Security World 6 · Incident Command · Stage 3

Exposed Key

Know what the key did, make it unusable reversibly, clean up, then recover.

  • Credential compromise response
  • Access key deactivation
  • Session revocation
  • Persistence review
  • Credential rotation
Domain
Security
World
Security World 6: Incident Command (Specialty)
Game type
Runbook: Order the response steps, run the runbook and read the timeline.
Time
About 35 minutes on a first attempt (estimated)
Exam guides
  • SAA-C03Task 1.1: Design secure access to AWS resources
  • SOA-C03Skill 4.1.2
  • DEA-C01Skill 4.1.3: Create and rotate credentials for password management (for example, AWS Secrets Manager)
  • SCS-C03Skill 2.2.2: Search and correlate logs for security events across applications and AWS services; Skill 2.2.3: Validate findings from AWS security services to assess the scope and impact of an event; Skill 2.2.4: Respond to affected resources by containing and eradicating threats, and recover resources (for example, by implementing network containment controls, restoring backups)