A security team is creating a response plan in the event an employee executes unauthorized actions on AWS infrastructure. They want to include steps to determine if the employee's IAM permissions changed as part of the incident. What steps should the team document in the plan?
Please select:

Question

A security team is creating a response plan in the event an employee executes unauthorized actions on AWS infrastructure. They want to include steps to determine if the employee's IAM permissions changed as part of the incident. What steps should the team document in the plan?

Please select:

Gerhard Seher · Accepted Answer

Use AWS Config to examine the employee's IAM permissions prior to the incident and compare them to the employee's current IAM permissions.

Gerhard Seher · Answer

Use Made to examine the employee's IAM permissions prior to the incident and compare them to the employee's A current IAM permissions.

Gerhard Seher · Answer

Use CloudTrail to examine the employee's IAM permissions prior to the incident and compare them to the employee's current IAM permissions.

Gerhard Seher · Answer

Use Trusted Advisor to examine the employee's IAM permissions prior to the incident and compare them to the employee's current IAM permissions.

Question list

List of questions

Question 1

(0)

Question 2

(0)

Question 3

(0)

Question 4

(0)

Question 5

(0)

Question 6

(0)

Question 7

(0)

Question 8

(0)

Question 9

(0)

Question 10

(0)

Related questions

Question 265 - SCS-C01 discussion

Suggested answer: A

0 comments