The InfoSec team has asked the SysOps Administrator to perform some hardening on the company Amazon RDS database instances. Based on this requirement, what actions should be recommended for the start of the security review? (Choose two.)
A.
Use Amazon Inspector to present a detailed report of security vulnerabilities across the RDS database fleet
B.
Review the security group's inbound access rules for least privilege
C.
Export AWS CloudTrail entries detailing all SSH activity on the RDS instances
D.
Use the cat command to enumerate the allowed SSH keys in ~/.ssh on each RDS instance
E.
Report on the Parameter Group settings and ensure that encrypted connections are enforced
B. Review the security group's inbound access rules for least privilege: It is important to review and ensure that the security group associated with the RDS instances has appropriate inbound access rules configured. This involves following the principle of least privilege, where only necessary and authorized sources are allowed to access the RDS instances.
E. Report on the Parameter Group settings and ensure that encrypted connections are enforced: Parameter Groups in Amazon RDS are used to configure database engine settings. It is important to review the Parameter Group settings and ensure that encrypted connections (SSL/TLS) are enforced to secure the data in transit between the client and the RDS instances.
A: Inspector only work for EC2
B. restrict SG inbound with least privilege is correct
C. Cloudtrail is for monitoring
D. Cat command not relevent
E. Connection encryption is correct
Answer: B & E
A is most probably correct . As per AWS doc. " Amazon Inspector automatically assesses applications for exposure, vulnerabilities, and deviations from best practices.". I would say this among very early step to harden
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
saumenP
Highly Voted 2 years, 6 months agomukeshs
Highly Voted 2 years, 6 months agoalbert_kuo
Most Recent 10 months agokenkct
2 years, 6 months agoholydrac
2 years, 6 months agosen12
2 years, 6 months agoPyt
2 years, 6 months agosaumenP
2 years, 6 months agoomar_bahrain
2 years, 6 months agoexbash
2 years, 6 months ago