SCS-C03 Question #123: Real Exam Question with Answer & Explanation

Question

A company's security team wants to receive email notification from AWS about any abuse reports regarding DoS attacks. A security engineer needs to implement a solution that will provide a near- real-time alert for any abuse reports that AWS sends for the account. The security engineer already has created an Amazon Simple Notification Service (Amazon SNS) topic and has subscribed the security team's email address to the topic. What should the security engineer do next to meet these requirements?

Options

• AUse the AWS Trusted Advisor API and a scheduled Lambda function to detect
• BCreate an Amazon EventBridge rule that uses AWS Health and identifies a specific event for
• CUse the AWS Support API and a scheduled Lambda function to detect abuse report cases.
• DUse AWS CloudTrail logs with metric filters to detect AWS_ABUSE_DOS_REPORT events.

Explanation

AWS Health provides real-time visibility into events that affect AWS accounts, including abuse notifications such as AWS_ABUSE_DOS_REPORT. According to the AWS Certified Security - Specialty Study Guide, AWS Health events are natively integrated with Amazon EventBridge, enabling automated, near-real-time responses without polling or custom code. By creating an EventBridge rule that listens for AWS Health events related to abuse reports and configuring the rule to publish messages to an SNS topic, the security engineer ensures immediate notification to the security team whenever AWS issues a DoS-related abuse report for

No community discussion yet for this question.