ExamTopics Logo
Mail Us[email protected]
Menu
Amazon Discussions
exam questions

Exam AWS Certified SysOps Administrator - Associate All Questions

View all questions & answers for the AWS Certified SysOps Administrator - Associate exam
Go to Exam

Exam AWS Certified SysOps Administrator - Associate topic 1 question 457 discussion

Exam question from Amazon's AWS Certified SysOps Administrator - Associate
Question #: 457
Topic #: 1
[All AWS Certified SysOps Administrator - Associate Questions]

A company that uses ServiceNow has an AWS account where a sensitive workload runs. The necessary security groups are in place. The company needs to implement a solution to create an incident in ServiceNow every time the rules change in any security group.

Which solution will meet this requirement with the LEAST operational effort?

  • A. Create an Amazon CloudWatch alarm that enters ALARM state when security groups change. Configure the alarm to invoke an AWS Lambda function that connects to ServiceNow to create an incident.
  • B. Enable AWS Security Hub. Create an AWS Lambda function that connects to ServiceNow to create an incident. Create an Amazon EventBridge rule to detect security group changes. Configure the event type as Security Hub Findings - Custom Action. Configure the EventBridge rule to invoke the Lambda function.
  • C. Create an Amazon EventBridge rule to detect security group changes. Configure the event type as AWS API Call via CloudTrail. Configure the EventBridge rule to run the AWS-CreateServiceNowIncidentAWS Systems Manager Automation runbook to create an incident in ServiceNow.
  • D. Launch an Amazon EC2 instance that has a persistent connection to ServiceNow to detect security group changes. Export AWS CloudTrail logs to the EC2 instance. Write a bash script to run a scheduled cron job every 30 minutes to search the CloudTrail logs for security groups changes. Configure the EC2 instance to create an incident in ServiceNow when a change is detected.
Show Suggested Answer Hide Answer
Suggested Answer: C 🗳️
by AMEJack at Aug. 12, 2024, 7:30 a.m.
Disclaimers:
  • - ExamTopics website is not related to, affiliated with, endorsed or authorized by Amazon.
  • - Trademarks, certification & product names are used for reference only and belong to Amazon.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Submit Cancel
robotgeek
3 months ago
Selected Answer: A
Guys there is NOTHING on google stating AWS-CreateServiceNowIncidentAWS exists, please, stap it!
upvoted 1 times
...
Aamee
6 months ago
Selected Answer: C
Absolutely with C cuz of only Eventbridge and Cloud trail services being involved in that option. Whereas, in option B, Security Hub, EventBridge and lambda services are engaged which IMO takes more time to setup.
upvoted 1 times
...
Toni2936
7 months, 3 weeks ago
Selected Answer: C
I vote C, the question said "LEAST"
upvoted 2 times
...
siheom
8 months, 2 weeks ago
Selected Answer: C
vote C
upvoted 2 times
...
aragon_saa
8 months, 2 weeks ago
Selected Answer: B
Answer is B
upvoted 1 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago