Examkin

Question

Difficulty: HardCompliance and Governance

An educational technology company hosting student record databases on AWS must prepare for an audit by its university customers. The customers require verification of the physical security controls of the AWS data centers, and the company must accept the AWS non-disclosure agreements (NDAs) to access these documents. Which TWO actions should the company take to meet these compliance requirements? (Select TWO.)

  1. Download AWS compliance documents such as SOC and ISO reports directly from the AWS Artifact consoleAnswer
  2. B
    Deploy Amazon Inspector to audit and certify the physical security controls of the AWS data centers
  3. Accept the required AWS agreements, such as non-disclosure agreements, directly within AWS ArtifactAnswer
  4. D
    Submit a request to AWS Support to obtain physical security logs of AWS data center buildings
  5. E
    Request AWS to provide a signed statement verifying that AWS patches the guest operating system of the company's EC2 instances

Answer

Download AWS compliance documents such as SOC and ISO reports directly from the AWS Artifact console, and accept the required AWS agreements, such as non-disclosure agreements, directly within AWS Artifact.
To verify AWS physical security controls, the customer must access AWS compliance documents (such as Service Organization Control (SOC) and ISO reports) which are available on-demand in AWS Artifact. To access these documents, the customer must accept the associated AWS agreements and non-disclosure terms, which can be done directly through the AWS Artifact portal.

Step-by-Step Solution

1
Identify the primary service in AWS for retrieving official compliance reports and signing agreements.
Recognize that AWS Artifact is the self-service portal designed for compliance document retrieval and agreement acceptance.
AWS Artifact allows customers to access security and compliance reports and accept AWS agreements on-demand.
2
Determine which action retrieves the physical security control documentation requested by the auditors.
Select the option to download SOC and ISO reports directly from AWS Artifact.
SOC and ISO reports contain the audit evidence for AWS physical infrastructure security.
3
Determine how the company can accept the required non-disclosure agreements (NDAs) to access the documents.
Select the option to accept the required agreements online via the AWS Artifact console.
AWS Artifact Agreements allows customers to review and accept AWS terms and NDAs.

Key Concept

AWS compliance reports retrieval and agreements acceptance under the Shared Responsibility Model.
Rate this question

Topics

Compliance and Governance

More questions from this topic