DOP-C02 · Question #128
A company has a data ingestion application that runs across multiple AWS accounts. The accounts are in an organization in AWS Organizations. The company needs to monitor the application and consolidat
Sign in or unlock DOP-C02 to reveal the answer and full explanation for question #128. The question stem and answer options stay visible for context.
Question
A company has a data ingestion application that runs across multiple AWS accounts. The accounts are in an organization in AWS Organizations. The company needs to monitor the application and consolidate access to the application. Currently, the company is running the application on Amazon EC2 instances from several Auto Scaling groups. The EC2 instances have no access to the internet because the data is sensitive. Engineers have deployed the necessary VPC endpoints. The EC2 instances run a custom AMI that is built specifically for the application. To maintain and troubleshoot the application, system administrators need the ability to log in to the EC2 instances. This access must be automated and controlled centrally. The company's security team must receive a notification whenever the instances are accessed. Which solution will meet these requirements?
Options
- ACreate an Amazon EventBridge rule to send notifications to the security team whenever a user logs in
- BDeploy a NAT gateway and a bastion host that has internet access. Create a security group that
- CUse EC2 Image Builder to rebuild the custom AMI. Include the most recent version of AWS Systems
- DUse AWS Systems Manager Automation to build Systems Manager Agent into the custom AMI.
Unlock DOP-C02 to see the answer
You've previewed enough free DOP-C02 questions. Unlock DOP-C02 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.