A Company Had One of Its Amazon EC2 Key Pairs

question 150

Multiple Choice

A company had one of its Amazon EC2 key pairs compromised. A Security Engineer must identify which current Linux EC2 instances were deployed and used the compromised key pair. How can this task be accomplished?

• A) Obtain the list of instances by directly querying Amazon EC2 using: aws ec2 describe-instances --fi1ters "Name=key-name,Values=KEYNAMEHERE" . Obtain the list of instances by directly querying Amazon EC2 using: aws ec2 describe-instances --fi1ters "Name=key-name,Values=KEYNAMEHERE" .
• B) Obtain the fingerprint for the key pair from the AWS Management Console, then search for the fingerprint in the Amazon Inspector logs.
• C) Obtain the output from the EC2 instance metadata using: curl http: //169.254.169.254/latest/meta-data/public- keys/0/.
• D) Obtain the fingerprint for the key pair from the AWS Management Console, then search for the fingerprint in Amazon CloudWatch Logs using: aws logs filter-log-events . Obtain the fingerprint for the key pair from the AWS Management Console, then search for the fingerprint in Amazon CloudWatch Logs using: aws logs filter-log-events

---

Definitions:

Endplay

Linear play in a shaft, wheel, or rotor. The slang term for this, slop, describes the condition well. Some OEMs use the term axial slop to describe endplay.

Truck Wheel Seal

A component used in trucks to prevent lubricants from leaking out of the wheel bearings and to keep contaminants out.

Seal Driver

A tool used in the installation of seals in machinery, ensuring a proper fit without damage to the seal or housing.

Hydraulic Press

A machine press using a hydraulic cylinder to generate a compressive force, widely used in forming, shaping, and pressing of materials.