AWS Security and Compliance Quiz

What is the primary responsibility of AWS in the shared responsibility model?

• Managing customer data

• Securing the cloud infrastructure

• Configuring security groups

• Encrypting data at rest

Which AWS service is used to manage user access and encryption keys?

• Amazon S3

• AWS IAM

• AWS Lambda

• Amazon EC2

Explain how AWS Identity and Access Management (IAM) helps in securing AWS resources.

• It provides a firewall to protect resources.

• It allows you to create and manage AWS users and groups and use permissions to allow and deny their access to AWS resources.

• It automatically encrypts all data stored in AWS.

• It monitors network traffic for suspicious activity.

Which of the following is a best practice for securing your AWS account?

• Use the root account for daily operations.

• Share your AWS credentials with trusted colleagues.

• Enable Multi-Factor Authentication (MFA) on the root account.

• Disable logging to save costs.

How does AWS CloudTrail help in maintaining compliance?

• By providing a virtual firewall for your instances.

• By automatically encrypting all data in transit.

• By recording AWS API calls for your account and delivering log files to you.

• By providing a content delivery network.

Evaluate the importance of encryption in AWS and how it can be implemented for data at rest.

• Encryption is not necessary if the data is stored in a private subnet.

• Encryption ensures data confidentiality and can be implemented using AWS Key Management Service (KMS) for data at rest.

• Encryption is only needed for data in transit.

• Encryption is automatically applied to all AWS services without configuration.

What is the role of AWS Config in security and compliance?

• It provides a web application firewall.

• It helps you assess, audit, and evaluate the configurations of your AWS resources.

• It automatically encrypts all data stored in AWS.

• It manages user access and permissions.

Analyze the impact of not regularly reviewing IAM policies in an AWS environment.

• It has no impact as AWS automatically updates policies.

• It can lead to unauthorized access and potential data breaches.

• It only affects the cost of AWS services.

• It improves the performance of AWS services.

Which AWS service can be used to detect and respond to security threats in real-time?

• AWS CloudFormation

• AWS Shield

• Amazon GuardDuty

• AWS Elastic Beanstalk

Discuss the strategic importance of using AWS Security Hub for an organization.

• It provides a centralized view of security alerts and compliance status across AWS accounts.

• It is used to deploy applications quickly.

• It automatically scales resources based on demand.

• It provides a content delivery network for faster content delivery.