AWS Certified Data Analytics Specialty 2021 - Hands-On! - Amazon Web Services AWS Security Features Deep Dive - Part 3

The video tutorial covers security and encryption features for various AWS services including ER, EC2, EMR, Elasticsearch, Redshift, Athena, and QuickSight. It emphasizes the importance of understanding these features for exam preparation, detailing IAM roles, security groups, encryption methods, and authentication mechanisms. The tutorial also highlights the need for network isolation and data protection across these services.

What is the primary purpose of attaching IAM roles to EC2 instances?

• To configure security groups

• To manage SSH access

• To set up Apache Ranger

• To enable access to S3 and Moddb

Which type of encryption is not supported by EMR EFS?

• SSE-S3

• SSC

• Client-side encryption

• SSE-KMS

What is the role of security groups in an EMR cluster?

• To allow node-to-node communication

• To manage IAM roles

• To encrypt data at rest

• To authenticate users with Kerberos

How can Elasticsearch data be encrypted at rest?

• Using LUX encryption

• Using Apache Ranger

• Using KMS

• Using IAM roles

Which authentication method allows users to log into Kibana using enterprise identity providers?

• Cognito-based authentication

• Apache Ranger

• IAM-based authentication

• Kerberos authentication

What type of encryption does Athena use for data in transit?

• TLS

• HSM

• SSL

• KMS

Which feature in QuickSight allows control over which user can see specific rows?

• Federated login

• Multi-factor authentication

• Row-level security

• IAM policies