Examkin

Question

Difficulty: MediumCompliance and Governance

A retail enterprise is undergoing a Payment Card Industry Data Security Standard (PCI DSS) audit for its payment processing system hosted on AWS. The external auditors require evidence that the physical infrastructure of the AWS data centers hosting the services meets the required security standards. According to the AWS Shared Responsibility Model, which action should the retail enterprise take to meet this requirement?

  1. A
    Configure AWS CloudTrail to record and log physical access entries to the AWS data centers.
  2. Retrieve the AWS PCI DSS compliance reports and Attestation of Compliance (AoC) from AWS Artifact.Answer
  3. C
    Schedule an on-site inspection of the AWS data center facilities with the external auditors.
  4. D
    Use Amazon Inspector to scan the host hypervisors and physical server racks for physical vulnerabilities.

Answer

Retrieve the AWS PCI DSS compliance reports and Attestation of Compliance (AoC) from AWS Artifact.
Under the AWS Shared Responsibility Model, AWS is responsible for security of the cloud, which includes the physical security of data centers. Because customers cannot access or physically audit AWS data centers, AWS undergoes independent third-party audits to verify compliance. The resulting compliance reports, such as the PCI DSS Attestation of Compliance (AoC), are made available on-demand to customers via AWS Artifact.

Step-by-Step Solution

1
Identify the compliance requirement and responsibility boundary.
The requirement is to verify the physical security and compliance of AWS data centers. Under the Shared Responsibility Model, AWS is solely responsible for physical security.
Since customers have no physical access to AWS facilities, they must rely on third-party audits performed on AWS's infrastructure.
2
Determine the AWS service that provides access to third-party compliance reports.
AWS Artifact is identified as the portal that grants on-demand access to AWS's security and compliance documentation.
This is the official method for customers to download compliance reports, such as PCI DSS and SOC, to hand over to their auditors.

Key Concept

Retrieving AWS compliance documentation under the Shared Responsibility Model using AWS Artifact.
Rate this question

Topics

Compliance and Governance

More questions from this topic