CCCS-203B: CrowdStrike Certified Cloud Specialist

By CrowdStrike · Question Mode

QuestionQ42

VerifiedCloud Security Policies and Rules

While reviewing the Cloud Security Posture Management dashboard, you notice 16 Critical IOMs. Traffic involving an ELB (Elastic Load Balancer) is not encrypted.

Which policy will notify you about this misconfiguration?

Explanation

TLS/SSL must be enabled on a publicly accessible Elastic Load Balancer to encrypt traffic in transit. A policy that detects a public ELB with TLS/SSL disabled identifies the lack of encryption; a vulnerable SSL protocol is still an encrypted protocol configuration. AWS documents that secure ELB listeners use HTTPS or TLS to encrypt data in transit.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!