Which of the following is not a service of the security category of the AWS trusted advisor service?
A.
Security Groups – Specific Ports Unrestricted
B.
MFA on Root Account
C.
IAM Use
D.
Vulnerability scans on existing VPCs.
Explanation:
Which of the following is not a service of the security…
Which of the following is not a service of the security category of the AWS trusted advisor service?
D is the right answer.
The four free checks, available in the AWS Management Console, help you build a more secure and responsive cloud environment: Security Groups – Specific Ports Unrestricted, Service Limits, IAM Use, and MFA on Root Account.
– The Service Limits check (performance category) centralizes information about major service limits across multiple AWS products, and it alerts you when you use more than 80% of their allocation of resources such as Amazon EC2 instances and Amazon Elastic Block Store (Amazon EBS) volumes.
– The Security Groups – Specific Ports Unrestricted (security category) alerts you to overly permissive access to your Amazon Elastic Compute Cloud (Amazon EC2) instances and helps you avoid malicious activities such as hacking, denial-of-service attacks, and loss of data, which can result in loss of productivity, and potential legal and financial implications.
– The IAM Use check (security category) alerts you if you are not following security best practices by creating users, groups, and roles to control access to your AWS resources instead of using your account credentials.
– The MFA on Root Account check (security category) recommends that you use multi-factor authentication (MFA), which improves security by requiring additional authentication data from a secondary device.
Refer link below.
https://aws.amazon.com/about-aws/whats-new/2014/07/31/aws-trusted-advisor-security-and-service-limits-checks-now-free/