A manager informs the SOC that one or more RDS instances have been compromised and the SOC needs to make sure production RDS instances are NOT publicly accessible.
Which action should the SOC take to follow security best practices?

Question

A manager informs the SOC that one or more RDS instances have been compromised and the SOC needs to make sure production RDS instances are NOT publicly accessible.

Which action should the SOC take to follow security best practices?

Peter Keijer · Accepted Answer

Enable ''AWS RDS database instance is publicly accessible'' policy and for each alert, check that it is a production instance, and then manually remediate.

Peter Keijer · Answer

Enable ''AWS S3 bucket is publicly accessible'' policy and manually remediate each alert.

Peter Keijer · Answer

Enable ''AWS S3 bucket is publicly accessible'' policy and add policy to an auto-remediation alert rule.

Peter Keijer · Answer

Enable ''AWS RDS database instance is publicly accessible'' policy and add policy to an auto-remediation alert rule.

Question list

List of questions

Question 1

(0)

Question 2

(0)

Question 3

(0)

Question 4

(0)

Question 5

(0)

Question 6

(0)

Question 7

(0)

Question 8

(0)

Question 9

(0)

Question 10

(0)

Related questions

Question 100 - PCCSE discussion

Suggested answer: B

0 comments