MENU
An EC2 instance storing critical data of a company got infected with malware. The forensics team took the EBS volume snapshot of the affected Instance to perform further analysis and collected other data of evidentiary value. What should be their next step?
Suggested Answer: B
Get Premium 312-49 Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
35 comments · newest first
BE
Benedict
12 months ago
I think they should back it up first before any termination.
CR
Crista
12 months ago
Wait, why not just isolate it instead of terminating?
TR
Truman
12 months ago
Terminating the instance seems too extreme, though.
TI
Tiera
1 year ago
Keeping it running is risky, I agree with A.
CE
Celestine
1 year ago
They should definitely pause the running instance.
DE
Destiny
1 year ago
I practiced a similar question, and I think backing up before termination is crucial. So, D sounds right to me!
SA
Samira
1 year ago
I feel like terminating all instances in the VPC might be overkill. They should focus on the infected one, right?
BE
Bernardo
1 year ago
I'm not entirely sure, but I remember something about preserving evidence. Maybe they should pause the instance first?
AN
Annice
1 year ago
I think they should definitely terminate the instance after taking a backup. It seems risky to keep it running with malware on it.
PA
Pamella
1 year ago
Hmm, I'm a bit unsure about this one. I know an Access Point needs some basic wireless settings, but I'm not sure which are the absolute minimum. I'll have to review my notes.
TR
Truman
1 year ago
Hmm, I'm not sure about this one. The Scrum Master is also involved in tracking the team's progress, so they could potentially prepare this report as well. I'll have to think about the specific responsibilities of each role.
NO
Noel
1 year ago
Hmm, the options cover a range of details about patch management, like rollback, batch operations, and automatic fixes. I'll need to think through each one to determine which one is false.
SA
Sanjuana
1 year ago
I'd say D is the winner here. Terminating the instance is the smart move, but make sure you've got that backup ready to go. Don't want to end up like those poor dinosaurs, you know?
CO
Corinne
1 year ago
D) They should terminate the instance after taking necessary backup
LE
Leontine
1 year ago
C) They should terminate all instances connected via the same VPC
IE
Iesha
1 year ago
B) They should keep the instance running as it stores critical data
ES
Estrella
1 year ago
A) They should pause the running instance
AS
Asha
1 year ago
Option D seems like the most logical step. Keeping the instance running (option B) is just asking for trouble, and terminating all instances (option C) is overkill.
SY
Sylvia
1 year ago
I'd go with option D as well. Better safe than sorry when it comes to critical data security. Gotta love a good ol' fashioned 'terminate and backup' plan!
DE
Dean
1 year ago
C) They should terminate all instances connected via the same VPC
DA
Daisy
1 year ago
D) They should terminate the instance after taking necessary backup
LA
Lang
1 year ago
A) They should pause the running instance
BE
Beckie
1 year ago
Pausing the instance (option A) might not be enough, as the malware could still be active. Terminating it after backup is the most prudent choice.
ME
Melodie
1 year ago
D) They should terminate the instance after taking necessary backup
DA
Daniela
1 year ago
B) They should terminate the instance after taking necessary backup
AR
Artie
1 year ago
A) They should terminate the instance after taking necessary backup
MA
Marjory
1 year ago
Hmm, I think option D is the way to go. Terminating the instance after taking a backup is the safest approach to preserve the critical data and prevent further spread of the malware.
AM
Amira
1 year ago
Hmm, I think option D is the way to go. Terminating the instance after taking a backup is the safest approach to preserve the critical data and prevent further spread of the malware.
EL
Elliot
1 year ago
D) They should terminate the instance after taking necessary backup
LE
Lenna
1 year ago
C) They should terminate all instances connected via the same VPC
JO
Johnson
1 year ago
B) They should keep the instance running as it stores critical data
QU
Quentin
1 year ago
A) They should pause the running instance
DO
Dominga
2 years ago
That's a good point. Maybe they should take necessary backup and then terminate the instance.
CO
Colette
2 years ago
But what if keeping the instance running is crucial for the company's operations?
DO
Dominga
2 years ago
I think they should pause the running instance.