ExpertMedium1 markMultiple Choice
AWS SAP-C02 · Question 11 · Domain 3.1: Operational Excellence
An enterprise wants to improve operational excellence by automatically remediating unencrypted EBS volumes. Which solution requires the LEAST operational overhead?
An enterprise wants to improve operational excellence by automatically remediating unencrypted EBS volumes. Which solution requires the LEAST operational overhead?
Answer options:
A.
Write a custom AWS Lambda function triggered by CloudTrail events to encrypt volumes.
B.
Use AWS Config rules with an automated remediation action using AWS Systems Manager Automation documents.
C.
Run a daily cron job on an EC2 instance to scan and encrypt volumes.
D.
Use AWS Trusted Advisor to automatically encrypt the volumes.
How to approach this question
Identify the native AWS service pairing for compliance monitoring and remediation.
Full Answer
B.Use AWS Config rules with an automated remediation action using AWS Systems Manager Automation documents.✓ Correct
Use AWS Config rules with an automated remediation action using AWS Systems Manager Automation documents.
AWS Config detects non-compliance, and Systems Manager Automation documents execute the remediation steps natively.
Common mistakes
Choosing Lambda, which involves unnecessary custom coding.
Practice the full AWS Solutions Architect Professional SAP-C02 Practice Exam 3
75 questions · hints · full answers · grading
More questions from this exam
Q01An enterprise has 100 VPCs across 5 AWS Regions. They need to establish a highly available, trans...HardQ02A company uses AWS Organizations. The CISO requires that no EC2 instances can be launched outside...MediumQ03An application uses Amazon Aurora PostgreSQL. To meet disaster recovery requirements, the databas...HardQ04A company is setting up a new multi-account AWS environment. They want to automate the creation o...MediumQ05An organization wants to allocate AWS costs to specific departments. They use multiple AWS accoun...Medium