Play free

Security World 6 · Incident Command · Stage 4

Automatic Response

The finding runs the fix: a rule, a target, a guard against loops, and a human's button for the steps that need one.

  • EventBridge automation
  • Step Functions and Automation runbooks
  • Security Hub custom actions
  • Config remediation
  • Automated Forensics Orchestrator
  • Application Recovery Controller
Domain
Security
World
Security World 6: Incident Command (Specialty)
Game type
Solution board: Drop services into each row's slots, then run records through them.
Time
About 35 minutes on a first attempt (estimated)
Exam guides
  • SOA-C03Skill 1.2.2; Skill 4.2.5: Configure reports and remediate findings from AWS services (for example, AWS Security Hub, Amazon GuardDuty, AWS Config, Amazon Inspector, AWS Security Agent)
  • SAP-C02Task 3.2: Determine a strategy to improve security
  • DOP-C02Task 5.2: Implement configuration changes in response to events
  • SCS-C03Skill 2.1.4: Use AWS services to automatically remediate incidents (for example, Systems Manager, Automated Forensics Orchestrator for Amazon EC2, AWS Step Functions, Amazon Application Recovery Controller, Lambda functions); Skill 2.2.4: Respond to affected resources by containing and eradicating threats, and recover resources (for example, by implementing network containment controls, restoring backups)