A Company Requires That SSH Commands Used to Access Its

question 51

Multiple Choice

A company requires that SSH commands used to access its AWS instance be traceable to the user who executed each command. How should a Security Engineer accomplish this?

• A) Allow inbound access on port 22 at the security group attached to the instance. Use AWS Systems Manager Session Manager for shell access to Amazon EC2 instances with the user tag defined. Enable Amazon CloudWatch logging for Systems Manager sessions.
• B) Use Amazon S3 to securely store one Privacy Enhanced Mail Certificate (PEM file) for each user. Allow Amazon EC2 to read from Amazon S3 and import every user that wants to use SSH to access EC2 instance. Allow inbound access on port 22 at the security group attached to the instance. Install the Amazon CloudWatch agent on the EC2 instance and configure it to ingest audit logs for the instance.
• C) Deny inbound access on port 22 at the security group attached to the instance. Use AWS Systems Manager Session Manager for shell access to Amazon EC2 instances with the user tag defined. Enable Amazon CloudWatch logging for Systems Manager sessions.
• D) Use Amazon S3 to securely store one Privacy Enhanced Mail Certificate (PEM file) for each team or group. Allow Amazon EC2 to read from Amazon S3 and import every user that wants to use SSH to access EC2 instance. Allow inbound access on port 22 at the security group attached to the instance. Install the Amazon CloudWatch agent on the EC2 instance and configure it to ingest audit logs for the instances.

---

Definitions:

Market Capitalization Rate

The market-consensus estimate of the appropriate discount rate for a firm’s cash flows.

Corporate Tax Rate

The tax imposed on the net income of a corporation, varying by country and sometimes within jurisdictions of countries.

Dividend-payout Ratio

A financial ratio that shows the percentage of a company's earnings that is paid out to shareholders as dividends.

Anticipated Growth Rate

An expectation of the rate at which a company, asset, or economy will grow in a future period, often used in investment analysis.