ExamTopics Logo
Mail Us[email protected]
Menu
Amazon Discussions
exam questions

Exam AWS Certified Solutions Architect - Professional All Questions

View all questions & answers for the AWS Certified Solutions Architect - Professional exam
Go to Exam

Exam AWS Certified Solutions Architect - Professional topic 1 question 195 discussion

Exam question from Amazon's AWS Certified Solutions Architect - Professional
Question #: 195
Topic #: 1
[All AWS Certified Solutions Architect - Professional Questions]

An organization has hosted an application on the EC2 instances. There will be multiple users connecting to the instance for setup and configuration of application.
The organization is planning to implement certain security best practices.
Which of the below mentioned pointers will not help the organization achieve better security arrangement?

  • A. Allow only IAM users to connect with the EC2 instances with their own secret access key.
  • B. Create a procedure to revoke the access rights of the individual user when they are not required to connect to EC2 instance anymore for the purpose of application configuration.
  • C. Apply the latest patch of OS and always keep it updated.
  • D. Disable the password based login for all the users. All the users should use their own keys to connect with the instance securely.
Show Suggested Answer Hide Answer
Suggested Answer: A 🗳️
Since AWS is a public cloud any application hosted on EC2 is prone to hacker attacks. It becomes extremely important for a user to setup a proper security mechanism on the EC2 instances. A few of the security measures are listed below:
Always keep the OS updated with the latest patch
Always create separate users with in OS if they need to connect with the EC2 instances, create their keys and disable their password
Create a procedure using which the admin can revoke the access of the user when the business work on the EC2 instance is completed. Lock down unnecessary ports.
Audit any proprietary applications that the user may be running on the EC2 instance Provide temporary escalated privileges, such as sudo for users who need to perform occasional privileged tasks
The IAM is useful when users are required to work with AWS resources and actions, such as launching an instance. It is not useful to connect (RDP / SSH) with an instance.
Reference:
http://aws.amazon.com/articles/1233/
by mishay2 at March 20, 2020, 3:27 a.m.
Disclaimers:
  • - ExamTopics website is not related to, affiliated with, endorsed or authorized by Amazon.
  • - Trademarks, certification & product names are used for reference only and belong to Amazon.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Submit Cancel
sergza
Highly Voted 3 years, 7 months ago
The answer is A. you need to have key pair not sec access key
upvoted 9 times
...
amministrazione
Most Recent 8 months, 3 weeks ago
A. Allow only IAM users to connect with the EC2 instances with their own secret access key.
upvoted 1 times
...
SkyZeroZx
1 year, 10 months ago
Selected Answer: A
The answer is A. you need to have key pair not sec access key
upvoted 1 times
...
vbal
3 years, 4 months ago
IAM doesn't control Login access to EC2
upvoted 3 times
...
cldy
3 years, 5 months ago
A. Allow only IAM users to connect with the EC2 instances with their own secret access key.
upvoted 1 times
...
kashi1983
3 years, 6 months ago
Answer is A
upvoted 1 times
...
DashL
3 years, 6 months ago
I thought if it is a Windows EC2 instance and you try to connect to this EC2 instance, then you need a user id/pwd. I couldn't find any information on connecting to an Windows EC2 instance using SSH Keys. Am I missing something?
upvoted 1 times
...
01037
3 years, 6 months ago
A is correct
upvoted 1 times
...
ExtHo
3 years, 7 months ago
A is correct Answer: https://aws.amazon.com/articles/tips-for-securing-your-ec2-instance/
upvoted 2 times
...
manoj101
3 years, 7 months ago
While all 4 looks correct & D sentence is not complete not sure which one to pick-up.
upvoted 1 times
...
[Removed]
3 years, 7 months ago
Correct answer is D - need to disable password-based login. "Additional security can be provided by using secure authentication methods. We recommend using public-key authentication instead of passwords to remotely log in to your instances with SSH. Passwords are vulnerable to a variety of simple attacks, including dictionary and brute-force attacks"
upvoted 2 times
goDDamnccp
3 years, 7 months ago
the question ask to pick the answer that is NOT helping the security configuration. And ans D actually helps to increase security level.
upvoted 2 times
...
...
mishay2
3 years, 7 months ago
The answer is D. https://aws.amazon.com/articles/tips-for-securing-your-ec2-instance/
upvoted 1 times
Asds
3 years, 7 months ago
will "NOT" help the organization achieve better security arrangement?
upvoted 2 times
...
Smart
3 years, 7 months ago
Errr...Reread the question and the article.
upvoted 1 times
...
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago