Mod 10: Comprehending Security Compliance and Troubleshooting

What 2 roles are related to data ownership?

Data owner, data steward

What is data residency?

Control over the geographical location of data storage

What is data sovereignty?

Legal and regulatory issues about data storage

What is data localization?

Control over data created within a governing region

What is data locality?

Moving compute power to data instead of moving data

What are some different types of holds for data retention?

Legal hold, contractual hold, regulatory hold

What are some examples of data compliance standards? (4)

SOC2, PCI DSS, ISO27000, CSA

What is the zero trust security model?

No devices internal or external are trusted

What organization provides cloud security best practices?

CIS

What are hotfixes?

Address a specific software bug

What are rollups?

Combines multiple patches into a single package

What should you check if you cannot access an instance?

Security group rules

What should you check if you cannot access a subnet?

Network ACL rules