DOP-C02 · Question #463
A DevOps engineer needs to install antivirus software on all Amazon EC2 instances in an AWS account. The EC2 instances run the most recent Amazon Linux version. The solution must detect all…
The correct answer is B. Use AWS Config with a custom rule to check for antivirus installation. Configure automatic. AWS Config can monitor compliance by checking EC2 software inventory. Custom Config rules can automatically trigger Systems Manager Automation documents as remediation actions when noncompliant (software missing). This meets policy enforcement goals with automation.
Question
A DevOps engineer needs to install antivirus software on all Amazon EC2 instances in an AWS account. The EC2 instances run the most recent Amazon Linux version. The solution must detect all instances and use an AWS Systems Manager document to install the software if missing. Which solution will meet these requirements?
Options
- ACreate an association in Systems Manager State Manager targeting all managed nodes. Include
- BUse AWS Config with a custom rule to check for antivirus installation. Configure automatic
- CUse Amazon Inspector to detect missing software and associate with Systems Manager
- DUse EventBridge to detect EC2 RunInstances events and trigger SSM automation.
How the community answered
(22 responses)- A5% (1)
- B73% (16)
- C18% (4)
- D5% (1)
Explanation
AWS Config can monitor compliance by checking EC2 software inventory. Custom Config rules can automatically trigger Systems Manager Automation documents as remediation actions when noncompliant (software missing). This meets policy enforcement goals with automation.
Topics
Community Discussion
No community discussion yet for this question.