SecAppSol Pvt. Ltd. is a cloud software and application development company located in Louisville, Kentucky. The security features provided by its previous cloud service provider was not satisfactory, and in 2012, the organization became a victim of eavesdropping. Therefore, SecAppSol Pvt. Ltd. changed its cloud service provider and adopted AWS cloud-based services owing to its robust and cost-effective security features. How does SecAppSol Pvt. Ltd.'s security team encrypt the traffic between the load balancer and client that initiate SSL or TLS sessions?

• A. By enabling Amazon GuardDuty
• B. By enabling RADIUS Authentication
• C. By enabling HTTPS listener
• D. By enabling Cloud Identity Aware Proxy

Alex Hales works as a cloud security specialist in an IT company. He wants to make his organization's business faster and more efficient by implementing Security Assertion Mark-up Language (SAML) that will enable employees to securely access multiple applications with a single set of credentials. What is SAML?

• A. It is an XML-based authentication and authorization standard
• B. It is a YAML-based authentication and authorization standard
• C. It is a JSON-based authentication and authorization standard
• D. It is an HTML-based authentication and authorization standard

Shell Solutions Pvt. Ltd. is an IT company that develops software products and services for BPO companies. The organization became a victim of a cybersecurity attack. Therefore, it migrated its applications and workloads from on-premises to a cloud environment. Immediately, the organization established an incident response team to prevent such incidents in the future. Using intrusion detection system and antimalware software, the incident response team detected a security incident and mitigated the attack. The team recovered the resources from the incident and identified various vulnerabilities and flaws in their cloud environment. Which step of the incident response lifecycle includes the lessons learned from previous attacks and analyzes and documents the incident to understand what should be improved?

• A. Preparation
• B. Analysis
• C. Coordination and Information Sharing
• D. Post-mortem

An IT organization named WITEC Solutions has adopted cloud computing. The organization must manage risks to keep its business data and services secure and running by gaining knowledge about the approaches suitable for specific risks. Which risk management approach can compensate the organization if it loses sensitive data owing to the risk of an activity?

• A. Risk mitigation
• B. Risk avoidance
• C. Risk acceptance
• D. Risk transference

AWS runs 35+ instances that are all CentOS machines. Updating these machines manually is a time intensive task that may lead to missed updates for some instances and create vulnerabilities.
Which of the following can be used to prevent each port of each instance from being opened to access the machine and install updates?

• A. AWS Security Hub
• B. Amazon Snowball
• C. AWS Systems Manager
• D. Amazon Glacier