AWS Data Engineering - Securing and Scaling Your Data Pipeline

What AWS service helps in managing encryption keys for data security?

• AWS CloudTrail

• AWS CloudFormation

• AWS Key Management Service (KMS)

• AWS CloudWatch

Which principle ensures that users have only the permissions necessary to perform their tasks?

• Multi-factor authentication

• Principle of least privilege

• Role-based access control

• Defense in depth

Which AWS service is used to create and manage collections of metadata about datasets?

• AWS Glue Data Catalog

• AWS CloudWatch

• AWS IAM

• AWS CloudFormation

What AWS service provides a scalable way to stream and analyze data in real-time?

• AWS S3

• AWS Lambda

• Amazon Kinesis

• AWS IAM

Which feature of IAM enhances security by requiring a second form of authentication?

• Single sign-on (SSO)

• Multi-factor authentication (MFA)

• Attribute-based access control (ABAC)

• Role-based access control (RBAC)

Why is it important to classify data in an analytics workload?

• To reduce storage costs

• To ensure appropriate security measures are applied based on data sensitivity

• To simplify data access

• To avoid using IAM

What approach should be taken to manage access to sensitive data in a data pipeline?

• Grant access to all users

• Use role-based access control (RBAC) and enforce the principle of least privilege

• Avoid using encryption

• Allow public access to data

What is the purpose of defense-in-depth security?

• To simplify security

• To provide multiple layers of security controls

• To increase storage capacity

• To reduce network traffic

Which principle ensures that sensitive data is accessible only to those who need it?

• Data anonymization

• Data minimization

• Data integrity

• Data confidentiality

How does encryption help in securing data at rest?

• By simplifying data management

• By converting data into a secure format that cannot be easily read by unauthorized users

• By increasing storage capacity

• By improving network performance