After Multiple Compromises of Its Amazon EC2 Instances, a Company's

question 195

Multiple Choice

After multiple compromises of its Amazon EC2 instances, a company's Security Officer is mandating that memory dumps of compromised instances be captured for further analysis. A Security Engineer just received an EC2 abuse notification report from AWS stating that an EC2 instance running the most recent Windows Server 2019 Base AMI is compromised. How should the Security Engineer collect a memory dump of the EC2 instance for forensic analysis?

• A) Give consent to the AWS Security team to dump the memory core on the compromised instance and provide it to AWS Support for analysis.
• B) Review memory dump data that the AWS Systems Manager Agent sent to Amazon CloudWatch Logs.
• C) Download and run the EC2Rescue for Windows Server utility from AWS.
• D) Reboot the EC2 Windows Server, enter safe mode, and select memory dump.

---

Definitions:

Usual Fees

The standard charges or rates typically applied by professionals, such as doctors or lawyers, for their services.

Third-party Payer

A third-party payer is an entity (usually an insurance company or government agency) that pays medical bills on behalf of the insured individual.

Uncovered Expenses

Costs that are not reimbursed by insurance or other forms of healthcare coverage, often leading to out-of-pocket expenses for patients.

Medicare Fee-for-service

A payment model under Medicare where providers are paid for each service they render, including tests, surgeries, and other procedures.