SCS-C02 · Question #437
SCS-C02 Question #437: Real Exam Question with Answer & Explanation
Sign in or unlock SCS-C02 to reveal the answer and full explanation for question #437. The question stem and answer options stay visible for context.
Question
A company is testing incident response procedures for destination containment. The company needs to contain a critical Amazon EC2 instance as quickly as possible while keeping the EC2 instance running. The EC2 instance is the only resource in a public subnet and has active connections to other resources. Which solution will contain the EC2 instance IMMEDIATELY?
Options
- ACreate a new security group that has no inbound rules or outbound rules. Attach the new security
- BConfigure the existing security group for the EC2 instance. Remove all existing inbound rules and
- CCreate a new network ACL that has a single Deny rule for inbound traffic and outbound traffic.
- DCreate a new VPC for isolation. Stop the EC2 instance. Create a new AMI from the EC2 instance.
Unlock SCS-C02 to see the answer
You've previewed enough free SCS-C02 questions. Unlock SCS-C02 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.