SCS-C01 Web TestEngine Demo

Q100 Multiple choice

A company is using an organization in AWS Organizations to manage its AWS accounts. The company runs its primary application on Amazon EC2 instances. A security engineer discovers unauthorized access in one of the company's developer AWS accounts. An investigation reveals that AWS access keys from the developer account were mistakenly added to public source code repository.

Which combination of actions should the security engineer take to secure the compromised account? (Choose two.)

Select all that apply.

A
Rotate all the access key pairs in the compromised account.
B
Create security group that denies traffic from the internet. Attach the security group to all EC2 instances in the compromised account
C
Temporarily remove the compromised account from the organization.
D
Delete all EC2 key pairs in the compromised account.
E
Delete any potentially unauthorized IAM users in the compromised account. Change the password for
all other IAM users.

SCS-C01 Web TestEngine demo