Interviewing
BlogInterviewing GuideGovernance, Risk, and Compliance
  • Overview
  • Intro
    • General
      • Tell Me About Yourself
      • What are you looking for in a new role?
      • What is your greatest weakness?
      • What are your greatest strengths?
      • Describe Your Leadership Style?
    • Career
      • Elevator Pitch
      • Job History
    • Behavioral-Based
      • Time when you came up with a new approach to a problem.
      • Describe a project that required input from people at different levels in the organization.
      • Encountered a problem and how you resolved it.
      • Juggle multiple important projects.
      • Most innovative new idea that you have implemented?
      • What project have you done that you're most proud of?
  • AWS
    • General
      • Can you describe the different components of AWS security?
      • Ensure the security of its data centers?
      • Concept of least privilege and how it applies to AWS?
      • How does AWS implement network security?
      • Types of AWS Identity and Access Management (IAM) policies?
      • AWS Secure Sockets Layer (SSL) and Transport Layer Security (TLS) work?
      • AWS Security Groups and how they can be used to control inbound and outbound traffic
      • How does AWS implement encryption to protect data at rest and in transit?
      • Can you describe the different types of AWS firewalls (e.g. Network Firewall, Web Application Firewa
      • Enable secure access to resources using IAM roles and temporary credentials?
      • How does AWS enable secure data transfer using AWS Transfer Family (e.g. SFTP, FTPS)?
      • How does AWS enable secure application development using services such as AWS Secrets Manager and AW
      • Features of AWS Shield and how it can be used to protect against DDoS
      • Enable secure communication between services using VPC endpoints and AWS PrivateLink?
      • Can you describe the security features of AWS Direct Connect and how it can be used to establish a s
    • Securing
      • How can you secure access to S3 buckets?
      • What is AWS KMS and how can it be used to secure data?
      • Secure access to an AWS database
      • Secure an application running on an EC2 instance
      • Protect against security breaches on AWS?
      • Ensure the security of user data stored in AWS
      • Secure access to the AWS management console
      • Secure data stored in the AWS with encryption
      • Secure your AWS infrastructure from unauthorized access
      • Secure data in transit and at rest in AWS
      • Secure access to your Amazon Elastic Container Service (ECS) clusters
      • Using Amazon Virtual Private Cloud (VPC) to secure your resources
      • AWS WAF to protect against web-based attacks
      • AWS Certificate Manager (ACM) to secure your website and applications
    • S3
  • Security Domains & Technical Aptitude
    • General
      • Questions with Steps
        • What are the steps when securing a Linux server?
        • Explain what happens when you type domain in the browser and press enter
    • Security & Privacy Governance
    • Cloud Security
    • Compliance
      • Frameworks
        • SOC 2
        • ISO 27001
      • What are the steps to a SOC 2 Gap Analysis?
      • Auditing
      • Internal Audit
      • Internal Audit Program
      • What are the steps of of performing a tabletop exercise?
    • Cryptographic Protections
      • Cryptography
        • What is cryptography?
        • What are the different types of cryptographic algorithms?
        • What is the difference between symmetric and asymmetric cryptography?
        • What is a hashing algorithm?
        • What is public-key cryptography?
        • What is the purpose of digital signatures?
        • How are digital signatures authenticated?
        • What is the difference between encryption and hashing?
        • How does encryption ensure the confidentiality of data?
        • What is the difference between encryption and steganography?
        • What is the difference between a cipher and a code?
        • What is a one-time pad?
        • What is the difference between symmetric and asymmetric key sizes?
        • What is a key management system?
        • What is a digital certificate?
        • What is the difference between a digital signature and a hash?
        • What’s the difference between Diffie-Hellman and RSA?
        • What is Forward Secrecy?
        • What are block and stream ciphers?
        • What are some examples of symmetric encryption algorithms?
        • What are some examples of asymmetric encryption algorithms?
      • TLS
        • What is TLS?
        • What is the purpose of TLS?
        • How does TLS work?
        • What are the main components of TLS?
        • What are the benefits of using TLS?
        • What are the differences between TLS and SSL?
        • What are the key algorithms used in TLS?
        • What is a TLS certificate?
        • What are the different versions of TLS?
        • What are the common vulnerabilities of TLS?
        • What is a TLS handshake?
        • What is a TLS session?
        • What is a TLS tunnel?
        • How can I configure TLS on my server?
        • What is the difference between TLS and IPsec?
        • Does TLS use symmetric or asymmetric encryption?
        • Describe the process of a TLS session being set up when someone visits a secure website.
        • What’s more secure, SSL, TLS, or HTTPS?
    • Data Classification & Handling
      • DLP
