Examkin

Question

Difficulty: MediumCompliance and Governance

A government contractor is building a secure document storage platform on AWS for a federal agency. To satisfy the agency's security requirements, the contractor must verify that the underlying AWS infrastructure complies with the Federal Risk and Authorization Management Program (FedRAMP) standards. Which action should the contractor take to obtain the official AWS FedRAMP authorization documents?

  1. Download the FedRAMP authorization letters and reports directly from AWS Artifact.Answer
  2. B
    Configure Amazon Inspector to run a compliance assessment on the underlying AWS physical servers.
  3. C
    Submit a technical support ticket requesting the compliance certificates from an AWS Solutions Architect.
  4. D
    Query AWS CloudTrail to audit and export the physical security access logs of the AWS data centers.

Answer

Download the FedRAMP authorization letters and reports directly from AWS Artifact.
The correct action is to download the FedRAMP authorization letters and reports directly from AWS Artifact. AWS Artifact is the dedicated, self-service portal in the AWS Management Console that provides customers with free, on-demand access to AWS security and compliance reports, such as Service Organization Control (SOC) reports, Payment Card Industry (PCI) reports, and certifications from various global accreditation bodies including FedRAMP.

Step-by-Step Solution

1
Identify the compliance requirement, which is to obtain official third-party compliance reports and authorizations (FedRAMP) for the AWS infrastructure.
Recognized that these documents are standard AWS compliance artifacts.
Before using any service, the customer must locate where AWS shares its official compliance documentation.
2
Select the specific AWS service designed to deliver self-service compliance reports and agreements to customers.
Identified AWS Artifact as the primary portal for retrieving these compliance reports.
AWS Artifact provides on-demand, free access to security and compliance reports from AWS third-party auditors.

Key Concept

AWS Artifact is the primary portal for retrieving AWS security and compliance reports.
Estimated Time:1m 0s
Rate this question

Topics

Compliance and Governance

More questions from this topic