SCS-C02 · Question #179
SCS-C02 Question #179: Real Exam Question with Answer & Explanation
Sign in or unlock SCS-C02 to reveal the answer and full explanation for question #179. The question stem and answer options stay visible for context.
Question
A company wants to implement host-based security for Amazon EC2 instances and containers in Amazon Elastic Container Registry (Amazon ECR). The company has deployed AWS Systems Manager Agent (SSM Agent) on the EC2 instances. All the company's AWS accounts are in one organization in AWS Organizations. The company will analyze the workloads for software vulnerabilities and unintended network exposure. The company will push any findings to AWS Security Hub, which the company has configured for the organization. The company must deploy the solution to all member accounts, including new accounts, automatically. When new workloads come online, the solution must scan the workloads. Which solution will meet these requirements?
Options
- AUse SCPs to configure scanning of EC2 instances and ECR containers for all accounts in the
- BConfigure a delegated administrator for Amazon GuardDuty for the organization. Create an
- CConfigure a delegated administrator for Amazon Inspector for the organization. Configure
- DConfigure a delegated administrator for Amazon Inspector for the organization. Create an AWS
Unlock SCS-C02 to see the answer
You've previewed enough free SCS-C02 questions. Unlock SCS-C02 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.