AWS Solutions Architect Security & Compliance

Question 1

Which AWS service is used to manage user access and permissions securely?

Accepted Answer

AWS Identity and Access Management (IAM)

Answer

AWS Identity and Access Management (IAM) is the AWS service used to manage user access and permissions securely. IAM allows you to control who is authenticated and authorized to use resources, enabling you to define granular permissions for users, groups, and roles. This is fundamental for enforcing the principle of least privilege and maintaining a secure cloud environment.

Question 2

What is the primary benefit of enabling Multi-Factor Authentication (MFA) for AWS accounts?

Accepted Answer

Adds an extra layer of security against unauthorized access

Answer

The primary benefit of enabling Multi-Factor Authentication (MFA) for AWS accounts is that it adds a crucial extra layer of security against unauthorized access. MFA requires users to provide two or more verification factors to gain access, typically something they know (password) and something they have (e.g., a token or mobile device). This significantly reduces the risk of account compromise, even if a password is stolen.

Question 3

Which AWS service helps protect applications from Distributed Denial of Service (DDoS) attacks?

Accepted Answer

AWS Shield

Answer

AWS Shield is a managed Distributed Denial of Service (DDoS) protection service that safeguards applications running on AWS. It provides always-on detection and automatic inline mitigations to protect against common and sophisticated DDoS attacks. This ensures the availability and performance of your applications even under attack.

Question 4

What is the purpose of AWS Key Management Service (KMS)?

Accepted Answer

Manages encryption keys for securing data

Answer

AWS Key Management Service (KMS) is a managed service that makes it easy for you to create and control the encryption keys used to encrypt your data. It integrates with other AWS services to provide encryption for data at rest and in transit. KMS helps you maintain control over your cryptographic keys, enhancing data security and compliance.

Question 5

Which AWS service provides compliance and governance monitoring for cloud resources?

Accepted Answer

AWS Config

Answer

AWS Config provides a detailed inventory of your AWS resources and their configurations, continuously monitoring for changes. It allows you to assess, audit, and evaluate the configurations of your AWS resources, helping ensure compliance with internal guidelines and regulatory standards. By tracking resource changes, Config enables governance and operational troubleshooting.

AWS Practice Test

AWS Practice Test

AWS Solutions Architect Security & Compliance