SAA-C03 · Question #413
A company needs an automated solution to detect cryptocurrency mining activity on Amazon EC2 instances. The solution must automatically isolate any identified EC2 instances for forensic analysis. Whic
The correct answer is A. Create an Amazon EventBridge rule that runs when Amazon GuardDuty detects cryptocurrency. Amazon GuardDuty detects cryptocurrency mining and sends findings to Amazon EventBridge. You can use EventBridge to trigger an automated Lambda function to isolate EC2 instances (such as by removing security group access or stopping/isolating the instance).
Question
A company needs an automated solution to detect cryptocurrency mining activity on Amazon EC2 instances. The solution must automatically isolate any identified EC2 instances for forensic analysis. Which solution will meet these requirements?
Options
- ACreate an Amazon EventBridge rule that runs when Amazon GuardDuty detects cryptocurrency
- BCreate an AWS Security Hub custom action that runs when Amazon GuardDuty detects
- CCreate an Amazon Inspector rule that runs when Amazon GuardDuty detects cryptocurrency
- DCreate an AWS Config custom rule that runs when AWS Config detects cryptocurrency mining
How the community answered
(18 responses)- A72% (13)
- B6% (1)
- C17% (3)
- D6% (1)
Explanation
Amazon GuardDuty detects cryptocurrency mining and sends findings to Amazon EventBridge. You can use EventBridge to trigger an automated Lambda function to isolate EC2 instances (such as by removing security group access or stopping/isolating the instance).
Community Discussion
No community discussion yet for this question.