Security – Part B - ExamsDigest Training

What is the difference between AWS KMS envelope encryption and AWS KMS key encryption?

With envelope encryption, data is encrypted using a data key that is encrypted with a master key managed by AWS KMS. With key encryption, data is encrypted directly with a master key managed by AWS KMS.
With envelope encryption, data is encrypted directly with a master key managed by AWS KMS. With key encryption, data is encrypted using a data key that is encrypted with a master key managed by AWS KMS.
There is no difference between AWS KMS envelope encryption and AWS KMS key encryption.
AWS KMS does not support envelope encryption or key encryption.

What is the maximum size of data that can be encrypted with a single call to the AWS KMS Encrypt API?

4 KB
16 KB
64 KB
256 KB

Which of the following is a key management approach for AWS CloudHSM?

AWS Key Management Service (KMS)
HashiCorp Vault
Google Cloud KMS
OpenSSL

Which encryption algorithm is NOT supported by AWS CloudHSM?

RSA
AES
ECDSA
MD5

Which of the following services can be used to implement at-rest encryption for Amazon S3 buckets?

AWS KMS
AWS CloudHSM
Amazon RDS
Amazon EMR

Which of the following protocols can be used to implement in-transit encryption for data sent between Amazon EC2 instances in a VPC?

HTTP
HTTPS
SSH
SMTP

Which of the following techniques can be used to implement data obfuscation and masking in Amazon Redshift?

Amazon Kinesis Data Firehose
Amazon CloudFront
AWS Glue
Amazon Redshift Spectrum

Which of the following techniques can be used to implement data masking for Amazon RDS instances?

Amazon CloudFront
AWS Lambda
AWS Secrets Manager
Amazon SNS

A data analytics team is using AWS KMS to encrypt data stored in S3. They want to ensure that their encryption keys are rotated regularly to improve their data security posture. Which of the following is the best approach to achieve this?

Generate a new set of keys manually and update them on the S3 bucket.
Configure automatic key rotation using the KMS console.
Implement a custom key rotation solution using AWS Lambda.
Store the keys on an external hardware security module (HSM) for improved security.

An organization is using AWS Secrets Manager to manage their database credentials. They want to ensure that their secrets are not exposed to unauthorized users and that their secrets are rotated periodically to improve security. Which of the following options will best meet these requirements?

Create a custom script to rotate secrets and store them in S3.
Use AWS Lambda to manage secrets rotation and distribute secrets to authorized users.
Use AWS IAM to restrict access to secrets and configure secrets rotation.
Use Amazon SNS to send notifications when secrets are rotated.

A data analytics team needs to ensure that their data processing and storage comply with GDPR regulations. What should they consider to meet these requirements?

A. Encrypting data at rest and in transit
B. Implementing a data retention policy
C. Using IAM roles to control access to data
D. Storing data in an unencrypted format

A company needs to ensure that their data processing complies with HIPAA regulations. Which of the following measures would help them meet these requirements?

Implementing an access control policy
Storing data in a single location
Using a shared AWS root account
Encrypting data in transit only

Which of the following services can be used to configure access and audit logging for Amazon S3 and Amazon S3 Glacier?

AWS CloudTrail
AWS Config
AWS IAM
AWS KMS

Which of the following actions should you take to ensure access and audit logging for Amazon Redshift?

Enable audit logging in AWS CloudTrail.
Enable audit logging in AWS Config.
Configure logging in Amazon CloudFront.
Configure logging in Amazon Elasticsearch Service.

What service can be used to implement appropriate controls to meet HIPAA compliance requirements for Amazon EMR?

AWS KMS
Amazon SNS
AWS Config
AWS Artifact

What service can be used to implement appropriate controls to meet PCI DSS compliance requirements for Amazon RDS?

AWS Artifact
AWS Config
AWS Shield
Amazon Cognito

Which AWS service can be used to ensure compliance with the General Data Protection Regulation (GDPR) requirements for personal data protection?

AWS Shield
Amazon GuardDuty
AWS KMS
Amazon Macie

Which of the following AWS services can help meet compliance requirements for data residency?

Amazon S3
Amazon RDS
Amazon Redshift
AWS Directory Service

Which of the following is a benefit of enabling AWS CloudTrail?

Monitor network traffic
Improve application performance
Detect and respond to security incidents
Automate log file management

Which of the following AWS services allow for access and audit logging?

AWS Elasticsearch Service
AWS Kinesis Data Firehose
AWS Glue
AWS DynamoDB

Your organization has recently implemented a new cloud-based data analytics platform, and you need to ensure that you are meeting all necessary data governance and compliance requirements. Which of the following is the most important consideration when determining your data governance and compliance requirements?

The types of data that will be processed and stored on the platform
The number of users who will have access to the platform
The location of the data center hosting the platform
The number of reports that will be generated from the platform

As a data analyst, you are working with sensitive financial data and need to ensure that your data governance and compliance requirements are met. What is the first step in determining your data governance and compliance requirements?

Determine which regulations your organization is subject to
Develop a comprehensive data governance policy
Identify sensitive data elements and classify data based on risk
Review data access and control policies

What is a best practice for key rotation in AWS?

Rotating keys on an as-needed basis.
Keeping keys active for as long as possible.
Generating a new key every time an event occurs.
Using the same key for multiple purposes.

What is a best practice for managing secrets in AWS?

Storing secrets in plaintext in code repositories.
Rotating secrets on a fixed schedule, such as every six months.
Sharing secrets between AWS accounts without encryption.
Storing secrets in environment variables on EC2 instances.

Which of the following is an example of data masking?

Removing all instances of sensitive data from a database.
Replacing a sensitive data field with a hashed value.
Changing the format of a sensitive data field to make it less recognizable.
Encrypting a database table that contains sensitive data.

Which of the following is an example of data obfuscation?

Replacing a sensitive data field with a hashed value.
Encrypting a database table that contains sensitive data.
Removing all instances of sensitive data from a database.
Replacing a sensitive data field with a fake value.

Which of the following statements accurately describes role-based access control?

Role-based access control uses Access Control Lists (ACLs) to control access to resources.
Role-based access control uses IP addresses to control access to resources.
Role-based access control assigns roles to users or groups based on their job functions or responsibilities.
Role-based access control provides multi-factor authentication for AWS accounts.

Which of the following data types require encryption in transit and at rest for compliance with data protection regulations?

Non-sensitive data
Publicly available data
Personally identifiable information (PII)
Metadata

Which of the following techniques should be used to mask data in a development environment that contains personally identifiable information (PII)?

Tokenization
Obfuscation
Encryption
Redaction

Which of the following is an example of server-side encryption for data at rest in an AWS environment?

Using AWS Key Management Service (KMS) to encrypt Amazon S3 objects
Encrypting data using client-side encryption in an application before storing it in Amazon S3
Encrypting data using a third-party encryption tool before storing it in Amazon RDS
Using SSL/TLS to encrypt data in transit between an application and Amazon Redshift

Which of the following AWS services provides automatic server-side encryption for data at rest by default?

Amazon DynamoDB
Amazon ElastiCache
Amazon RDS
Amazon EC2

Security – Part B

Simulator Summary

Information

Results

Results

Categories

1. Question

2. Question

3. Question

4. Question

5. Question

6. Question

7. Question

8. Question

9. Question

10. Question

11. Question

12. Question

13. Question

14. Question

15. Question

16. Question

17. Question

18. Question

19. Question

20. Question

21. Question

22. Question

23. Question

24. Question

25. Question

26. Question

27. Question

28. Question

29. Question

30. Question

31. Question