A Security Engineer Discovers That Developers Have Been Adding Rules

question 282

Multiple Choice

A Security Engineer discovers that developers have been adding rules to security groups that allow SSH and RDP traffic from 0.0.0.0/0 instead of the organization firewall IP. What is the most efficient way to remediate the risk of this activity?

• A) Delete the internet gateway associated with the VPC.
• B) Use network access control lists to block source IP addresses matching 0.0.0.0/0.
• C) Use a host-based firewall to prevent access from all but the organization's firewall IP.
• D) Use AWS Config rules to detect 0.0.0.0/0 and invoke an AWS Lambda function to update the security group with the organization's firewall IP.

---

Definitions:

Germinal

Pertaining to the initial two-week phase of prenatal development following conception.

Prenatal Development

The process of growth and development within the womb from conception to birth, encompassing various stages of embryonic and fetal development.

Embryonic

Pertaining to the earliest stage of development in living organisms after conception, before birth or hatching.

Germinal

Pertaining to the earliest stage of embryonic development, from conception to approximately two weeks, when the zygote begins to divide and grow.