Explanation:
Modifying the RDS instance's security group to deny all inbound and outbound traffic effectively isolates the instance from other resources, preventing further communication. Terminating the instance might disrupt operations. Taking a snapshot does not isolate the instance. Increasing storage size does not affect network capabilities.
Ultimate access to all questions.
During a security incident, you need to isolate a compromised RDS instance. What AWS mechanisms can you use to prevent the instance from communicating with other resources?
A
Terminate the RDS instance and restore from a backup.
B
Modify the RDS instance's security group to deny all inbound and outbound traffic.
C
Take a snapshot of the RDS instance and then delete it.
D
Increase the RDS instance's storage size to limit its network capabilities.
No comments yet.