SOA-C02 · Question #744
A company's developers manually install software modules on Amazon EC2 instances to deploy new versions of a service. A security audit finds that the instances have different combinations of…
The correct answer is D. Use EC2 Image Builder to create and test an Amazon Machine Image (AMI) that includes only the. EC2 Image Builder automates building, testing, and distributing AMIs. You can bake in only the approved modules, validate them in the pipeline, and then use that AMI in deployments to ensure every instance is consistent and compliant.
Question
A company’s developers manually install software modules on Amazon EC2 instances to deploy new versions of a service. A security audit finds that the instances have different combinations of approved modules and unapproved modules. A SysOps administrator must create a new instance image that contains only approved software. Which solution will meet these requirements?
Options
- AUse Amazon Detective to continuously find and uninstall unauthorized modules from the
- BUse Amazon GuardDuty to create and deploy an Amazon Machine Image (AMI) that includes only
- CUse AWS Systems Manager Run Command to install the approved modules on all running
- DUse EC2 Image Builder to create and test an Amazon Machine Image (AMI) that includes only the
How the community answered
(65 responses)- A6% (4)
- B17% (11)
- C5% (3)
- D72% (47)
Explanation
EC2 Image Builder automates building, testing, and distributing AMIs. You can bake in only the approved modules, validate them in the pipeline, and then use that AMI in deployments to ensure every instance is consistent and compliant.
Topics
Community Discussion
No community discussion yet for this question.