SOA-C02 Question 187
Select 2A SysOps Administrator is tasked with enhancing the security posture of an AWS account. They have been advised to use AWS Trusted Advisor to identify potential security issues. Which of the following Trusted Advisor checks should the administrator review to improve security? (Choose TWO)
- A
Security Groups - Specific Ports Unrestricted
- B
Amazon RDS Reserved Instance Utilization
- C
IAM Access Key Rotation
- D
S3 Bucket Permissions
- E
EC2 Reserved Instance Utilization
Show answer and explanation
Correct answers: A, C
Explanation
AWS Trusted Advisor provides several security checks to help administrators secure their AWS environments. The 'Security Groups - Specific Ports Unrestricted' check helps identify security groups with overly permissive rules, such as open ports, which can expose resources to unauthorized access. The 'IAM Access Key Rotation' check ensures that access keys are rotated regularly to reduce the risk of compromised credentials. These checks are directly relevant to improving the security posture of an AWS account.
- A. Correct.
This check identifies security groups with ports that are open to the world (e.g., 0.0.0.0/0), which can pose a security risk. It is critical for maintaining a secure environment.
- B. Incorrect.
This check focuses on cost optimization rather than security. It is unrelated to the task of improving the security posture of the AWS account.
- C. Correct.
This check ensures that IAM access keys are rotated regularly, which is a best practice for maintaining secure credentials and reducing the risk of compromised access keys.
- D. Incorrect.
This check identifies S3 buckets with overly permissive permissions, such as public read or write access, which can lead to unintended data exposure. While relevant to security, it is not listed as a correct answer in this scenario.
- E. Incorrect.
This check focuses on cost optimization for EC2 Reserved Instances and does not pertain to security.