A SysOps administrator receives an alert from Amazon GuardDuty about suspicious network activity on an Amazon EC2 instance. The GuardDuty finding lists a new external IP address as a traffic destination. The SysOps administrator does not recognize the external IP address. The SysOps administrator must block traffic to the external IP address that GuardDuty identified. Which solution will meet this requirement?

Question

Ankit Parimi · Accepted Answer

Create a network ACL. Add an outbound deny rule for traffic to the external IP address.

Ankit Parimi · Answer

Create a new security group to block traffic to the external IP address. Assign the new security group to the EC2 instance.

Ankit Parimi · Answer

Use VPC flow logs with Amazon Athena to block traffic to the external IP address.

Ankit Parimi · Answer

Create a new security group to block traffic to the external IP address. Assign the new security group to the entire VPC.

Question list

List of questions

Question 1

(0)

Question 2

(0)

Question 3

(0)

Question 4

(0)

Question 5

(0)

Question 6

(0)

Question 7

(0)

Question 8

(0)

Question 9

(0)

Question 10

(0)

Related questions

Question 263 - SOA-C02 discussion

Suggested answer: C

0 comments