Amazon
SOA-C02 · Question #359
A SysOps administrator maintains the security and compliance of a company's AWS account. To ensure the company's Amazon EC2 instances are following company policy, a SysOps administrator wants to…
The correct answer is A. Create an AWS Config rule with the required-tags managed rule to identify noncompliant. https://docs.aws.amazon.com/config/latest/developerguide/evaluate-config_use-managed-
Submitted by fatema_kw· Mar 30, 2026Monitoring, Logging, and Remediation
Question
A SysOps administrator maintains the security and compliance of a company's AWS account. To ensure the company's Amazon EC2 instances are following company policy, a SysOps administrator wants to terminate any EC2 instance that do not contain a department tag. Noncompliant resources must be terminated in near-real time. Which solution will meet these requirements?
Options
- ACreate an AWS Config rule with the required-tags managed rule to identify noncompliant
- BCreate a new Amazon EventBridge (Amazon CloudWatch Events) rule to monitor when new EC2
- CEnsure all users who can create EC2 instances also have the permissions to use the
- DEnsure AWS Systems Manager Compliance is configured to manage the EC2 instances.
How the community answered
(20 responses)- A85% (17)
- B5% (1)
- C10% (2)
Explanation
https://docs.aws.amazon.com/config/latest/developerguide/evaluate-config_use-managed-
Topics
#AWS Config#required-tags rule#compliance remediation#EC2 tagging
Community Discussion
No community discussion yet for this question.