PAS-C01 · Question #5
A company is running its SAP workload on AWS. The company's security team has implemented the following requirements: - All Amazon EC2 instances for SAP must be SAP certified instance types. - Encrypt
Sign in or unlock PAS-C01 to reveal the answer and full explanation for question #5. The question stem and answer options stay visible for context.
Question
A company is running its SAP workload on AWS. The company's security team has implemented the following requirements:
- All Amazon EC2 instances for SAP must be SAP certified instance
types.
- Encryption must be enabled for all Amazon S3 buckets and Amazon
Elastic Block Store (Amazon EBS) volumes.
- AWS CloudTrail must be activated.
- SAP system parameters must be compliant with business rules.
- Detailed monitoring must be enabled for all instances.
The company wants to develop an automated process to review the systems for compliance with the security team's requirements. The process also must provide notification about any deviation from these standards. Which solution will meet these requirements?
Options
- AUse AWS AppConfig to model configuration data in an AWS Systems Manager Automation
- BUse AWS Config managed rules to monitor for compliance with all the requirements. Use Amazon
- CUse AWS Trusted Advisor to monitor for compliance with all the requirements. Use Trusted
- DUse AWS Config managed rules to monitor for compliance with the requirements, except for the
Unlock PAS-C01 to see the answer
You've previewed enough free PAS-C01 questions. Unlock PAS-C01 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.