EC2 Instance Hardening Quiz

What you'll be asked

1. Which of the following is the most effective way to restrict network access to an EC2 instance?
2. When managing access to EC2 instances, why should you avoid using static IAM user credentials stored on the instance?
3. Which practice best ensures that an EC2 instance remains secure against known software vulnerabilities over time?
4. You need to ensure that data stored on an EC2 instance's EBS volume is protected if the physical disk is stolen or decommissioned. What is the most direct method?
5. To audit and enforce security configurations on EC2 instances at scale, which AWS service should be used to detect non-compliant resources, such as instances with open SSH ports?

Answers and explanations come after you submit.