nerdexam
Amazon

ANS-C01 · Question #112

A company is hosting an application on Amazon EC2 instances behind an Application Load Balancer. The instances are in an Amazon EC2 Auto Scaling group. Because of a recent change to a security…

The correct answer is D. Configure an AWS Config rule to detect inconsistencies between the desired security group. https://aws.amazon.com/blogs/mt/remediate-noncompliant-aws-config-rules-with-aws-systems- manager-automation-runbooks/

Submitted by renata2k· Mar 6, 2026

Question

A company is hosting an application on Amazon EC2 instances behind an Application Load Balancer. The instances are in an Amazon EC2 Auto Scaling group. Because of a recent change to a security group, external users cannot access the application. A network engineer needs to prevent this downtime from happening again. The network engineer must implement a solution that remediates noncompliant changes to security groups. Which solution will meet these requirements?

Options

  • AConfigure Amazon GuardDuty to detect inconsistencies between the desired security group
  • BConfigure an AWS Config rule to detect inconsistencies between the desired security group
  • CConfigure Amazon GuardDuty to detect inconsistencies between the desired security group
  • DConfigure an AWS Config rule to detect inconsistencies between the desired security group

How the community answered

(34 responses)
  • A
    24% (8)
  • B
    3% (1)
  • C
    12% (4)
  • D
    62% (21)

Explanation

https://aws.amazon.com/blogs/mt/remediate-noncompliant-aws-config-rules-with-aws-systems- manager-automation-runbooks/

Topics

#AWS Config#Security Group#Compliance#Remediation

Community Discussion

No community discussion yet for this question.

Full ANS-C01 Practice