Discussion
Three of the following limit the blast radius of a compromised instance. Which is the odd one out?
Answer: A
Correct answer: encrypting the instance's disks at rest
Encryption at rest does not limit the blast radius, because an attacker who controls the instance has whatever access the instance itself has - the volumes are decrypted transparently for it. What it defends against is the disk being read outside that context. The other three genuinely contain a compromise: a narrow security group limits what the instance can reach, a minimal role limits what it can call, and a private subnet removes the direct route in and out.
No comment is present. Be the first to comment.
Loading…
Post your comment
Please log in or register to post a comment.
Examination Categories
- SSC Exams
- Banking Exams
- Teaching Exams
- Civil Services Exams
- Railways Exams
- Engineering Recruitment Exams
- Defence Exams
- State Government Exams
- Police Exams
- Insurance Exams
- Nursing Exams
- Other Government Exams
- NRA CET
- PG Entrance Exams
- Campus Placement
- MBA Entrance Exams
- CUET and UG Entrance
- Judiciary Exams
- Regulatory Body Exams
- Software Development