DOP-C02 · Question #129
A company uses Amazon S3 to store proprietary information. The development team creates buckets for new projects on a daily basis. The security team wants to ensure that all existing and future…
The correct answer is B. Enable AWS Config rules and configure automatic remediation using AWS Systems Manager. AWS Config allows you to remediate noncompliant resources that are evaluated by AWS Config Rules. AWS Config applies remediation using AWS Systems Manager Automation documents. https://docs.aws.amazon.com/config/latest/developerguide/remediation.html
Question
A company uses Amazon S3 to store proprietary information. The development team creates buckets for new projects on a daily basis. The security team wants to ensure that all existing and future buckets have encryption, logging, and versioning enabled. Additionally, no buckets should ever be publicly read or write accessible. What should a DevOps engineer do to meet these requirements?
Options
- AEnable AWS CloudTrail and configure automatic remediation using AWS Lambda.
- BEnable AWS Config rules and configure automatic remediation using AWS Systems Manager
- CEnable AWS Trusted Advisor and configure automatic remediation using Amazon EventBridge.
- DEnable AWS Systems Manager and configure automatic remediation using Systems Manager
How the community answered
(51 responses)- A10% (5)
- B84% (43)
- C2% (1)
- D4% (2)
Explanation
AWS Config allows you to remediate noncompliant resources that are evaluated by AWS Config Rules. AWS Config applies remediation using AWS Systems Manager Automation documents. https://docs.aws.amazon.com/config/latest/developerguide/remediation.html
Topics
Community Discussion
No community discussion yet for this question.