Certified Incident Handler (CIH) Practice Ecam

What tool did Henry employ to perform containment operations during the cloud security incident?

1. Teleport

2. Terraform

3. Docker

4. Jenkins

The correct answer is: Teleport

Henry employed Teleport to perform containment operations during the cloud security incident. Teleport is a tool specifically designed for secure access and managing credentials for cloud applications, making it an effective choice for containment strategies during security incidents. In cloud security scenarios, the ability to control access to resources and manage permissions is crucial for containing a breach or mitigating further impact. By utilizing Teleport, Henry could limit access to sensitive areas of the infrastructure while the incident was being resolved, ensuring that potential attackers were prevented from escalating their actions or leaking more data. The other tools mentioned serve different primary purposes. Terraform is primarily an Infrastructure as Code (IaC) tool used for provisioning and managing cloud infrastructure but does not directly address containment in response to a security incident. Docker is a platform used to develop, ship, and run applications in containers, which can help in isolating applications but is not tailored for incident response containment operations. Jenkins is an automation server generally used for continuous integration and continuous deployment (CI/CD) processes, focusing more on software delivery than security incident management. Hence, Teleport stands out as the most appropriate tool for the specific context of containment during a cloud security incident.