Cloud Engineer Regulatory Frameworks & Compliance 5

Question 1

Which AWS service is specifically designed to help customers demonstrate compliance by providing on-demand access to AWS security and compliance reports?

Accepted Answer

AWS Artifact

Answer

AWS Artifact provides on-demand access to AWS compliance reports (e.g., SOC, PCI, ISO) and agreements, helping customers meet their own compliance needs.

Question 2

A company must comply with ITAR (International Traffic in Arms Regulations). What does this primarily restrict in cloud environments?

Accepted Answer

Access to defense-related technical data by foreign nationals or non-US cloud regions

Answer

ITAR restricts the export of defense-related technical data, meaning it must only be accessible to US persons and stored in US-controlled cloud environments.

Question 3

Under the EU-US Data Privacy Framework, which principle requires organizations to provide individuals the ability to correct inaccurate personal data?

Accepted Answer

Access

Answer

The Access principle requires that individuals be able to access personal data held about them and correct, amend, or delete inaccurate information.

Question 4

A cloud engineer implements network segmentation to isolate cardholder data environments (CDE). Which PCI DSS benefit does this provide?

Accepted Answer

Reduces the scope of the PCI DSS assessment

Answer

Network segmentation that isolates the CDE from other networks reduces the number of systems and processes in scope for PCI DSS assessment, simplifying compliance.

Question 5

Which NIST Special Publication provides security controls specifically for protecting Controlled Unclassified Information (CUI) in non-federal systems?

Accepted Answer

NIST SP 800-171

Answer

NIST SP 800-171 defines security requirements for protecting CUI in non-federal information systems, and compliance is required for DoD contractors.

Cloud Engineer Practice Test

Cloud Engineer Practice Test

Cloud Engineer Regulatory Frameworks & Compliance 5