A company is deploying a customer service web application on AWS. A network administrator is installing and configuring a VM instance. Which three actions should the administrator take to protect the VM? (Choose three.)
- Disable unneeded ports and services.
- Enforce account management policies.
- Configure RAID to ensure storage fault tolerance.
- Plan subnet placement.
- Deploy an advanced firewall appliance.
- Install an IPS appliance in the VM.
Explanation: This scenario is a typical SaaS cloud service model. The company is responsible for data security. The company also shares the security responsibilities for endpoints and identity management in the cloud with AWS. AWS is responsible for physical infrastructure implementation and security. Some techniques that the company should consider to protect VMs in the cloud include:
- Plan subnet placement.
- Disable unneeded ports and services.
- Enforce account management policies.
- Install antivirus/anti-malware software and keep it updated.
- Install host-based/software firewalls and IDS/IPS.
Exam with this question: Network Defense (NetDef) Course Final Exam Answers
Please login or Register to submit your answer