AWS Security Specialty Practice Questions - AWS Certified Security - Specialty (SCS-C02) Exam

Access More Questions

GuardDuty detected suspicious API calls from a compromised IAM user credential. The security team wants to automatically block access from the source IP and revoke the IAM user active sessions. What is the recommended approach?

Manually delete the IAM user from the console Use Amazon EventBridge to trigger a Lambda function that adds the IP to an NACL deny rule and revokes active sessions Disable the IAM user access keys in the IAM console Create a support case with AWS to block the IP

Correct Answer:

Use Amazon EventBridge to trigger a Lambda function that adds the IP to an NACL deny rule and revokes active sessions

Access more questions from this quiz

Continue to AWS Security Specialty Practice Questions - AWS Certified Security - Specialty (SCS-C02) Exam for more practice questions and the full quiz experience.

Access More Questions