Amazon
SCS-C03 · Question #46
A company runs a web application on a fleet of Amazon EC2 instances in an Auto Scaling group. Amazon GuardDuty and AWS Security Hub are enabled. The security engineer needs an automated response to an
Sign in or unlock SCS-C03 to reveal the answer and full explanation for question #46. The question stem and answer options stay visible for context.
Submitted by satoshi_tk· Mar 6, 2026Incident Response
Question
A company runs a web application on a fleet of Amazon EC2 instances in an Auto Scaling group. Amazon GuardDuty and AWS Security Hub are enabled. The security engineer needs an automated response to anomalous traffic that follows AWS best practices and minimizes application disruption. Which solution will meet these requirements?
Options
- AUse EventBridge to disable the instance profile access keys.
- BUse EventBridge to invoke a Lambda function that removes the affected instance from the Auto
- CUse Security Hub to update the subnet network ACL to block traffic.
- DSend GuardDuty findings to Amazon SNS for email notification.
Unlock SCS-C03 to see the answer
You've previewed enough free SCS-C03 questions. Unlock SCS-C03 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.
Topics
#GuardDuty findings#EventBridge automation#Lambda remediation#Auto Scaling group