QuestionQ35Verified/Security FundamentalsCopy linkReport a problemAsk AstroTutorSave questionWhich actions can be taken to prevent unauthorized access to cloud instances and services?AUse multi-factor authentication, implement firewall rules, and back up data off-site.BImplement block-chain tokens, use encrypted protocols, and encrypt the data on storage systems.CReplicate data to another datacenter, use multi-factor authentication, and encrypt data on storage systems.DImplement firewall rules, authentication, authorization, and encrypted protocols.Show AnswerAnswerExplanationFirewall rules limit network exposure, authentication verifies a requester’s identity, authorization enforces the requester’s allowed permissions, and encrypted protocols such as TLS protect communications from interception or tampering. AWS guidance specifically recommends blocking insecure protocols with security groups and enforcing encrypted protocols, while IAM guidance recommends access controls and MFA.Learn moreAWS Well-Architected Framework: Enforce encryption in transitAWS Identity and Access Management: Data protectionShow comments0Show commentsCommunity DiscussionNo comments yet. Be the first to start the discussion!
Community Discussion