        • Data Exfiltration
        • Data Leakage
      • Data at Rest
      • Data in Transit
        • How do you ensure data is encrypted when stored and transferred?
    • Identification & Authentication
      • SAML
      • MFA
      • SSO
      • IAM Questions
    • Network Security
      • General
      • DNS
        • What is DNS Resolution?
        • What is DNS?
        • What is a Name Server?
        • What is a DNS Record?
        • What is a A Record?
        • What is a AAAA Record?
        • What is a CNAME Record?
        • What is PTR Record?
        • What is a MX Record?
        • What is a ND Record?
        • Explain DNS Record TTL?
        • Is DNS using TCP or UDP?
        • What are the steps in a DNS lookup?
        • Why is DNS monitoring important?
      • Networking
        • What is the network layer?
        • What happens at the network layer?
        • What is a packet?
        • What is the OSI model?
        • What is the TCP/IP Model?
        • OSI model vs. TCP/IP model
        • What is the difference between the 'network' layer and the 'Internet' layer?
        • What protocols are used at the network layer?
        • How do these concepts relate to websites and applications users access over the Internet?
      • TCP/IP Model
    • Privacy
      • Data Privacy - General
        • Data Privacy (Facts)
          • 25 Data Privacy Questions
        • Data categorization
        • Data Anonymization
        • Data Classification
        • Data Inventory
      • HIPAA (Facts)
        • HIPAA Security Rule
          • 25 HIPAA Security Rule Questions
        • HIPAA Privacy Rule
          • 25 HIPAA Privacy Rule
        • Breach Notification Rule and Omnibus Rule of 2013
      • Business Associate Agreement (Facts)
        • 20 BAA Questions
      • Data Use Agreement (Facts)
        • Questions
      • GDPR (Facts)
        • Questions
        • What steps have you taken to protect customer data in light of GDPR?
        • How do you handle personal data requests from customers?
        • Are you aware of the rights customers have under GDPR?
        • How do you handle customer requests to delete their data?
        • Do you have procedures in place to report data breaches in light of GDPR?
        • How do you ensure that third-party vendors comply with GDPR?
        • How do you ensure compliance with GDPR?
    • Risk Management
      • Risk Management
        • Is there an acceptable level of risk?
        • How do you measure risk?
        • What’s the difference between a threat, vulnerability, and a risk?
        • What is the primary reason most companies haven’t fixed their vulnerabilities?
        • What’s the difference between a threat, vulnerability, and a risk?
      • Risk Assessment
        • Cyber Risk Assessment
          • Cyber Risk Assessment Steps
        • 30 Risk Assessment Questions
        • What are the steps of adding a risk to the Risk Register?
        • How do you perform risk assessments for threats?
        • How do you assess and manage third-party risk?
      • Business Impact Assessment
    • Mobile Device Management
      • How do you ensure that all mobile devices are compliant with corporate policies?
      • How do you handle mobile device security issues?
    • Third-Party Management
      • Vendor Risk
        • Vendor Risk Assessment Steps
        • Vendor Contract Reviews
        • Assessing Cloud Vendors
        • Third-Party Data Protection
        • Review of Security Requirements for Contracts
        • Vendor Management Tasks
        • Questions
          • How do you ensure that vendor data is properly secured and protected?
          • What measures do you take to ensure the vendor risk assessment is accurate and up to date?
          • Describe the process you use to conduct a vendor risk assessment?
          • What criteria do you use to evaluate the risks associated with a vendor?
          • How do you monitor and assess a vendor's performance?
          • How do you handle vendor disputes?
          • What is your experience in developing vendor risk assessment policies?
          • How do you ensure that all vendors comply with your risk assessment policy?
          • How do you determine the level of risk associated with a vendor?
          • What steps do you take to ensure the security of vendor data?
          • How do you respond to a potential vendor risk incident?
          • What measures do you take to ensure the accuracy of vendor data?
          • What types of control activities do you perform to mitigate vendor risk?
    • Web Security
      • What measures do you take to ensure the security of a web application?
  • Project Coordination & Collaboration
    • Project Management
      • What challenges have you faced in project management and how did you overcome them?
      • How do you measure the success of a project?
      • What are the proper steps to managing a project from start to finish?
  • Not Ready
    • Vulnerability & Patch Management (Empty)
    • Threat Management (Empty)
    • Security Awareness & Training (Empty)
    • Security Operations (Empty)
    • Secure Engineering & Architecture (Empty)
    • Information Assurance (Empty)
    • Incident Response (Empty)
    • Endpoint Security (Empty)
    • Continuous Monitoring (Empty)
    • Configuration Management (Empty)
    • Asset Management (Empty)
    • Change Management (Empty)
    • Business Continuity & Disaster Recovery (Empty)
Powered by GitBook
On this page
  1. AWS

