AWS Certified Security - Specialty
Get started today
Ultimate access to all questions.
Comments
Loading comments...
Ultimate access to all questions.
You are responsible for conducting a root cause analysis of a security incident in your organization's AWS environment. Describe the steps you would take to analyze the incident and identify the underlying cause.
A
Review AWS CloudTrail logs to identify any unauthorized API calls or changes to the AWS environment.
B
Analyze Amazon VPC Flow Logs to identify any unusual network traffic or communication patterns.
C
Use AWS Security Hub to aggregate and analyze data from various AWS services to identify potential security issues.
D
Leverage AWS Detective to create a graph of the relationships between AWS resources and analyze the data to identify the root cause of the incident.