Some Highly Sensitive Analytics Workloads Are to Be Moved to Amazon

question 223

Multiple Choice

Some highly sensitive analytics workloads are to be moved to Amazon EC2 hosts. Threat modeling has found that a risk exists where a subnet could be maliciously or accidentally exposed to the internet. Which of the following mitigations should be recommended?

• A) Use AWS Config to detect whether an Internet Gateway is added and use an AWS Lambda function to provide auto-remediation.
• B) Within the Amazon VPC configuration, mark the VPC as private and disable Elastic IP addresses.
• C) Use IPv6 addressing exclusively on the EC2 hosts, as this prevents the hosts from being accessed from the internet.
• D) Move the workload to a Dedicated Host, as this provides additional network security controls and monitoring.

---

Definitions:

Corporate Façade

Refers to an outward appearance maintained by a corporation to conceal its actual purposes or state, often used in a critical context to suggest a lack of transparency or authenticity.

Escape Liability

A legal strategy or circumstance that allows an individual or entity to avoid responsibility for an action or outcome.

Limited Liability

Status that specifies that an individual’s liability will not go beyond his or her original investment.

Personally Liable

The responsibility of an individual to pay a debt or fulfill an obligation from their own assets, not just the assets of a business or an entity they represent.