Exam AWS-SysOps topic 1 question 866 discussion

Exam question from Amazon's AWS-SysOps

Question #: 866
Topic #: 1

A security audit revealed that the security groups in a VPC have ports 22 and 3389 open to all, introducing a possible threat that instances can be stopped or configurations can be modified. A sysops administrator needs to automate remediation.
What should the sysops administrator do to meet these requirements?

A. Create an IAM managed policy to deny access to ports 22 and 3389 on any security groups in a VPC.
B. Define an AWS Config rule and remediation action with AWS Systems Manager automation documents.
C. Enable AWS Trusted Advisor to remediate public port access.
D. Use AWS Systems Manager configuration compliance to remediate public port access.

Show Suggested Answer

Suggested Answer: B 🗳️
Reference:
https://asecure.cloud/a/ar_ssm_ec2_approved_ami_id/

by Newguru2020 at Nov. 1, 2020, 9:01 p.m.

Disclaimers:

- ExamTopics website is not related to, affiliated with, endorsed or authorized by Amazon.
- Trademarks, certification & product names are used for reference only and belong to Amazon.

Comments

Submit Cancel

Newguru2020

Highly Voted 3 years, 3 months ago

Ans: B Config rules: You can use AWS Config rules to evaluate the configuration settings of your AWS resources. When AWS Config detects that a resource violates the conditions in one of your rules, AWS Config flags the resource as noncompliant and sends a notification. AWS Config continuously evaluates your resources as they are created, changed, or deleted. SSM: for automation of remediation

upvoted 6 times

...

shady23

Most Recent 7 months, 4 weeks ago

Selected Answer: B

B. Define an AWS Config rule and remediation action with AWS Systems Manager automation documents. This option provides an automated approach to remediate the security issue. By defining an AWS Config rule to detect security groups with ports 22 and 3389 open to all, and configuring a remediation action using AWS Systems Manager automation documents, the sysops administrator can automatically address instances where these ports are open to all. This allows for continuous monitoring and enforcement of security best practices, ensuring that instances are protected from unauthorized access.

upvoted 1 times

...