A Company Requires That SSH Commands Used to Access Its

question 257

Multiple Choice

A company requires that SSH commands used to access its AWS instance be traceable to the user who executed each command. How should a Security Engineer accomplish this?

• A) Allow inbound access on port 22 at the security group attached to the instance. Use AWS Systems Manager Session Manager for shell access to Amazon EC2 instances with the user tag defined. Enable Amazon CloudWatch logging for Systems Manager sessions.
• B) Use Amazon S3 to securely store one Privacy Enhanced Mail Certificate (PEM file) for each user. Allow Amazon EC2 to read from Amazon S3 and import every user that wants to use SSH to access EC2 instances. Allow inbound access on port 22 at the security group attached to the instance. Install the Amazon CloudWatch agent on the EC2 instance and configure it to ingest audit logs for the instance.
• C) Deny inbound access on port 22 at the security group attached to the instance. Use AWS Systems Manager Session Manager for shell access to Amazon EC2 instances with the user tag defined. Enable Amazon CloudWatch logging for Systems Manager sessions.
• D) Use Amazon S3 to securely store one Privacy Enhanced Mail Certificate (PEM file) for each team or group. Allow Amazon EC2 to read from Amazon S3 and import every user that wants to use SSH to access EC2 instance. Allow inbound access on port 22 at the security group attached to the instance. Install the Amazon CloudWatch agent on the EC2 instance and configure it to ingest audit logs for the instances.

---

Definitions:

Null Hypothesis

A statement in statistical inference that proposes there is no significant effect or relationship between two measured phenomena.

Randomness Conjecture

A proposition suggesting that specific systems or sequences cannot be predicted due to their inherent randomness.

Affirmation of Chance

The acknowledgment of the role of randomness or unpredictability in events or outcomes.

Peer Review Process

The peer review process is a critical evaluation method used in academia and industries to assess the quality and validity of manuscripts or projects by other experts in the same field.