The Security Engineer Is Managing a Traditional Three-Tier Web Application

question 75

Multiple Choice

The Security Engineer is managing a traditional three-tier web application that is running on Amazon EC2 instances. The application has become the target of increasing numbers of malicious attacks from the Internet. What steps should the Security Engineer take to check for known vulnerabilities and limit the attack surface? (Choose two.)

• A) Use AWS Certificate Manager to encrypt all traffic between the client and application servers.
• B) Review the application security groups to ensure that only the necessary ports are open.
• C) Use Elastic Load Balancing to offload Secure Sockets Layer encryption.
• D) Use Amazon Inspector to periodically scan the backend instances.
• E) Use AWS Key Management Services to encrypt all the traffic between the client and application servers.

---

Definitions:

Foreign Bonds

Bonds issued by a country or company that are not denominated in the currency of the country in which they are sold.

International Bonds

Bonds issued in a country by a foreign entity, in the currency of the country where it is issued, as a way for the issuer to gain access to a foreign capital market.

Eurocurrency

Currency deposited by national governments or corporations in banks outside their home market, typically in a currency not native to the deposit location.

Financial Centre

A global city known for hosting a cluster of national or international financial institutions, markets, and service providers.