill in the blank: AWS __________ provides tools for managing security compliance at scale.
Security Hub
55
What is the purpose of AWS Resource Access Manager?
To share AWS resources across accounts securely.
56
True or False: AWS services are designed to be compliant with various industry standards.
True
57
What is the function of Amazon Macie?
To discover and protect sensitive data stored in AWS.
58
Fill in the blank: AWS __________ provides an integrated view of security alerts and compliance status.
Security Hub
59
What is the primary benefit of using AWS encryption services?
To protect sensitive data both at rest and in transit.
60
What is the role of AWS Trusted Advisor?
To provide real-time guidance to help you provision your resources following AWS best practices.
61
True or False: AWS services can be configured to automatically respond to security incidents.
True
62
What is AWS Systems Manager used for?
To manage and automate operational tasks across AWS resources.
63
Fill in the blank: __________ is a service that provides a unified view of security and compliance across AWS accounts.
AWS Security Hub
64
What is the purpose of the AWS Well-Architected Tool?
To help you review the state of your workloads and compare them to AWS best practices.
65
What does the AWS Compliance Program focus on?
Ensuring AWS services meet various regulatory and compliance standards.
66
True or False: AWS provides a free tier for many of its security services.
True
67
What is the function of Amazon Inspector?
To perform automated security assessments of applications deployed on AWS.
68
Fill in the blank: AWS __________ provides a way to audit and monitor AWS account activity.
CloudTrail
69
What is the purpose of AWS Config Rules?
To evaluate the configurations of your AWS resources against desired configurations.
70
What does the term 'principle of least privilege' mean in AWS?
Users should have only the permissions necessary to perform their job functions.
71
True or False: AWS allows you to set up alerts for security incidents.
True
72
What is the purpose of AWS SSO?
To provide a centralized way to manage access to multiple AWS accounts.
73
Fill in the blank: AWS __________ provides tools to help manage your security posture.
Security Hub

AWS Data Engineering (14 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2025 Bold Learning Solutions. Terms and Conditions