SCS-C02 Exam Dumps : AWS Certified Security - Specialty

To support answer B, use the

"For example, IAM Config provides a managed IAM Config Rules to ensure that encryption is turned on for all EBS volumes in your account."

Comprehensive and Detailed Explanation From Exact Extract:

Amazon Inspector offers automated, continuous vulnerability scanning for Amazon EC2 instances. The new version includes Malware Protection, which scans for malicious software as part of its inspection process.

This capability enables both detection of software vulnerabilities and malicious activity (like viruses or rootkits), thus covering both parts of the requirement: vulnerabilities and unintended network exposure.

This falls under Infrastructure Security and aligns with recommended practices for securing compute resources on AWS.

AWS WAF Geo Match Condition:

Use AWS WAF to create a web access control list (web ACL).

Add a geo match condition to block traffic originating from the specified countries.

Associate Web ACL with CloudFront:

Attach the web ACL to the CloudFront distribution.

Requests from blocked countries will be denied at the CloudFront edge locations, ensuring compliance with data regulation policies.

Advantages of Using AWS WAF:

Cost-effective: Only pay for WAF rules, which are more economical than alternative solutions.

Scalable: Automatically handles global traffic without additional configuration.

Alternative Options:

Using CloudFront's geo-restriction feature (Option C) is also possible but lacks the flexibility and granularity of WAF rules.

AWS WAF Geo Match Conditions

Using AWS WAF with CloudFront