AWS Certified Data Analytics Specialty 2021 – Hands-On - AWS Services Security Deep Dive (3/3)

The video tutorial covers security features and configurations for various AWS services, including EMR, Elasticsearch, Redshift, Athena, and QuickSight. It discusses the importance of IAM roles, encryption at rest and in transit, and specific security measures like Kerberos authentication and Apache Ranger for EMR. The tutorial also highlights the use of VPC for network isolation, KMS for encryption, and IAM or Cognito for authentication across these services. Key points include understanding the security implications for exams and practical applications.

What is the purpose of attaching IAM roles to EC2 instances in EMR?

• To manage SSH access

• To enable access to S3 and DynamoDB

• To configure security groups

• To set up Kerberos authentication

Which of the following is NOT a supported encryption option for EMRFS?

• SSE-C

• Client-side encryption

• SSE-KMS

• SSE-S3

How can Elasticsearch be deployed to ensure network isolation?

• Using IAM roles

• Through Apache Ranger

• Within a VPC

• With Kerberos authentication

What is a unique feature of Redshift regarding encryption at rest?

• It uses client-side encryption by default

• It does not support encryption at rest

• It can use a custom HSM device

• It only supports KMS encryption

Which authentication method allows users to log into Kibana using enterprise identity providers?

• Apache Ranger

• Cognito

• Kerberos

• IAM roles

Which service uses IAM policies to control access and inherits security from S3?

• Elasticsearch

• Redshift

• Athena

• QuickSight

What feature does QuickSight offer for controlling which users can see specific rows of data?

• Column-level security

• Row-level security

• Table-level security

• Field-level security