Amazon
SOA-C03 · Question #17
A company hosts an FTP server on EC2 instances. AWS Security Hub sends findings to Amazon EventBridge when the FTP port becomes publicly exposed in attached security groups. A CloudOps engineer needs
Sign in or unlock SOA-C03 to reveal the answer and full explanation for question #17. The question stem and answer options stay visible for context.
Submitted by salim_om· Mar 5, 2026Security and compliance
Question
A company hosts an FTP server on EC2 instances. AWS Security Hub sends findings to Amazon EventBridge when the FTP port becomes publicly exposed in attached security groups. A CloudOps engineer needs an automated, event-driven remediation solution to remove public access from security groups. Which solution will meet these requirements?
Options
- AConfigure the existing EventBridge event to stop the EC2 instances that have the exposed port.
- BCreate a cron job for the FTP server to invoke an AWS Lambda function. Configure the Lambda
- CCreate a cron job for the FTP server that invokes an AWS Lambda function. Configure the
- DConfigure the existing EventBridge event to invoke an AWS Lambda function. Configure the
Unlock SOA-C03 to see the answer
You've previewed enough free SOA-C03 questions. Unlock SOA-C03 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.
Topics
#EventBridge#Lambda remediation#Security Hub findings#security group automation