ExpertMedium1 markMultiple Choice
AWS SAP-C02 · Question 58 · Domain 3.2: Security Improvement
An enterprise is migrating 500 applications to AWS. They want to establish a continuous compliance framework to ensure all deployed resources adhere to corporate security standards (e.g., encrypted EBS volumes, restricted security groups). Which TWO services should be combined to provide automated detection and remediation? (Select TWO)
An enterprise is migrating 500 applications to AWS. They want to establish a continuous compliance framework to ensure all deployed resources adhere to corporate security standards (e.g., encrypted EBS volumes, restricted security groups). Which TWO services should be combined to provide automated detection and remediation? (Select TWO)
Answer options:
A.
AWS Config
B.
AWS CloudTrail
C.
AWS Systems Manager Automation
D.
Amazon GuardDuty
E.
AWS Trusted Advisor
F.
AWS Artifact
How to approach this question
Pair the configuration monitoring service (Config) with the operational automation service (Systems Manager).
Full Answer
AWS Config
AWS Systems Manager Automation
AWS Config rules evaluate the configuration settings of your AWS resources. When a resource is flagged as non-compliant, Config can trigger an AWS Systems Manager Automation document to automatically remediate the issue (e.g., encrypting an unencrypted volume).
Common mistakes
Choosing GuardDuty for configuration compliance instead of threat detection.
Practice the full AWS Solutions Architect Professional SAP-C02 Practice Exam 1
75 questions · hints · full answers · grading
More questions from this exam
Q01An enterprise has 50 VPCs across two AWS Regions. They need to establish transitive routing betwe...HardQ02A company uses AWS Organizations. The security team wants to ensure that no IAM user or role can ...MediumQ03An application requires a relational database with an RPO of 1 second and an RTO of less than 1 m...HardQ04A company is setting up a new multi-account environment. They want to automate the provisioning o...MediumQ05An organization wants to allocate AWS costs to specific business units. They use AWS Organization...Hard