Topic 1 Question 169

AWS Certified Security - Specialty

Topic 1 Question 169
A company deploys its application as a service on an Amazon Elastic Container Service (Amazon ECS) cluster with theAWS Fargate launch type. A security engineer suspects that some incoming requests are malicious. The security engineer needs to inspect the running container by retrieving log files and memory dump flies.

Which solution will meet these requirements with the LEAST operational effort?
- Migrate the application to an ECS cluster with the Amazon EC2 launch type. Configure the EC2 instances with proper remote access. Log in and inspect the container.
- Update the application to dump the required data to STDOUT. Use the awslogs log driver to pass the logs to Amazon CloudWatch Logs. Examine the log files in CloudWatch Logs.
- Turn on Amazon CloudWatch Container Insights for the ECS cluster. Send the log data to Amazon CloudWatch Logs by using AWS Distro for OpenTelemetry. Examine the log data in CloudWatch Logs.
- Update the ECS task role with AWS Systems Manager permissions. Enable the ECS Exec feature for the ECS service. Use ECS Exec to inspect the container.
ユーザの投票
コメント(6)
- 正解だと思う選択肢: B
  My answer is B.
  
  https://docs.aws.amazon.com/whitepapers/latest/replatform-dotnet-apps-with-windows-containers/logging-and-monitoring.html
  
  👍 4
  aescudero512024/06/03
- 正解だと思う選択肢: D
  Option D is the most efficient solution as it allows for direct and secure access to the container's runtime environment without significant modifications to the application or infrastructure setup. It leverages existing AWS services and features, reducing operational overhead and complexity.
  
  👍 3
  5409b912024/05/21
- 正解だと思う選択肢: D
  The question asks to inspect the container and retrieve files, so ECS Exec sounds reasonable.
  
  👍 2
  matheusrdo2024/06/09
シャッフルモード

ユーザの投票

コメント(6)