Answer-first summary for fast verification
Answer: Detach the EBS volume from the instance and perform a forensic analysis.
Detaching the EBS volume from the instance and performing a forensic analysis allows you to investigate the issue without risking further unauthorized access. Deleting the volume might lead to data loss. Encrypting the volume is a good practice but does not address immediate access issues. Increasing volume size does not affect security.
Author: LeetQuiz Editorial Team
Ultimate access to all questions.
You suspect that an EBS volume attached to an EC2 instance has been compromised. What steps should you take to mitigate the risk and prevent further unauthorized access?
A
Delete the EBS volume and recreate it with new data.
B
Detach the EBS volume from the instance and perform a forensic analysis.
C
Encrypt the EBS volume using a new encryption key.
D
Increase the EBS volume's size to handle potential increased load.
No comments yet.