SCS-C03 · Question #29
A company has a single AWS account and uses an Amazon EC2 instance to test application code. The company recently discovered that the instance was compromised and was serving malware. Analysis showed
Sign in or unlock SCS-C03 to reveal the answer and full explanation for question #29. The question stem and answer options stay visible for context.
Question
A company has a single AWS account and uses an Amazon EC2 instance to test application code. The company recently discovered that the instance was compromised and was serving malware. Analysis showed that the instance was compromised 35 days ago. A security engineer must implement a continuous monitoring solution that automatically notifies the security team by email for high severity findings as soon as possible. Which combination of steps should the security engineer take to meet these requirements? (Select THREE.)
Options
- AEnable AWS Security Hub in the AWS account.
- BEnable Amazon GuardDuty in the AWS account.
- CCreate an Amazon Simple Notification Service (Amazon SNS) topic. Subscribe the security
- DCreate an Amazon Simple Queue Service (Amazon SQS) queue. Subscribe the security team's
- ECreate an Amazon EventBridge rule for GuardDuty findings of high severity. Configure the rule to
- FCreate an Amazon EventBridge rule for Security Hub findings of high severity. Configure the rule
Unlock SCS-C03 to see the answer
You've previewed enough free SCS-C03 questions. Unlock SCS-C03 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.