A Security Engineer Received an Amazon GuardDuty Alert Indicating a Finding

question 68

Multiple Choice

A security engineer received an Amazon GuardDuty alert indicating a finding involving the Amazon EC2 instance that hosts the company's primary website. The GuardDuty finding received read: UnauthorizedAccess:IAMUser/InstanceCredentialExfiltration. The security engineer confirmed that a malicious actor used API access keys intended for the EC2 instance from a country where the company does not operate. The security engineer needs to deny access to the malicious actor. What is the first step the security engineer should take?

• A) Open the EC2 console and remove any security groups that allow inbound traffic from 0.0.0.0/0.
• B) Install the AWS Systems Manager Agent on the EC2 instance and run an inventory report.
• C) Install the Amazon Inspector agent on the host and run an assessment with the CVE rules package.
• D) Open the IAM console and revoke all IAM sessions that are associated with the instance profile.

---

Definitions:

One-to-one Training

Individualized instruction or coaching tailored to meet the specific needs of a single learner, focusing on their personal goals and abilities.

Concentric Lamella

Circular layers of bony tissue that make up the osteon, the fundamental unit of compact bone, providing strength and resistance to bones.

Osteons

Also known as Haversian systems, cylindrical structures that contain a mineral matrix and living osteocytes, helping to give bone its strength and density.

Diameter

A straight line passing from side to side through the center of a body or figure, especially a circle or sphere.