nerdexam
AmazonAmazon

DOP-C02 · Question #310

DOP-C02 Question #310: Real Exam Question with Answer & Explanation

Sign in or unlock DOP-C02 to reveal the answer and full explanation for question #310. The question stem and answer options stay visible for context.

Submitted by lars.no· Mar 6, 2026Security and Compliance

Question

A company has a single AWS account that runs hundreds of Amazon EC2 instances in a single AWS Region. The company launches and terminates new EC2 instances every hour. The account includes existing EC2 instances that have been running for longer than a week. The company's security policy requires all running EC2 instances to have an EC2 instance profile attached. The company has created a default EC2 instance profile. The default EC2 instance profile must be attached to any EC2 instances that do not have a profile attached. Which solution will meet these requirements?

Options

  • AConfigure an Amazon EventBridge rule that matches the Amazon EC2 RunInstances API calls.
  • BConfigure AWS Config. Deploy an AWS Config ec2-instance-profile-attached managed rule.
  • CConfigure an Amazon EventBridge rule that matches the Amazon EC2 StartInstances API calls.
  • DConfigure AWS Config. Deploy an AWS Config iam-role-managed-policy-check managed rule.

Unlock DOP-C02 to see the answer

You've previewed enough free DOP-C02 questions. Unlock DOP-C02 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.

Topics

#AWS Config#EC2 instance profiles#Compliance monitoring#Automated remediation#Security best practices
Full DOP-C02 PracticeBrowse All DOP-C02 Questions