AWS Certified Security - Specialty
Get started today
Ultimate access to all questions.
Comments
Loading comments...
Ultimate access to all questions.
A security engineer is tasked with managing a traditional three-tier web application deployed on Amazon EC2 instances. The application is experiencing a surge in malicious attacks from the internet. To enhance security, the engineer needs to implement two specific measures to identify and mitigate known vulnerabilities and reduce the application's exposure to attacks. What should these measures be?
A
Use AWS Certificate Manager to encrypt all traffic between the client and application servers.
B
Review the application security groups to ensure that only the necessary ports are open.
C
Use Elastic Load Balancing to offload Secure Sockets Layer encryption.
D
Use Amazon Inspector to periodically scan the backend instances.
E
Use AWS Key Management Service (AWS KMS) to encrypt all the traffic between the client and application servers.