A Security Engineer Discovers That Developers Have Been Adding Rules

question 282

Multiple Choice

A Security Engineer discovers that developers have been adding rules to security groups that allow SSH and RDP traffic from 0.0.0.0/0 instead of the organization firewall IP. What is the most efficient way to remediate the risk of this activity?

• A) Delete the internet gateway associated with the VPC.
• B) Use network access control lists to block source IP addresses matching 0.0.0.0/0.
• C) Use a host-based firewall to prevent access from all but the organization's firewall IP.
• D) Use AWS Config rules to detect 0.0.0.0/0 and invoke an AWS Lambda function to update the security group with the organization's firewall IP.

---

Definitions:

Operating Cash Flow

The cash generated from a company's normal business operations before financing and investment activities.

Net Capital Spending

The total expenditure on fixed assets less any sales of fixed assets during a given period, often used in assessing a company's investment in physical assets.

Earnings Before Interest And Taxes

A financial performance measure that calculates a company's profitability by excluding interest and taxes expenses.

Marginal Tax Rate

The rate of additional federal income tax to be paid on an additional dollar of income, which varies depending on income levels and filing status.