2 Security and Compliance Online Quiz Questions

True or false: Simply using AWS services automatically makes a workload secure and compliant.

A team wants to inspect and filter HTTP(S) requests to help protect its web application. Which AWS service is designed for this purpose?

An application on an EC2 instance needs access to one S3 bucket. Which approach best follows least privilege and avoids embedding credentials in the code?

True or false: When a customer uses Amazon S3, the customer still controls its data and permissions, even though AWS operates more of the underlying infrastructure.

A company runs an application on Amazon EC2. Under the shared responsibility model, who manages the guest operating system, its patches, the application, and the instance's network access?

Select all responsibilities that remain with a customer working toward compliance for its AWS workload.

After an unexpected API change, an administrator needs to investigate who made the call, when it occurred, and where it came from. Which service's records are most directly suited to that investigation?

A team is reviewing its AWS access practices. Select all choices that align with the security guidance.

Which AWS service helps provision and manage TLS certificates for supported AWS services?

A compliance team needs access to AWS audit reports and certifications. Which AWS service provides these documents?

A company points to an AWS certification as proof that its own application meets all applicable requirements. Explain why that is not sufficient and identify the customer's remaining compliance responsibilities.

True or false: Encrypting stored data is sufficient on its own to secure an AWS workload.

A team needs to control network traffic at the subnet level and also apply a control to an individual EC2 instance. Which statement correctly describes the relevant AWS controls?

What protocol is commonly used to protect data in transit between clients and AWS services?

A company wants AWS audit reports and certifications to support its own compliance assessment. Which statement best describes how AWS Artifact helps?

A team needs to create and control cryptographic keys used for encrypting stored data in AWS services. Which service best fits that need?

Which AWS service helps an organization centrally manage workforce access to multiple AWS accounts and applications?

An application on an EC2 instance must read from one specific S3 bucket. Which approach best follows least privilege while avoiding long-lived credentials in the code?