Ravi Sir's Cyber Security Cards › Interview Cards
Scenario: Sahyadri Pune EC2 shows thousands of failed SSH attempts. Steps?
Scenario: Sahyadri Pune EC2 shows thousands of failed SSH attempts. Steps? Check if any login succeeded , tighten the security group to known IPs, and confirm key-only SSH. Add fail2ban and review GuardDuty/CloudTrail if they are on. “The key question is whether any attempt succeeded, then I lock do
Read card text
What this card says
Short answer
Check if any login succeeded, tighten the security group to known IPs, and confirm key-only SSH.
Example
Add fail2ban and review GuardDuty/CloudTrail if they are on.
Say it in the interview
“The key question is whether any attempt succeeded, then I lock down SSH.”
Why it matters
Failures are noise; a success is the real incident.
Learn more in the lesson: 47.8 Scenario and HR + Technical Mix