Security World 4 · Edge Shields · Stage 6

Breach Path

Six tickets at the edge and on the hosts. The logs and the findings say where the control was missing.

  • WAF and CloudFront logs
  • GuardDuty EC2 findings
  • Inspector findings
  • Network Access Analyzer
Domain
Security
World
Security World 4: Edge Shields (Specialty)
Game type
Edge security: Set the CDN, the web firewall and the bucket in front of an application.
Time
About 40 minutes on a first attempt (estimated)
Exam guides
  • SOA-C03Skill 5.1.3: Audit AWS network protection services in a single account; Skill 5.3.2: Collect and interpret networking logs to troubleshoot issues
  • SCS-C03Skill 3.1.1: Define and select edge security strategies based on anticipated threats and attacks; Skill 3.2.3: Scan compute resources for known vulnerabilities (for example, scan container images and Lambda functions by using Amazon Inspector, monitor compute runtimes by using GuardDuty); Skill 3.3.5: Identify unnecessary network access (for example, AWS Verified Access, Network Access Analyzer, Amazon Inspector network reachability findings); Skill 1.2.6: Determine and configure appropriate log sources based on network design, threats, and attacks