AWS Certified Cloud Security

Currently your organization has an operational team that takes care of ID management in their on-premise data center. They now also need to manage users and groups created in AWS. Which of the following AWS tools would they need to use for performing this management function.

• AWS Config

• AWS Cloud Trail

• AWS Key Management Service (AWS KMS)

• AWS Identity and Access Management (IAM)

Select TWO statements that describe the main roles of AWS Web Application Firewall (WAF) and AWS Shield?

• AWS Shield Standard is inherently available within the AWS WAF service at no

  extra cost

• AWS WAF is inherently available within the AWS Shield Standard service at an

  additional charge

• AWS Web Application Firewall (WAF) will provide expanded protection against SYN floods, DNS query oods and UDP reflection attacks at no additional cost

• AWS Web Application Firewall (WAF) and AWS Shield are fully-managed services

• AWS WAF is a web application rewall that includes AWS Shield - a service that prevents distributed denial of service (DDoS) attacks

Which of the following is the responsibility of AWS according to the Shared Security Model?

Choose 3 answers from the options given below

• Managing AWS Identity and Access Management (IAM)

• Securing edge locations

• Monitoring physical device security

• Implementing service organization Control (SOC) standards

A Disaster Recovery Strategy on AWS should be based on launching resources in a separate :

• Subnet

• AWS Region

• Security Group

• Amazon Virtual Private Cloud (Amazon VPC)

During an organisation’s information systems audit, the administrator is requested to provide a dossier of security and compliance reports as well as online service agreements that exist between the organisation and AWS. Which service can they utilize to acquire this information?

• AWS Artifact

• AWS Resource Center

• AWS Service Catalog

• AWS Directory Service