SCS-C02 · Question #435
A company has used AWS Lambda functions to build an application on AWS. The company's security engineer implemented Amazon Inspector and activated Lambda standard scanning and Lambda code scanning…
The correct answer is D. Determine whether the unscanned Lambda functions have been invoked in the last 90 days. Amazon Inspector will only scan Lambda functions that have been invoked at least once in the last 90 days. If the Lambda function is not being actively used, the eligibility for scanning may expire. Therefore, to investigate why certain functions are not being scanned, the…
Question
A company has used AWS Lambda functions to build an application on AWS. The company's security engineer implemented Amazon Inspector and activated Lambda standard scanning and Lambda code scanning. The security engineer reviews the Amazon Inspector console and learns that Amazon Inspector is not scanning some of the Lambda functions. The provided reason is that the scan eligibility expired. What should the security engineer do to investigate the reason that the scans are failing?
Options
- AValidate that the AmazonInspector2ServiceRolePolicy AWS managed policy grants permissions
- BIncrease the timeout value of the Lambda functions to complete the scans successfully while the
- CBuild a custom runtime for the unscanned Lambda functions. Include the Amazon Inspector agent
- DDetermine whether the unscanned Lambda functions have been invoked in the last 90 days.
How the community answered
(22 responses)- A5% (1)
- B5% (1)
- C9% (2)
- D82% (18)
Explanation
Amazon Inspector will only scan Lambda functions that have been invoked at least once in the last 90 days. If the Lambda function is not being actively used, the eligibility for scanning may expire. Therefore, to investigate why certain functions are not being scanned, the security engineer should verify whether these Lambda functions have been invoked recently.
Topics
Community Discussion
No community discussion yet for this question.