Examkin

Question

Difficulty: MediumCompliance and Governance

A municipal utility provider is migrating its operations to AWS and must review the security compliance reports of the AWS physical data centers to satisfy local government auditing requirements. How can the provider obtain these official AWS compliance documents?

  1. Access the AWS Artifact portal to retrieve and download the AWS SOC and ISO reports.Answer
  2. B
    Use Amazon Inspector to run an automated compliance scan on the underlying AWS physical hardware.
  3. C
    Create a request in the AWS Support Center to schedule a physical audit of the AWS data center.
  4. D
    Enable AWS CloudTrail to record and export the physical entry logs of the AWS facility.

Answer

Access the AWS Artifact portal to retrieve and download the AWS SOC and ISO reports.
AWS Artifact is a free, self-service portal that provides AWS customers with on-demand access to AWS security and compliance reports, such as Service Organization Control (SOC) reports and International Organization for Standardization (ISO) certificates.

Step-by-Step Solution

1
Identify the entity responsible for the physical security of the data centers.
Under the AWS Shared Responsibility Model, AWS is solely responsible for physical security and compliance of the cloud infrastructure.
This narrows the search to AWS-provided compliance reports rather than customer-driven scanning or logging.
2
Determine the appropriate AWS tool for downloading official compliance documents.
AWS Artifact is the self-service portal where customers can access and download security reports (like SOC and ISO certifications) and accept agreements.
This matches the requirement to obtain official compliance documents for third-party or governmental audits.

Key Concept

AWS Artifact provides on-demand access to AWS security and compliance reports.
Estimated Time:1m 0s
Rate this question

Topics

Compliance and Governance

More questions from this topic