Data Warehousing on AWS Training Data Warehousing on AWS: Security and Access Control 2

Question 1

Which AWS service allows you to centrally manage fine-grained access control for Amazon Redshift tables and columns?

Accepted Answer

AWS Lake Formation

Answer

AWS Lake Formation provides centralized, fine-grained access control at the table and column level for data stored in data lakes, including Redshift Spectrum.

Question 2

An organization wants to prevent Redshift users from accessing certain columns containing PII data. What is the most appropriate approach?

Accepted Answer

Use Redshift column-level access control with GRANT/REVOKE statements

Answer

Redshift supports column-level access control using GRANT and REVOKE SQL statements to restrict access to specific columns for individual users or groups.

Question 3

What is the purpose of enabling 'Enhanced VPC Routing' in Amazon Redshift?

Accepted Answer

To force all COPY and UNLOAD traffic through the VPC instead of the public internet

Answer

Enhanced VPC Routing forces all COPY and UNLOAD traffic between the cluster and data repositories through your VPC, enabling VPC security features like security groups and NACLs.

Question 4

A security audit reveals that an Amazon Redshift cluster's audit logs are not being captured. Where should audit logging be configured to send logs?

Accepted Answer

Amazon CloudWatch Logs or Amazon S3

Answer

Redshift audit logging can be configured to send connection logs, user logs, and user activity logs to either Amazon S3 or Amazon CloudWatch Logs.

Question 5

Which Redshift feature allows you to define row-level security policies so different users see different subsets of data in the same table?

Accepted Answer

Redshift Row-Level Security (RLS)

Answer

Amazon Redshift Row-Level Security (RLS) allows administrators to create policies that restrict which rows a user can access in a table based on defined predicates.

Data Warehousing on AWS Training Practice Test

Data Warehousing on AWS Training Practice Test

Data Warehousing on AWS Training Data Warehousing on AWS: Security and Access Control 2