Amazon
SOA-C02 · Question #304
A SysOps administrator is responsible for a company's security groups. The company wants to maintain a documented trail of any changes that are made to the security groups. The SysOps administrator…
The correct answer is C. Set up AWS Config to record security group changes. https://aws.amazon.com/blogs/security/how-to-monitor-aws-account-configuration-changes-and- api-calls-to-amazon-ec2-security-groups/
Submitted by deeparc· Mar 30, 2026Monitoring, Logging, and Remediation
Question
A SysOps administrator is responsible for a company's security groups. The company wants to maintain a documented trail of any changes that are made to the security groups. The SysOps administrator must receive notification whenever the security groups change. Which solution will meet these requirements?
Options
- ASet up Amazon Detective to record security group changes.
- BSet up AWS Systems Manager Change Manager to record security group changes.
- CSet up AWS Config to record security group changes.
- DSet up Amazon Detective to record security group changes.
How the community answered
(21 responses)- A14% (3)
- B5% (1)
- C76% (16)
- D5% (1)
Explanation
https://aws.amazon.com/blogs/security/how-to-monitor-aws-account-configuration-changes-and- api-calls-to-amazon-ec2-security-groups/
Topics
#AWS Config#security group changes#change tracking#SNS notifications
Community Discussion
No community discussion yet for this question.