CCP AWS Cloud Security and Compliance 3

Question 1

Which AWS encryption option allows you to manage your own encryption keys using dedicated hardware security modules?

Accepted Answer

AWS CloudHSM

Answer

AWS KMS with AWS-managed keys

Answer

Server-Side Encryption with S3 keys

Answer

AWS Secrets Manager

Question 2

What does the principle of least privilege mean in AWS IAM?

Accepted Answer

Grant only the permissions needed to perform a specific task

Answer

Users should have access to all services by default

Answer

Administrators can override all permissions

Answer

All IAM roles share the same permissions

Question 3

Which AWS service helps you centrally manage and enforce policies across multiple AWS accounts in an organization?

Accepted Answer

AWS Organizations

Answer

AWS IAM

Answer

AWS Config

Answer

AWS Control Tower

Question 4

What is an IAM role primarily used for?

Accepted Answer

Granting temporary permissions to AWS services or external identities

Answer

Storing user passwords securely

Answer

Listing all S3 buckets

Answer

Monitoring CloudWatch alarms

Question 5

Which AWS service stores and rotates database credentials, API keys, and other secrets securely?

Accepted Answer

AWS Secrets Manager

Answer

AWS Key Management Service

Answer

AWS Parameter Store

Answer

Amazon Cognito

Question 6

Which compliance framework is most relevant for organizations that handle payment card data on AWS?

Accepted Answer

PCI DSS

Answer

HIPAA

Answer

SOC 2

Answer

FedRAMP