After Multiple Compromises of Its Amazon EC2 Instances, a Company's

question 195

Multiple Choice

After multiple compromises of its Amazon EC2 instances, a company's Security Officer is mandating that memory dumps of compromised instances be captured for further analysis. A Security Engineer just received an EC2 abuse notification report from AWS stating that an EC2 instance running the most recent Windows Server 2019 Base AMI is compromised. How should the Security Engineer collect a memory dump of the EC2 instance for forensic analysis?

• A) Give consent to the AWS Security team to dump the memory core on the compromised instance and provide it to AWS Support for analysis.
• B) Review memory dump data that the AWS Systems Manager Agent sent to Amazon CloudWatch Logs.
• C) Download and run the EC2Rescue for Windows Server utility from AWS.
• D) Reboot the EC2 Windows Server, enter safe mode, and select memory dump.

---

Definitions:

Creativity

The ability to produce original and valuable ideas or things, involving imagination and the willingness to explore.

Meditation

A practice of concentrated focus upon a sound, object, visualization, the breath, movement, or attention itself to increase awareness of the present moment.

Respiration

Respiration is the process by which living organisms take in oxygen and release carbon dioxide, involving the exchange of gases as a part of metabolism.

Zen Meditation

A form of meditation originating in Buddhism that emphasizes sitting in reflective mindfulness to gain insight into the nature of existence and personal enlightenment.