SCS-C01 Web TestEngine Demo

Q66 Multiple choice

A security engineer must ensure that all infrastructure launched in the company AWS account be monitored for deviation from compliance rules, specifically that all EC2 instances are launched from one of a specified list of AM Is and that all attached EBS volumes are encrypted. Infrastructure not in compliance should be terminated. What combination of steps should the Engineer implement? Select 2 answers from the options given below.

Please select:

Select all that apply.

A
Set up a CloudWatch event based on Trusted Advisor metrics
B
Trigger a Lambda function from a scheduled CloudWatch event that terminates non-compliant infrastructure.
C
Set up a CloudWatch event based on Amazon inspector findings
D
Monitor compliance with AWS Config Rules triggered by configuration changes
E
Trigger a CLI command from a CloudWatch event that terminates the infrastructure

SCS-C01 Web TestEngine demo