SOA-C03 · Question #161
SOA-C03 Question #161: Real Exam Question with Answer & Explanation
Sign in or unlock SOA-C03 to reveal the answer and full explanation for question #161. The question stem and answer options stay visible for context.
Question
A company uses AWS Organizations to manage its AWS environment. The company implements a process that uses prebuilt Amazon Machine Images (AMIs) to launch instances as a security measure. All AMIs are tagged automatically with a key named ApprovedAMI. The company wants to ensure that employees can use only the approved prebuilt AMIs to launch new instances. Which solution will meet this requirement?
Options
- AImplement a tag policy for the company's organization to require users to set the ApprovedAMI
- BImplement an IAM policy that includes an aws:ResourceTag/ApprovedAMI condition.
- CSet up an AWS Config required-tags rule to prevent users from launching any nonapproved AMIs.
- DUse Amazon GuardDuty to constantly monitor DefenseEvasion:EC2/UnusualDoHActivity findings.
Unlock SOA-C03 to see the answer
You've previewed enough free SOA-C03 questions. Unlock SOA-C03 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.