AWS Certified Security - Specialty SCS-C02 — Topic 1 Question 181

Question

A company deployed an Amazon EC2 instance to a VPC on AWS. A recent alert indicates that the EC2 instance is receiving a suspicious number of requests over an open TCP port from an external source. The TCP port remains open for long periods of time. The company's security team needs to stop all activity to this port from the external source to ensure that the EC2 instance is not being compromised. The application must remain available to other users. Which solution will meet these requirements?

Accepted Answer

Correct answer: A. The correct answer is A. Option A: Update the network ACL that is attached to the subnet that is associated with the EC2 instance. Add a Deny statement for the port and the source IP addresses. Amazon EC2 provides resizable virtual servers when you need full control of the operating system.

AWS Certified Security - Specialty SCS-C02 — Question 181