Machine-translated by Google. Questions are authored in English.
Top

Discussion

Match each control with the layer it protects.
List I
A. Security group
B. Identity policy
C. Encryption at rest
D. Transport encryption
List II
1. data on the storage medium
2. network reachability of an instance
3. data while it crosses the network
4. which principal may call which action

  • A.A-4, B-2, C-1, D-3
  • B.A-2, B-4, C-3, D-1
  • C.A-3, B-1, C-4, D-2
  • D.A-2, B-4, C-1, D-3

Answer: D

Correct answer: A-2, B-4, C-1, D-3

Four controls at four different layers. A security group filters what may reach the instance over the network. An identity policy decides which principal may call which action. Encryption at rest protects the data on the storage medium. And transport encryption protects it while it crosses the network. Each answers a different question, and none substitutes for another - which is the substance of the defence in depth item at the end of this topic.

No comment is present. Be the first to comment.
Loading…

Post your comment

Please log in or register to post a comment.