Examkin

Question

Difficulty: EasyCompliance and Governance

A municipal agency is planning to host citizen records on AWS. The agency's compliance team needs to obtain AWS SOC 3 reports and sign a Business Associate Addendum (BAA) with AWS. Which of the following options represent the correct service and action to meet these requirements? (Select TWO.)

  1. Use AWS Artifact to retrieve the required SOC 3 compliance reportAnswer
  2. Use AWS Artifact to review and accept the Business Associate Addendum (BAA)Answer
  3. C
    Use Amazon GuardDuty to automatically scan and generate compliance certificates
  4. D
    Use AWS CloudTrail to download and store AWS security compliance documents
  5. E
    Schedule a physical audit of the AWS data centers where the agency's data will reside

Answer

Use AWS Artifact to retrieve the required SOC 3 compliance report, and use AWS Artifact to review and accept the Business Associate Addendum (BAA).
AWS Artifact is the primary self-service portal for accessing AWS compliance reports and managing agreements. The service provides on-demand access to AWS security and compliance documents (such as SOC reports) and allows customers to review and accept agreements (such as the BAA) directly through the AWS Management Console.

Step-by-Step Solution

1
Identify the compliance and governance needs of the agency.
The agency needs to download official compliance reports (SOC 3) and accept a specific agreement (BAA) with AWS.
Understanding the compliance requirement determines which AWS service is needed.
2
Determine the AWS service designed for compliance reports and agreements.
AWS Artifact is the dedicated service for retrieving AWS security reports and accepting agreements.
AWS Artifact provides on-demand access to compliance documents and manages agreements directly through the console.

Key Concept

AWS compliance reports and agreements are managed through AWS Artifact.
Estimated Time:1m 0s
Rate this question

Topics

Compliance and Governance

More questions from this topic