Module 4

In the shared responsibility model, AWS responsible for providing what?(Select best answer)

• Security of the cloud

• Security to the cloud

• Security for the cloud

• Security in the cloud

In the shared responsibility model, which of the following are examples of "security in the cloud"? choose 2.

• encryption of data at rest and data in transit

• security group configurations

• Protecting the global infrastructure

• Physical security of the facilities in which the services operates

• Compliance with compute security standards and regulations.

Which of the following is the responsibility of aws under the shared responsibility model?(Select best answer)

• maintaining physical hardware

• Configuring third party application

• Security applications access and data

• Managing custom Amazon Machine Images

When creating an aws identity and access management (IAM) policy, what are the 2 types of access that can be granted to a user?( choose 2).

• Institutional Access

• Authorized Access

• Programmatic Access

• AWS Management Console Access

• Administrative root access

True or False? AWS organizations enables you to consolidate multiple AWS accounts so that you centrally manage them

• True

• False

Which of the following are best practices to secure your account using AWS Identity and Access Management (IAM)? Choose 2.

• managing access to AWS resources

• defining fine-grained access rights

• Provide users with default administrative privileges.

• leave unused and unmanaged users and credentials in place.

• avoid using IAM groups to grant the same access permissions to multiple users

Which of the following should be done by the AWS account root user

• Change granular permissions

• Change the AWS support plan

• Integrate with other AWS services

• Secure access for applications

After initial login, what does AWS recommend as the best practice for the AWS account root user?

• Delete the access keys of the AWS account root user

• Delete the AWS account root user

• Revoke all permissions on the AWS account root user.

• Restrict permissions on the AWS account root users.

How would a system administrator add an additional layer of login security to a user's AWS management console?(Select best answer)

• Use Amazon Cloud directory

• Audit AWS identity and Access Management roles (IAM).

• Enable multi-factor authentication

• Enable AWS CloudTrail

True or False? AWS key management service (AWS kms) enables you to assess, audit, and evaluate the configurations of your AWS resources.

• True

• False