Examkin

Question

Difficulty: HardCompliance and Governance

A global retail company is preparing for an annual PCI-DSS audit of its payment processing workload hosted on AWS. The compliance team needs to gather official documentation proving the physical security compliance of AWS data centers and establish a workflow to continuously audit and evaluate AWS resource configurations against regulatory standards. Which of the following actions should the company take to meet these requirements? (Select TWO.)

  1. Download the AWS PCI-DSS compliance package and related security reports from AWS Artifact.Answer
  2. Use AWS Config to continuously record and evaluate resource configuration changes against compliance guidelines.Answer
  3. C
    Submit a request to schedule a physical audit of the AWS data centers hosting their workloads.
  4. D
    Configure Amazon Inspector to monitor and archive all AWS API write calls for compliance auditing.
  5. E
    Deploy AWS Systems Manager to request, sign, and manage regulatory agreements such as the Business Associate Addendum (BAA).

Answer

Retrieve the compliance documents from AWS Artifact, and use AWS Config to record and evaluate resource configuration compliance.
The correct options are downloading compliance documents from AWS Artifact and utilizing AWS Config for resource evaluation. AWS Artifact serves as the direct portal for retrieving official AWS audit reports (such as PCI-DSS packages) to verify the security of the AWS infrastructure. AWS Config provides the mechanism to continuously monitor, record, and evaluate resource configurations to ensure they align with compliance guidelines.

Step-by-Step Solution

1
Determine the resource responsible for providing AWS's third-party compliance reports and agreements.
Identify AWS Artifact as the self-service portal to download reports like SOC and PCI-DSS compliance packages.
AWS Artifact provides on-demand access to AWS compliance documentation to satisfy external audit requirements.
2
Determine the service designed to continuously audit, record, and evaluate resource configurations against compliance rules.
Select AWS Config as the configuration management and compliance auditing tool.
AWS Config tracks configuration history and evaluates changes against predefined rules to ensure governance.

Key Concept

Compliance and Governance
Rate this question

Topics

Compliance and Governance

More questions from this topic