Topic 1 Question 232

AWS Certified Solutions Architect - Associate

Topic 1 Question 232
A company runs demonstration environments for its customers on Amazon EC2 instances. Each environment is isolated in its own VPC. The company’s operations team needs to be notified when RDP or SSH access to an environment has been established.
- Configure Amazon CloudWatch Application Insights to create AWS Systems Manager OpsItems when RDP or SSH access is detected.
- Configure the EC2 instances with an IAM instance profile that has an IAM role with the AmazonSSMManagedInstanceCore policy attached.
- Publish VPC flow logs to Amazon CloudWatch Logs. Create required metric filters. Create an Amazon CloudWatch metric alarm with a notification action for when the alarm is in the ALARM state.
- Configure an Amazon EventBridge rule to listen for events of type EC2 Instance State-change Notification. Configure an Amazon Simple Notification Service (Amazon SNS) topic as a target. Subscribe the operations team to the topic.
ユーザの投票
コメント(11)
- 正解だと思う選択肢: C
  https://aws.amazon.com/blogs/security/how-to-monitor-and-visualize-failed-ssh-access-attempts-to-amazon-ec2-linux-instances/
  
  👍 8
  Vickysss2023/01/18
- 正解だと思う選択肢: C
  It's C fam. RDP or SSH connections won't change the state of the EC2 instance, so D doesn't make sense.
  
  👍 4
  owlminus2023/01/19
- 正解だと思う選択肢: C
  EC2 Instance State-change Notifications are not the same as RDP or SSH established connection notifications. Use Amazon CloudWatch Logs to monitor SSH access to your Amazon EC2 Linux instances so that you can monitor rejected (or established) SSH connection requests and take action.
  
  👍 4
  Training4aBetterLife2023/01/23
シャッフルモード

ユーザの投票

コメント(11)