InfoSec Is Concerned That an Employee May Expose Sensitive Data

question 541

Multiple Choice

InfoSec is concerned that an employee may expose sensitive data in an Amazon S3 bucket. How can this concern be addressed without putting undue restrictions on users?

• A) Apply an IAM policy on all users that denies the action s3:PutBucketPolicy
• B) Restrict S3 bucket access to specific IAM roles managed using federated access
• C) Activate an AWS Config rule to identify public buckets and alert InfoSec using Amazon SNS
• D) Email the findings of AWS Personal Health Dashboard to InfoSec daily

---

Definitions:

Depreciation

The method of spreading the expense of a physical asset across its lifespan, demonstrating the decline in its value as time progresses.

Asset

Economic resources owned by a business or individual, expected to provide future benefits or value.

Provide Services

The act of performing tasks or duties for clients or customers, often in exchange for payment, that does not result in the production of physical goods.

Double-Declining-Balance Method

A form of accelerated depreciation where an asset loses value at twice the rate of the traditional straight-line method.