SAP-C02 · Question #852
A company has an application that partners use to upload objects directly to an Amazon S3 bucket. The company needs a solution that can scan uploaded objects for malware, delete objects that contain…
The correct answer is C. Enable Amazon GuardDuty Malware Protection for the S3 bucket. Create an AWS Lambda. Amazon GuardDuty Malware Protection can scan newly uploaded S3 objects for malware. When GuardDuty flags an object, the finding lands in EventBridge. A Lambda function triggered by that event can delete the infected object and notify the security team through SNS - simple…
Question
A company has an application that partners use to upload objects directly to an Amazon S3 bucket. The company needs a solution that can scan uploaded objects for malware, delete objects that contain malware, and notify the company's security team. Which solution will meet these requirements?
Options
- AConfigure Amazon Inspector for vulnerability scanning. Create an AWS Step Functions state
- BConfigure Amazon Macie to scan the S3 bucket for malware. Create an AWS Lambda function
- CEnable Amazon GuardDuty Malware Protection for the S3 bucket. Create an AWS Lambda
- DEnable Amazon GuardDuty Malware Protection for the S3 bucket. Create an AWS Step
How the community answered
(27 responses)- A15% (4)
- B4% (1)
- C74% (20)
- D7% (2)
Explanation
Amazon GuardDuty Malware Protection can scan newly uploaded S3 objects for malware. When GuardDuty flags an object, the finding lands in EventBridge. A Lambda function triggered by that event can delete the infected object and notify the security team through SNS - simple, serverless, and automated.
Community Discussion
No community discussion yet for this question.