SCS-C02 · Question #437
A company is testing incident response procedures for destination containment. The company needs to contain a critical Amazon EC2 instance as quickly as possible while keeping the EC2 instance…
The correct answer is A. Create a new security group that has no inbound rules or outbound rules. Attach the new security. To contain the EC2 instance quickly while keeping it running, you can attach a security group with no inbound or outbound rules. This approach will effectively cut off all network traffic to and from the instance, isolating it immediately while keeping the instance active.
Question
A company is testing incident response procedures for destination containment. The company needs to contain a critical Amazon EC2 instance as quickly as possible while keeping the EC2 instance running. The EC2 instance is the only resource in a public subnet and has active connections to other resources. Which solution will contain the EC2 instance IMMEDIATELY?
Options
- ACreate a new security group that has no inbound rules or outbound rules. Attach the new security
- BConfigure the existing security group for the EC2 instance. Remove all existing inbound rules and
- CCreate a new network ACL that has a single Deny rule for inbound traffic and outbound traffic.
- DCreate a new VPC for isolation. Stop the EC2 instance. Create a new AMI from the EC2 instance.
How the community answered
(17 responses)- A71% (12)
- B6% (1)
- C6% (1)
- D18% (3)
Explanation
To contain the EC2 instance quickly while keeping it running, you can attach a security group with no inbound or outbound rules. This approach will effectively cut off all network traffic to and from the instance, isolating it immediately while keeping the instance active.
Topics
Community Discussion
No community discussion yet for this question.