COURSE 2 – ADDRESSING SECURITY RISK QUIZ ANSWERS

Week 3

Coursera AWS Fundamentals Specialization

Enroll in AWS Fundamental Specialization

TABLE OF CONTENT

INTRODUCTION

We will focus on data protection. We will look at encryption of data at rest, in motion, and best practices for how to store data within and between various AWS services.

WEEK 3 QUIZ 1

1. What requirement must you adhere to in order to deploy an AWS CloudHSM?

  • Run the HSM in two regions
  • Provision the HSM in a VPC (CORRECT)
  • Deploy an EBS volume for the HSM
  • Call AWS Support first to enable it

2. What AWS KMS keys are used to encrypt and decrypt data in AWS?

  • Customer master keys (CORRECT)
  • AWS master keys
  • Seller recrypt keys
  • User recrypt keys

3. How much data can you encrypt/decrypt using an Customer Master Key?

  • Up to 4MB
  • Up to 4TB
  • Up to 1MB
  • Up to 4KB (CORRECT)

WEEK 3 QUIZ 2

1. The purpose of encrypting data when it is in transit between systems and services is to prevent (choose 3 correct answers):

  • unauthenticated server and client communication
  • eavesdropping (CORRECT)
  • unauthorized alterations (CORRECT)
  • unauthorized copying (CORRECT)

2. Which protocol below is an industry-standard cryptographic protocol used for encrypting data at the transport layer?

  • HTTPS
  • T​LS (CORRECT)
  • X.509
  • IPSec

3. How do you encrypt an existing un-encrypted EBS volume?

  • EBS volumes are encrypted at rest by default
  • Enable Encryption by Default feature
  • Take a snapshot for EBS volume, and create new encrypted volume for this snapshot (CORRECT)
  • Enable encryption for EC2 instance, which will encrypt the attached EBS volumes

4. Can you encrypt just a subset of items in a DynamoDB table?

  • ​Yes
  • N​o (CORRECT)

5. When you enable encryption for RDS DB instance, what would not be encrypted?

  • JBDC connection (CORRECT)
  • Transaction logs
  • Automated backups
  • Read Replicas
  • Snapshots

6. Which of the following is a valid storage service on AWS?

  • AWS Lambda
  • Amazon Relational Database Service (CORRECT)
  • Amazon Honey Service
  • AWS Virtual Private Cloud
  • Amazon Complicated Storage Service

CONCLUSION

TBW