Amazon
DOP-C02 · Question #179
A company runs a workload on Amazon EC2 instances. The company needs a control that requires the use of Instance Metadata Service Version 2 (IMDSv2) on all EC2 instances in the AWS account. If an…
The correct answer is A. Set up AWS Config in the account. Use a managed rule to check EC2 instances. Configure the. https://docs.aws.amazon.com/config/latest/developerguide/ec2-imdsv2-check.html
Submitted by yaw92· Mar 6, 2026Security and Compliance
Question
A company runs a workload on Amazon EC2 instances. The company needs a control that requires the use of Instance Metadata Service Version 2 (IMDSv2) on all EC2 instances in the AWS account. If an EC2 instance does not prevent the use of Instance Metadata Service Version 1 (IMDSv1), the EC2 instance must be terminated. Which solution will meet these requirements?
Options
- ASet up AWS Config in the account. Use a managed rule to check EC2 instances. Configure the
- BCreate a permissions boundary that prevents the ec2:RunInstance action if the
- CSet up Amazon Inspector in the account. Configure Amazon Inspector to activate deep inspection
- DCreate an Amazon EventBridge rule for the EC2 instance launch successful event. Send the
How the community answered
(48 responses)- A77% (37)
- B13% (6)
- C4% (2)
- D6% (3)
Explanation
https://docs.aws.amazon.com/config/latest/developerguide/ec2-imdsv2-check.html
Topics
#IMDSv2#AWS Config#EC2 security#Automated remediation
Community Discussion
No community discussion yet for this question.