SOA-C02 · Question #722
A SysOps administrator needs to implement a solution to track configuration changes to security groups of Amazon EC2 instances. The solution also must remediate any noncompliant security groups…
The correct answer is D. Use AWS Config to track configuration changes. Configure AWS Config to use AWS Systems. AWS Config records and evaluates security group changes. You can attach an automatic remediation action that runs an AWS Systems Manager Automation runbook to fix noncompliant groups, fulfilling both tracking and remediation with minimal overhead.
Question
A SysOps administrator needs to implement a solution to track configuration changes to security groups of Amazon EC2 instances. The solution also must remediate any noncompliant security groups. Which solution will meet these requirements?
Options
- AUse AWS CloudTrail to track configuration changes. Use AWS Config for remediation.
- BUse AWS CloudTrail to track configuration changes. Configure CloudTrail to use AWS Systems
- CUse AWS Config to track configuration changes. Use AWS CloudTrail for remediation.
- DUse AWS Config to track configuration changes. Configure AWS Config to use AWS Systems
How the community answered
(29 responses)- A10% (3)
- B3% (1)
- C3% (1)
- D83% (24)
Explanation
AWS Config records and evaluates security group changes. You can attach an automatic remediation action that runs an AWS Systems Manager Automation runbook to fix noncompliant groups, fulfilling both tracking and remediation with minimal overhead.
Topics
Community Discussion
No community discussion yet for this question.