Free Practice Quiz Question List

5 AWS Compliance Concepts Online Quiz Questions

Use this free practice quiz with 20 questions to review 5 AWS Compliance Concepts, test your knowledge, and prepare for your next test or exam.

20 questions

Choose one

1 point

Which example is an inherited control in the AWS shared responsibility model?

A
A customer’s IAM policies and permissions
B
AWS-operated facilities and physical safeguards
C
An organization’s employee training procedures

Written response

1 point

What AWS compliance-program category includes independent assessments that produce ISO certifications or SOC reports?

True or false

1 point

True or false: If an AWS compliance program is relevant to a customer’s industry, the program name alone confirms that the customer’s specific AWS service and Region are in scope.

A
True
B
False

Choose one

1 point

Which AWS tool provides on-demand access to AWS security and compliance reports and certifications?

A
AWS Artifact
B
AWS Audit Manager
C
AWS Config

Written response

1 point

Which AWS service provides on-demand access to AWS security and compliance documents, including reports and certifications?

Fill in the blank

1 point

Complete the shared responsibility model: AWS operates and protects the underlying infrastructure as part of , while customers secure and configure their workloads as part of .

Choose all

1 point

A company runs an application on EC2 and stores records in S3. Which responsibilities remain with the company? Select all that apply.

A
The organization patches the EC2 guest operating system it manages.
B
The organization configures access permissions for its S3 data.
C
AWS operates and patches its underlying infrastructure.
D
The organization determines how its customer data is protected.

Choose all

1 point

A team is establishing a governance process for an AWS workload. Which actions are consistent with the recommended process? Select all that apply.

A
Identify applicable requirements and define the systems, accounts, services, and Regions in scope.
B
Break requirements into controls and assign an owner for each control.
C
Record whether controls are inherited, shared, or customer-specific, including assumptions and customer actions.
D
Assume AWS evidence is sufficient for every customer control.
E
Collect relevant AWS and customer evidence, then review findings and whether evidence remains current.

Choose one

1 point

An automated compliance check passes, but the organization has not reviewed its policies or operating procedures. What is the soundest conclusion?

A
Use Audit Manager to organize evidence, then assess compliance and evidence sufficiency independently.
B
Treat a passing automated check as proof that all related legal and business requirements are satisfied.
C
Rely on Audit Manager instead of obtaining legal or compliance expertise.

Fill in the blank

1 point

Complete the statement with three evidence sources: AWS Audit Manager can collect evidence from , , and .

Open ended

1 point

A company hosts an application on EC2 and stores customer records in S3. It must prepare for an audit against an applicable requirement. Outline a practical assessment approach that identifies key AWS and customer responsibilities, explains how the company could gather evidence, and states an important limitation of the evidence tools.

Choose one

1 point

AWS patches its infrastructure, and a customer patches the guest operating system and applications it manages. How is this related responsibility classified?

A
Shared control
B
Inherited control
C
Customer-specific control

Choose one

1 point

A company wants to make control ownership and evidence-review responsibilities clearer while limiting unnecessary access. Which IAM approach best supports that goal?

A
Give all assessment participants administrator access to avoid delays.
B
Use least-privilege IAM policies and separate roles for relevant responsibilities.
C
Allow every team member to manage assessments and access all evidence.

Choose one

1 point

An independent assessment produces a SOC report about a service. Which broad AWS compliance-program category does this fit?

A
Certifications and attestations
B
Laws, regulations, and privacy programs
C
Alignments and frameworks

Choose one

1 point

A team finds an AWS offering described as aligned with a published framework. What is the most accurate conclusion?

A
It confirms every customer using the framework is certified.
B
It guarantees that every AWS service satisfies all framework requirements.
C
It may provide mappings or guidance without establishing certification.

Choose one

1 point

Before relying on an AWS compliance program for a deployment, what should a team verify?

A
Rely on the program name because it applies to every AWS service and Region.
B
Verify that the specific AWS offering and its scope match the intended use case.
C
Assume that a program covers customer applications whenever it covers AWS infrastructure.

Written response

1 point

Which AWS service provides on-demand access to AWS security and compliance documents such as reports and certifications?

Written response

1 point

Which AWS service helps organize assessments and collect evidence from sources such as AWS Config and AWS CloudTrail?

True or false

1 point

True or false: Because an AWS service is covered by a compliance program, a customer’s application running on it is automatically compliant with applicable requirements.

A
True
B
False

True or false

1 point

A company uses an AWS service and assumes AWS will enforce approval steps in its own application for sensitive business actions. Under AWS compliance concepts, is that assumption correct?

A
True
B
False

5 AWS Compliance Concepts Online Quiz Questions

Related study packs and tools