S3

What is AWS S3?

Amazon Simple Storage Service (Amazon S3) is a cloud storage service that enables you to store and retrieve any amount of data from anywhere on the web.

What is an Amazon S3 bucket?

An Amazon S3 bucket is a public cloud storage resource available in Amazon Web Services’ (AWS) Simple Storage Service (S3), an object storage offering. S3 buckets, which are similar to file folders, store objects which consist of data and its descriptive metadata.

What are the main benefits of using Amazon S3?

The main benefits of using Amazon S3 are scalability, reliability, low latency, and cost-effectiveness. With S3, you can store and retrieve any amount of data from anywhere on the web, allowing for fast and efficient storage and retrieval of data. Additionally, S3 offers high durability and availability of data, meaning that your data is safe and always available when you need it.

What is a S3 bucket policy?

A S3 bucket policy is a JSON-based access policy language that can be used to grant other AWS accounts or users permission to access or delete objects in an S3 bucket.

What is an S3 Access Control List (ACL)?

An S3 Access Control List (ACL) is an additional layer of security that can be used to control access to an S3 bucket and its objects. It can be used to grant access to specific AWS accounts or users, and to specify the type of access they have (read, write, delete, etc.).

What is the Amazon S3 Storage Classes?

The Amazon S3 Storage Classes refer to the different types of storage offered by Amazon S3. These include Standard, Standard-IA, Reduced Redundancy Storage (RRS), and Glacier. Each storage class offers different levels of availability, durability, and cost.

What is an S3 Pre-Signed URL?

An S3 Pre-Signed URL is a URL that can be used to grant time-limited access to an S3 object. This is useful for granting access to objects without having to make them public.

What is an S3 Lifecycle Policy?

An S3 Lifecycle Policy is a set of rules that can be used to define how Amazon S3 should manage an object over its lifetime. It can be used to automate the transition of objects to different storage classes, or to delete objects after a certain amount of time.

What is S3 Cross Region Replication (CRR)?

S3 Cross Region Replication (CRR) is a feature that allows you to replicate objects across multiple AWS regions. This can be used to improve data availability, reduce latency, and improve disaster recovery.

What is S3 Encryption?

S3 Encryption is a feature that allows you to protect data at rest in S3. You can choose between server-side encryption (using AWS-managed or customer-managed keys) and client-side encryption (using customer-managed keys).

What is S3 Object Tagging?

S3 Object Tagging is a feature that allows you to add tags to S3 objects. Tags are key-value pairs that can be used to categorize and filter objects, and to set access control policies.

What is S3 Versioning?

S3 Versioning is a feature that allows you to store multiple versions of an object in a bucket. This can be used to protect against accidental overwrites and deletions.

What is S3 Transfer Acceleration?

S3 Transfer Acceleration is a feature that allows you to improve the speed of data transfers to and from S3 buckets. It uses the Amazon CloudFront content delivery network (CDN) to accelerate data transfers.

What is S3 Glacier?

S3 Glacier is a secure, durable, and extremely low-cost storage class for data archiving and long-term backup. It is designed for data that is infrequently accessed, and provides retrieval times ranging from minutes to hours.

What is S3 Event Notifications?

S3 Event Notifications is a feature that allows you to be notified when certain events occur in an S3 bucket. This can be used to trigger automated responses, such as updating a cache or sending an email.

What is S3 Access Logging?

S3 Access Logging is a feature that allows you to log all requests made to an S3 bucket. This can be used to audit and monitor access to an S3 bucket.

What is an S3 Bucket Lifecycle Configuration?

An S3 Bucket Lifecycle Configuration is a set of rules that defines how Amazon S3 should manage an object over its lifetime. It can be used to automate the transition of objects to different storage classes, or to delete objects after a certain amount of time.

What is an S3 Access Point?

An S3 Access Point is a unique endpoint that can be used to access a specific S3 bucket. It is used to simplify access control management for applications that access multiple buckets.

What is an S3 Bucket Replication?

S3 Bucket Replication is a feature that allows you to replicate objects across multiple buckets in different regions. This can be used to improve data availability, reduce latency, and improve disaster recovery.

What is S3 Object Lock?

S3 Object Lock is a feature that allows you to prevent objects from being deleted or overwritten for a specified period of time. This can be used to protect against accidental changes or malicious intent.

What is S3 Cross-Origin Resource Sharing (CORS)?

S3 Cross-Origin Resource Sharing (CORS) is a feature that allows you to enable cross-origin requests from web browsers. This can be used to allow web applications to access S3 data from different origins.

What is S3 Object Lock Legal Hold?

S3 Object Lock Legal Hold is a feature that allows you to place a legal hold on objects in an S3 bucket. This prevents the objects from being deleted or overwritten, even if the expiration date has passed.

What is S3 Storage Lens?

S3 Storage Lens is a feature that allows you to analyze and visualize the data stored in S3 buckets. This can be used to detect trends, identify opportunities for cost savings, and improve data governance.

What is S3 Geo-Replication?

PreviousAWS Certificate Manager (ACM) to secure your website and applicationsNextGeneral

Last updated 2 years ago