AWS Certified Security - Specialty

ExamStudyApp

AWS Certified Security - Specialty · free preview Question 1 of 8

GuardDuty reports an EC2 instance communicating with a known crypto-mining domain. What is the recommended first containment step?

Disable CloudTrail to reduce noise

Isolate the instance with a quarantine security group for investigation

Ignore it until the next maintenance window

Immediately terminate the instance to stop activity

An unhandled error has occurred. Reload 🗙