Architecting on AWS Certification Safety Practices & PPE 5

Question 1

An architect is designing a VPC and wants to add an extra layer of stateless traffic filtering at the subnet boundary. Which AWS component provides this?

Accepted Answer

Network Access Control Lists (NACLs)

Answer

NACLs are stateless firewalls that operate at the subnet level, filtering both inbound and outbound traffic based on rules.

Question 2

Which AWS service enables centralized management of firewall rules across multiple accounts and VPCs in an AWS Organization?

Accepted Answer

AWS Firewall Manager

Answer

AWS Firewall Manager provides centralized administration and enforcement of firewall rules across an AWS Organization from a single account.

Question 3

A company processes payment data and must meet PCI DSS compliance. Which AWS tool provides compliance reports and attestations to verify AWS infrastructure meets this standard?

Accepted Answer

AWS Artifact

Answer

AWS Artifact provides on-demand access to AWS compliance reports, including PCI DSS Attestations of Compliance, for audit and compliance verification.

Question 4

Which encryption option for S3 allows the customer to provide and manage their own encryption keys outside of AWS, while AWS performs the encryption?

Accepted Answer

SSE-C (Server-Side Encryption with Customer-Provided Keys)

Answer

SSE-C lets customers provide their own encryption keys with each request; AWS uses the key to encrypt/decrypt but never stores it.

Question 5

An application team wants to receive automated alerts when a root account login is detected in their AWS account. Which combination of services achieves this?

Accepted Answer

Use AWS CloudTrail with CloudWatch alarms filtering for root login events

Answer

CloudTrail logs the root login event and a CloudWatch metric filter plus alarm can trigger an SNS notification when a root account sign-in is detected.

Architecting on AWS Certification Practice Test

Architecting on AWS Certification Practice Test

Architecting on AWS Certification Safety Practices & PPE 5