A SysOps administrator receives an alert from Amazon GuardDuty about suspicious network activity on an Amazon FC2 instance. The GuardDuty finding lists a new external IP address as a traffic destination. The SysOps administrator does not recognize the external IP address. The SysOps administrator must block traffic to the external IP address that GuardDuty identified Which solution will meet this requirement?

Question

Shane Cook · Accepted Answer

Create a new security group to block traffic to the external IP address. Assign the new security group to the EC2 instance

Shane Cook · Answer

Use VPC flow logs with Amazon Athena to block traffic to the external IP address

Shane Cook · Answer

Create a network ACL Add an outbound deny rule tor traffic to the external IP address

Shane Cook · Answer

Create a new security group to block traffic to the external IP address Assign the new security group to the entire VPC

Question list

List of questions

Question 1

(0)

Question 2

(0)

Question 3

(0)

Question 4

(0)

Question 5

(0)

Question 6

(0)

Question 7

(0)

Question 8

(0)

Question 9

(0)

Question 10

(0)

Related questions

Question 142 - SOA-C02 discussion

Suggested answer: A

0 comments