Your organization uses AWS, and you are tasked with configuring an automated remediation workflow in Falcon Fusion to respond to findings about unencrypted S3 buckets. What is the critical action…

Question

Options

• ASet the S3 bucket policy to enforce encryption.
• BGenerate a compliance report for the unencrypted bucket.
• CTrigger an email notification to the security team.
• DDelete all objects in the unencrypted S3 bucket.

• A
  57% (31)
• B
  7% (4)
• C
  9% (5)
• D
  26% (14)

Explanation

Option A: The correct action to remediate an unencrypted S3 bucket is to configure the workflow to automatically update the bucket policy to enforce encryption. This action ensures future objects stored in the bucket are encrypted. Additionally, it aligns with best practices for data protection without causing disruption or data loss. Option B: Compliance reports help in auditing and tracking but do not actively remediate the issue. This is an auxiliary action rather than a direct remediation step. Option C: While notifications are important, they do not constitute a remediation action. This step would only alert the team to the issue without resolving it. Option D: Deleting bucket contents may seem like a valid approach for security, but it leads to unnecessary data loss and is not a recommended remediation strategy.

No community discussion yet for this question.