A security alert has been raised for an Amazon EC2 instance in a customer account that is exhibiting strange behavior. The Security Engineer must first isolate the EC2 instance and then use tools for further investigation. What should the Security Engineer use to isolate and research this event? (Choose three.)

Question

Quizplus · Accepted Answer

AWS CloudTrail can be used to track API calls and changes to the instance, VPC Flow Logs can help analyze network traffic to and from the instance, and Security groups can be used to isolate the instance by controlling inbound and outbound traffic.

A Security Alert Has Been Raised for an Amazon EC2