A Security Engineer Discovered a Vulnerability in an Application Running

question 146

Multiple Choice

A Security Engineer discovered a vulnerability in an application running on Amazon ECS. The vulnerability allowed attackers to install malicious code. Analysis of the code shows it exfiltrates data on port 5353 in batches at random time intervals. While the code of the containers is being patched, how can Engineers quickly identify all compromised hosts and stop the egress of data on port 5353?

• A) Enable AWS Shield Advanced and AWS WAF. Configure an AWS WAF custom filter for egress traffic on port 5353
• B) Enable Amazon Inspector on Amazon ECS and configure a custom assessment to evaluate containers that have port 5353 open. Update the NACLs to block port 5353 outbound.
• C) Create an Amazon CloudWatch custom metric on the VPC Flow Logs identifying egress traffic on port 5353. Update the NACLs to block port 5353 outbound.
• D) Use Amazon Athena to query AWS CloudTrail logs in Amazon S3 and look for any traffic on port 5353. Update the security groups to block port 5353 outbound.

---

Definitions:

Northern Industrialists

Entrepreneurs and business owners in the northern United States before and during the Civil War who benefited from and supported industrialization and the abolition of slavery.

Southern Landowners

Traditionally refers to the wealthy individuals who owned expansive tracts of agrarian land in the Southern United States, playing a crucial role in the region's economy, politics, and social structure, particularly in the era of slavery.

Alsace

A historical region in eastern France, known for its strategic importance and cultural blend of French and German influences, often a point of contention between the two countries.

France and Germany

Two major European countries with a complex history of rivalry, cooperation, and influential roles in European and world affairs.