AWS Security

What is IAM Policies in AWS Security?

• IAM Policies in AWS Security are permissions attached to identities (users, groups, roles) that define what actions they can perform on AWS resources.

• IAM Policies are used for monitoring network traffic in AWS

• IAM Policies are related to billing and payment methods in AWS

• IAM Policies are used for managing physical security in AWS data centers

How does VPC Security help in securing AWS resources?

• VPC Security provides tools and configurations to manage and restrict access to AWS resources within a virtual private cloud environment.

• VPC Security only works for on-premises servers

• VPC Security is not necessary for cloud security

• VPC Security allows unlimited access to all AWS resources

Explain the importance of Encryption Key Management in AWS Security.

• Encryption Key Management is only relevant for non-sensitive data in AWS Security

• Encryption Key Management is not necessary in AWS Security

• Encryption Key Management does not impact data protection in AWS Security

• Encryption Key Management in AWS Security is essential for protecting sensitive data, preventing unauthorized access, and ensuring compliance with security standards.

What are Security Groups and how are they used in AWS Security?

• Security Groups are used to manage billing information in AWS.

• Security Groups are physical devices that control network traffic in AWS.

• Security Groups are virtual firewalls that control inbound and outbound traffic for instances in AWS.

• Security Groups are used to deploy serverless functions in AWS.

Differentiate between Network Access Control Lists and Security Groups in AWS Security.

• NACLs and Security Groups both operate at the instance level.

• NACLs are stateless and operate at the subnet level, while Security Groups are stateful and operate at the instance level.

• NACLs are stateful and operate at the instance level, while Security Groups are stateless and operate at the subnet level.

• NACLs and Security Groups are interchangeable in AWS Security.

What is the role of CloudTrail Logging in AWS Security?

• CloudTrail Logging is used for data storage only

• CloudTrail Logging is responsible for network security in AWS

• CloudTrail Logging is not relevant for AWS security

• CloudTrail Logging plays a crucial role in enhancing security by providing detailed logs of API calls and user activity within AWS services.

How do VPC endpoints enhance security in AWS?

• VPC endpoints enhance security by allowing direct access to AWS services without any encryption.

• VPC endpoints enhance security by exposing all traffic to the public internet.

• VPC endpoints enhance security by sharing network resources with other VPCs.

• VPC endpoints enhance security by providing private connectivity to AWS services within the VPC.

Discuss the significance of Database protection in AWS Security.

• Database protection in AWS Security only focuses on data availability

• Database protection in AWS Security is not necessary as AWS is already secure

• Database protection in AWS Security is crucial for preventing unauthorized access, data breaches, and ensuring data integrity through encryption, access controls, monitoring, and backups.

• Database protection in AWS Security can be achieved by sharing credentials openly

How can you protect data in Amazon S3 in terms of AWS Security?

• Use firewall rules

• Use bucket policies, access control lists (ACLs), IAM policies, server-side encryption, and versioning.

• Enable public access

• Share credentials openly

Explain the concept of Security Group in AWS Security.

• A Security Group in AWS Security is used for managing user permissions within the AWS console.

• A Security Group in AWS Security is a tool for monitoring network traffic in real-time.

• A Security Group in AWS Security is a physical device that restricts access to AWS resources.

• A Security Group in AWS Security acts as a virtual firewall for instances to control inbound and outbound traffic.