AWS Certified Security - Specialty SCS-C02 — Topic 1 Question 246

Question

A company is testing incident response procedures for destination containment. The company needs to contain a critical Amazon EC2 instance as quickly as possible while keeping the EC2 instance running. The EC2 instance is the only resource in a public subnet and has active connections to other resources. Which solution will contain the EC2 instance IMMEDIATELY?

Accepted Answer

Correct answer: C. The correct answer is C. Option C: Create a new network ACL that has a single Deny rule for inbound traffic and outbound traffic. Associate the new network ACL with the subnet that contains the EC2 instance. Amazon EC2 provides resizable virtual servers when you need full control of the operating system.

AWS Certified Security - Specialty SCS-C02 — Question 246