SCS-C02 · Question #8
SCS-C02 Question #8: Real Exam Question with Answer & Explanation
Sign in or unlock SCS-C02 to reveal the answer and full explanation for question #8. The question stem and answer options stay visible for context.
Question
A company has a single AWS account and uses an Amazon EC2 instance to test application code. The company recently discovered that the instance was compromised. The instance was serving up malware. The analysis of the instance showed that the instance was compromised 35 days ago. A security engineer must implement a continuous monitoring solution that automatically notifies the company's security team about compromised instances through an email distribution list for high severity findings. The security engineer must implement the solution as soon as possible. Which combination of steps should the security engineer take to meet these requirements? (Choose three.)
Options
- AEnable AWS Security Hub in the AWS account.
- BEnable Amazon GuardDuty in the AWS account.
- CCreate an Amazon Simple Notification Service (Amazon SNS) topic. Subscribe the security
- DCreate an Amazon Simple Queue Service (Amazon SQS) queue. Subscribe the security team's
- ECreate an Amazon EventBridge rule for GuardDuty findings of high severity. Configure the rule to
- FCreate an Amazon EventBridge rule for Security Hub findings of high severity. Configure the rule
Unlock SCS-C02 to see the answer
You've previewed enough free SCS-C02 questions. Unlock SCS-C02 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.