Examkin

Soru

Zorluk: OrtaCompliance and Governance

A digital healthcare startup plans to host a patient telemetry application on AWS. To meet regulatory requirements, the startup needs to obtain the AWS ISO 27001 certification, accept the HIPAA Business Associate Addendum (BAA), and ensure that database records are encrypted. Which of the following actions should the startup take to meet these compliance and governance requirements? (Select TWO.)

  1. Download the ISO 27001 certification and accept the HIPAA Business Associate Addendum (BAA) through AWS Artifact.Cevap
  2. Enable encryption for data at rest and in transit within the application's database layer.Cevap
  3. C
    Request that AWS Support technicians perform security patching on the database instances' guest operating systems.
  4. D
    Utilize Amazon Inspector to retrieve the official compliance reports for the physical AWS data centers.
  5. E
    Configure AWS CloudTrail to automatically monitor and prevent physical access to the host hardware.

Cevap

To meet compliance requirements, the startup must download the ISO 27001 certification and accept the HIPAA BAA via AWS Artifact, and they must enable encryption for data at rest and in transit in their database layer.
The correct actions are downloading compliance documents using AWS Artifact and implementing database encryption. AWS Artifact is the central portal for on-demand access to AWS compliance reports and agreements, such as ISO certificates and the HIPAA Business Associate Addendum (BAA). Under the Shared Responsibility Model, AWS secures the underlying infrastructure, while the customer is responsible for encrypting their data at rest and in transit.

Adım Adım Çözüm

1
Identify the AWS service dedicated to retrieving compliance reports and signing agreements.
AWS Artifact is identified as the portal for downloading official certifications (like ISO 27001) and accepting legal agreements (like the HIPAA BAA).
AWS Artifact provides on-demand access to AWS security and compliance reports.
2
Determine customer security responsibilities under the Shared Responsibility Model.
Encrypting data at rest and in transit is identified as a customer responsibility ('security in the cloud').
AWS manages physical and hypervisor security, while customers must protect their own data and configure encryption keys.

Anahtar Kavram

Retrieving compliance documents through AWS Artifact and understanding customer responsibilities under the Shared Responsibility Model.
Bu soruyu puanla

Konular

Compliance and Governance

Bu konudan daha fazla soru