Examkin

Question

Difficulty: EasyCompliance and Governance

An online media streaming company is undergoing a security audit. The compliance team needs to access AWS security documents and accept standard agreements regarding content protection. Which TWO of the following tasks can the team perform using AWS Artifact to meet these requirements?

  1. Download AWS security and compliance documents, such as SOC and PCI reportsAnswer
  2. B
    Run automated vulnerability scans on Amazon EC2 instances to check for software patches
  3. Review and accept AWS compliance agreements, such as a Business Associate Addendum (BAA)Answer
  4. D
    Track and audit user API activity and console logins across the entire AWS infrastructure
  5. E
    Configure the physical security and biometric access controls for AWS data centers

Answer

Downloading AWS security and compliance documents, such as SOC and PCI reports, and reviewing and accepting AWS compliance agreements, such as a Business Associate Addendum (BAA).
AWS Artifact is the central portal for retrieving AWS compliance reports and managing agreements. The option to download compliance documents (such as SOC/PCI reports) and the option to review and accept compliance agreements (such as a BAA) correctly identify the core functionalities of AWS Artifact.

Step-by-Step Solution

1
Analyze the business requirement of accessing security documents and accepting agreements.
Identify that AWS Artifact is the primary self-service portal for security reports and agreements.
AWS Artifact enables customers to download compliance reports (such as SOC and PCI) and sign agreements (such as a BAA).
2
Evaluate the distractors against the Shared Responsibility Model and other security services.
Eliminate options involving instance scanning, API auditing, and physical data center security.
These tasks are handled by Amazon Inspector, AWS CloudTrail, and AWS internal physical security teams respectively.

Key Concept

AWS Artifact is a self-service compliance portal that provides on-demand access to AWS security and compliance reports and online agreements.
Estimated Time:1m 0s
Rate this question

Topics

Compliance and Governance

More questions from this topic