Examkin

Question

Difficulty: Very hardCompliance and Governance

A global telecommunications provider is preparing for a regulatory audit of its customer portal. The compliance team must review the confidential AWS ISO 27001 Certification report to verify physical security, and ensure that the guest operating system patches are applied on their database running on Amazon EC2. Which combination of actions should the provider take to satisfy both requirements?

  1. A
    Query the ISO 27001 Certification report details from AWS CloudTrail logs, and rely on AWS to deploy the operating system updates to the Amazon EC2 instances.
  2. Download the ISO 27001 Certification report through AWS Artifact after accepting the online non-disclosure agreement, and manage the guest operating system updates on the Amazon EC2 instances.Answer
  3. C
    Use Amazon Inspector to scan and generate the ISO 27001 Certification report, and coordinate with AWS to secure the physical infrastructure of the data centers.
  4. D
    Download the ISO 27001 Certification report from the public AWS compliance website, and request the AWS technical support team to configure the guest operating system firewall.

Answer

Download the ISO 27001 Certification report through AWS Artifact after accepting the online non-disclosure agreement, and manage the guest operating system updates on the Amazon EC2 instances.
The correct action is to download the confidential ISO 27001 Certification report through AWS Artifact, which requires accepting an online NDA, and to manage the guest operating system updates on the Amazon EC2 instances because under the AWS Shared Responsibility Model, patching the guest OS on an EC2 instance is the customer's responsibility.

Step-by-Step Solution

1
Identify the appropriate channel to retrieve confidential AWS compliance reports.
AWS Artifact is identified as the central portal for secure, on-demand download of AWS compliance documents, which requires accepting a non-disclosure agreement (NDA) before downloading confidential reports like the ISO 27001 Certification.
Confidential compliance reports are not publicly available or stored in operational logs like CloudTrail.
2
Determine the responsibility boundaries for patching the operating system of an Amazon EC2 instance under the AWS Shared Responsibility Model.
The customer is fully responsible for managing the guest operating system, including applying security patches and updates.
Amazon EC2 is an Infrastructure as a Service (IaaS) offering, meaning AWS manages security 'of' the cloud (physical infrastructure, virtualization layer), while the customer is responsible for security 'in' the cloud (guest OS, applications, data).

Key Concept

Retrieving compliance documentation via AWS Artifact and applying the AWS Shared Responsibility Model to Infrastructure as a Service (IaaS) resources.
Estimated Time:1m 30s
Rate this question

Topics

Compliance and Governance

More questions from this topic