A company needs to view a list of security groups that are open to the internet on port 3389. What should a SysOps administrator do to meet this requirement?

The correct answer is D. Use AWS Trusted Advisor to find security groups that allow unrestricted access on port 3389. Trusted Advisor includes the Security Groups – Specific Ports Unrestricted check, which lists groups open to the internet on ports like 3389, giving you the required view.

Submitted by kim_seoul· Mar 30, 2026Security and Compliance

Question

Options

AConfigure Amazon GuardDuty to scan security groups and report unrestricted access on port
BConfigure a service control policy (SCP) to identify security groups that allow unrestricted access
CUse AWS Identity and Access Management Access Analyzer to find any instances that have
DUse AWS Trusted Advisor to find security groups that allow unrestricted access on port 3389.

How the community answered

(36 responses)

A
14% (5)
B
3% (1)
C
6% (2)
D
78% (28)

Explanation

Trusted Advisor includes the Security Groups – Specific Ports Unrestricted check, which lists groups open to the internet on ports like 3389, giving you the required view.

Topics

#Trusted Advisor#security group#port 3389 RDP#unrestricted access

Community Discussion

No community discussion yet for this question.

Full SOA-C02 Practice