A Company Wants to Adopt a Methodology for Handling Security

question 336

Multiple Choice

A company wants to adopt a methodology for handling security threats from leaked and compromised IAM access keys. The DevOps Engineer has been asked to automate the process of acting upon compromised access keys, which includes identifying users, revoking their permissions, and sending a notification to the Security team. Which of the following would achieve this goal?

• A) Use the AWS Trusted Advisor generated security report for access keys. Use Amazon EMR to run analytics on the report. Identify compromised IAM access keys and delete them. Use Amazon CloudWatch with an EMR Cluster State Change event to notify the Security team.
• B) Use AWS Trusted Advisor to identify compromised access keys. Create an Amazon CloudWatch Events rule with Trusted Advisor as the event source, and AWS Lambda and Amazon SNS as targets. Use AWS Lambda to delete compromised IAM access keys and Amazon SNS to notify the Security team.
• C) Use the AWS Trusted Advisor generated security report for access keys. Use AWS Lambda to scan through the report. Use scan result inside AWS Lambda and delete compromised IAM access keys. Use Amazon SNS to notify the Security team.
• D) Use AWS Lambda with a third-party library to scan for compromised access keys. Use scan result inside AWS Lambda and delete compromised IAM access keys. Create Amazon CloudWatch custom metrics for compromised keys. Create a CloudWatch alarm on the metrics to notify the Security team.

---

Definitions:

Principal Diagnosis

The main condition diagnosed at the end of a hospital stay or health care encounter that primarily motivated the treatment.

ATC

Average Total Cost, the sum of all costs divided by the quantity of output produced, a key concept in economics for understanding profitability at different production levels.

Long Run

A period of time in economics during which all factors of production and costs are variable, allowing full industry adjustment.

Output

The overall output of products or services from a business, industry, or national economy.