You Have Just Come from Your Chief Information Security Officer's

question 426

Multiple Choice

You have just come from your Chief Information Security Officer's (CISO) office with the instructions to provide an audit report of all AWS network rules used by the organization's Amazon EC2 instances. You have discovered that a single Describe-Security-Groups API call will return all of an account's security groups and rules within a region. You create the following pseudo-code to create the required report: - Parse "aws ec2 describe-security-groups" output - For each security group - Create report of ingress and egress rules Which two additional pieces of logic should you include to meet the CISO's requirements? (Choose two.)

• A) Parse security groups in each region.
• B) Parse security groups in each Availability Zone and region.
• C) Evaluate VPC network access control lists.
• D) Evaluate AWS CloudTrail logs.
• E) Evaluate Elastic Load Balancing access control lists.
• F) Parse CloudFront access control lists.

---

Definitions:

Variable Costing

A costing method that includes only the variable manufacturing costs (direct materials, direct labor, and variable manufacturing overhead) in product costs.

Unit Product Cost

The total cost (both variable and fixed) to produce a single unit of product.

Contribution Format

A type of income statement that separates variable costs from fixed costs to calculate a company's contribution margin.

Absorption Costing

A costing method that includes all manufacturing costs—direct materials, direct labor, and both variable and fixed manufacturing overhead—in the cost of a product.