Exam AWS Certified Security - Specialty SCS-C02 topic 1 question 153 discussion

Exam question from Amazon's AWS Certified Security - Specialty SCS-C02

Question #: 153
Topic #: 1

[All AWS Certified Security - Specialty SCS-C02 Questions]

A company wants to implement host-based security for Amazon EC2 instances and containers in Amazon Elastic Container Registry (Amazon ECR). The company has deployed AWS Systems Manager Agent (SSM Agent) on the EC2 instances. All the company's AWS accounts are in one organization in AWS Organizations. The company will analyze the workloads for software vulnerabilities and unintended network exposure. The company will push any findings to AWS Security Hub, which the company has configured for the organization.

The company must deploy the solution to all member accounts, including new accounts, automatically. When new workloads come online, the solution must scan the workloads.

Which solution will meet these requirements?

A. Use SCPs to configure scanning of EC2 instances and ECR containers for all accounts in the organization.
B. Configure a delegated administrator for Amazon GuardDuty for the organization. Create an Amazon EventBridge rule to initiate analysis of ECR containers
C. Configure a delegated administrator for Amazon Inspector for the organization. Configure automatic scanning for new member accounts.
D. Configure a delegated administrator for Amazon Inspector for the organization. Create an AWS Config rule to initiate analysis of ECR containers.

Show Suggested Answer

Suggested Answer: C 🗳️

by Zek at May 14, 2024, 12:28 p.m.

Disclaimers:

- ExamTopics website is not related to, affiliated with, endorsed or authorized by Amazon.
- Trademarks, certification & product names are used for reference only and belong to Amazon.

Comments

Submit Cancel

navid1365

4 months ago

Selected Answer: C

C is correct. Amazon Inspector is designed to automatically discover and scan workloads for software vulnerabilities and unintended network exposure. Configuring a delegated administrator for Amazon Inspector ensures centralized management and deployment of the security solution across all member accounts, including new ones. It also ensures that new workloads are automatically scanned upon deployment.

upvoted 3 times

...

aescudero51

6 months ago

Selected Answer: C

Host-based security for EC2 instances: Amazon Inspector is specifically designed for vulnerability scanning of Amazon EC2 instances. Container security for ECR: Inspector also supports scanning container images stored in Amazon ECR. Automatic deployment to all accounts: Configuring a delegated administrator for Inspector in the organization ensures automatic deployment of the scanning agent to all member accounts, including new ones. Automatic scanning for new workloads: Enabling automatic scanning for new member accounts guarantees that any new EC2 instances or container images launched will be automatically scanned by Inspector.

upvoted 3 times

...

Zek

6 months, 3 weeks ago

C. Correct https://docs.aws.amazon.com/inspector/latest/user/adding-member-accounts.html https://www.examtopics.com/discussions/amazon/view/110834-exam-aws-certified-security-specialty-topic-1-question-485/

upvoted 2 times

...

Exam AWS Certified Security - Specialty SCS-C02 All Questions

View all questions & answers for the AWS Certified Security - Specialty SCS-C02 exam

Exam AWS Certified Security - Specialty SCS-C02 topic 1 question 153 discussion

Comments

navid1365

aescudero51

Zek

SY0-701