DOP-C02 · Question #354
A security team must record the configuration of AWS resources, detect issues, and send notifications for findings. The main workload in the AWS account consists of an Amazon EC2 Auto Scaling group th
Sign in or unlock DOP-C02 to reveal the answer and full explanation for question #354. The question stem and answer options stay visible for context.
Question
A security team must record the configuration of AWS resources, detect issues, and send notifications for findings. The main workload in the AWS account consists of an Amazon EC2 Auto Scaling group that scales in and out several times during the day. The team wants to be notified within 2 days if any Amazon EC2 security group allows traffic on port 22 for 0.0.0.0/0. The team also needs a snapshot of the configuration of the AWS resources to be taken routinely. The security team has already created and subscribed to an Amazon Simple Notification Service (Amazon SNS) topic. Which solution meets these requirements?
Options
- AConfigure AWS Config to use periodic recording for the AWS account. Deploy the vpc-sg-port-
- BConfigure AWS Config to use configuration change recording for the AWS account. Deploy the
- CConfigure AWS Config to use configuration change recording for the AWS account. Deploy the
- DCreate an AWS Lambda function to evaluate security groups and publish a message to the SNS
Unlock DOP-C02 to see the answer
You've previewed enough free DOP-C02 questions. Unlock DOP-C02 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.