AWS Certified Security – Specialty Already Passed 2023!!

For which of the following are you responsible for ensuring the Operating System is configured securely? a. RDS b. DynamoDB c. EC2 d. Lamba - ANSWERSc. EC2 If a customer deploys an Amazon EC2 instance, they are responsible for management of the guest operating system (including updates and security patches), any application software or utilities installed by the customer on the instances, and the configuration of the AWS-provided firewall (called a security group) on each instance. Which of the following services would you use to check CPU utilization of your EC2 instances? a. Config b. CloudFormation c. Trusted Advisor d. CloudWatch - ANSWERSd. CloudWatch Amazon CloudWatch is a monitoring and management service which collects monitoring and operational data in the form of logs, metrics, and events, providing you with a unified view of AWS resources, applications and services that run on AWS, and on-premises servers. Which of the following is a multi-tenant managed service which allows you to securely store and manage your encryption keys? a. KMS b. CloudTrail c. CloudHSM d. Config - ANSWERSa. KMS AWS Key Management Service (KMS) makes it easy for you to create and manage keys and control the use of encryption across a wide range of AWS services and in your applications. Which of the following tools can be used to give you visibility of the assets you have in AWS? a. Trusted Advisor b. CloudTrail c. AWS Config d. CloudFormation - ANSWERSc. AWS Config AWS Config is a service that enables you to assess, audit, and evaluate the configurations of your AWS resources. Which of the following is NOT the responsibility of AWS in terms of Security and Compliance? a. Physical security of the data center b. Protecting the infrastructure that runs all of the services offered in the AWS Cloud c. Configuration of hypervisors d. Configuration of the OS running on EC2 instances - ANSWERSd. Configuration of the OS running on EC2 instances Security and Compliance are a shared responsibility. AWS is responsible for protecting the infrastructure that runs all of the services offered in the AWS Cloud. This infrastructure is composed of the hardware, software, networking, and facilities that run AWS Cloud services. If a customer deploys an Amazon EC2 instance, they are responsible for management of the guest operating system (including updates and security patches), any application software or utilities installed by the customer on the instances. Which of the following serv