University:
California State University, Northridge
Course:
COMP 429 | Computer Network Software
Academic year:

2022
Views:

221

Pages:

2
Author:

do3ran7ut

Chapter 4: Security and IAM Question 1: When running a workload in AWS, the customer is NOT responsible for: (choose two.)   ✅ Data centre operations ✅ Infrastructure security Question 2: Which of the following strategies helps protect your AWS root account?  ✅ Don't create an API access key unless you need to Question 3: Which IAM entity can best be used to grant temporary access to your AWS resources?  ✅ IAM Roles Question 4: What are AWS shared controls?  ✅ Controls that apply to both the infrastructure layer and customer layers Question 5: An organization runs many systems and uses many AWS products. Which of the following services enables them to control how each developer interacts with these products?  ✅ AWS Identity and Access Management Question 6: A company has discovered that multiple S3 buckets were deleted, but it is unclear who deleted the buckets. Which of the following can the company use to determine the identity that deleted the buckets?  ✅ CloudTrail logs Question 7: Which AWS service or feature is used to manage the keys used to encrypt customer data?  ✅ AWS KMS Question 8: What are the default security credentials that are required to access the AWS management console for an IAM user account?  ✅ A username and password Question 9: Which of the following can help secure your sensitive data in Amazon S3? (choose two.)   ✅ Encrypt the data prior to uploading it ✅ Enable S3 Encryption Question 10: How would a system administrator add an additional layer of login security to a user's AWS Management Console?  ✅ Enable multi-factor authentication