| 1 | How can KMS multi region keys support encryption and decryption of the same data across multiple AWS regions without needing to re encrypt data during a cross region transfer? AWS › AWS KMS & Data Encryption | AWS | AWS KMS & Data Encryption | Advanced |
| 2 | What is AWS KMS and what role does it play in encrypting data across AWS services? AWS › AWS KMS & Data Encryption | AWS | AWS KMS & Data Encryption | Beginner |
| 3 | How does envelope encryption work in KMS, and why is it used instead of encrypting large amounts of data directly with a KMS key? AWS › AWS KMS & Data Encryption | AWS | AWS KMS & Data Encryption | Intermediate |
| 4 | What is the difference between a customer managed key and an AWS managed key in KMS? AWS › AWS KMS & Data Encryption | AWS | AWS KMS & Data Encryption | Beginner |
| 5 | How do KMS key policies and grants control who can use a specific encryption key? AWS › AWS KMS & Data Encryption | AWS | AWS KMS & Data Encryption | Intermediate |
| 6 | How does AWS CloudHSM differ from KMS, and when would an organization need the additional control it provides? AWS › AWS KMS & Data Encryption | AWS | AWS KMS & Data Encryption | Advanced |
| 7 | How does automatic key rotation work in KMS, and why is it a recommended security practice? AWS › AWS KMS & Data Encryption | AWS | AWS KMS & Data Encryption | Intermediate |
| 8 | How does AWS Glue support sensitive data handling through features like the Glue Data Quality and Sensitive Data Detection capabilities? AWS › AWS Glue & ETL | AWS | AWS Glue & ETL | Advanced |
| 9 | How does CloudTrail log file integrity validation help ensure that audit logs have not been tampered with? AWS › AWS CloudTrail & Auditing | AWS | AWS CloudTrail & Auditing | Intermediate |
| 10 | How can ElastiCache be secured within a VPC, and what encryption options are available? AWS › Amazon ElastiCache (Redis & Memcached) | AWS | Amazon ElastiCache (Redis & Memcached) | Advanced |
| 11 | What is DNSSEC, and how does Route 53 support it to protect against DNS spoofing? AWS › Amazon Route 53 & DNS Management | AWS | Amazon Route 53 & DNS Management | Advanced |
| 12 | What security controls are available to restrict who can publish to or subscribe from an SNS topic? AWS › Amazon SNS (Simple Notification Service) | AWS | Amazon SNS (Simple Notification Service) | Advanced |