SAP-C02 Question #332: Real Exam Question with Answer & Explanation

Question

A company is using an existing orchestration tool to manage thousands of Amazon EC2 instances. A recent penetration test found a vulnerability in the company's software stack. This vulnerability has prompted the company to perform a full evaluated of its current production environment. The analysts determined that the following vulnerabilities exist within the environment: - Operating systems with outdated libraries and known vulnerabilities are being used in production - Relational databases hosted and managed by the company are running unsupported versions with known vulnerabilities - Data stored in databases Is not encrypted. The solutions architect intends to use AWS Config to continuously audit and assess the compliance of the company's AWS resource configurations with the company's polices and guidelines. What additional steps will enable the company to secure its environments and track resources while adhering to best practices?

Options

• AUse AWS Application Discovery Service to evaluate at running EC2 instances.
• BCreate an AWS CloudFormation template for the EC2 instances.
• CInstall the AWS Systems Manager Agent on all existing instances using the company's current
• Dinstall the AWS Systems Manager Agent on all existing instances using the company's current