ExamTopics Logo
Mail Us[email protected]
Menu
Amazon Discussions
exam questions

Exam AWS Certified DevOps Engineer - Professional DOP-C02 All Questions

View all questions & answers for the AWS Certified DevOps Engineer - Professional DOP-C02 exam
Go to Exam

Exam AWS Certified DevOps Engineer - Professional DOP-C02 topic 1 question 97 discussion

Exam question from Amazon's AWS Certified DevOps Engineer - Professional DOP-C02
Question #: 97
Topic #: 1
[All AWS Certified DevOps Engineer - Professional DOP-C02 Questions]

A company wants to ensure that their EC2 instances are secure. They want to be notified if any new vulnerabilities are discovered on their instances, and they also want an audit trail of all login activities on the instances.

Which solution will meet these requirements?

  • A. Use AWS Systems Manager to detect vulnerabilities on the EC2 instances. Install the Amazon Kinesis Agent to capture system logs and deliver them to Amazon S3.
  • B. Use AWS Systems Manager to detect vulnerabilities on the EC2 instances. Install the Systems Manager Agent to capture system logs and view login activity in the CloudTrail console.
  • C. Configure Amazon CloudWatch to detect vulnerabilities on the EC2 instances. Install the AWS Config daemon to capture system logs and view them in the AWS Config console.
  • D. Configure Amazon Inspector to detect vulnerabilities on the EC2 instances. Install the Amazon CloudWatch Agent to capture system logs and record them via Amazon CloudWatch Logs.
Show Suggested Answer Hide Answer
Suggested Answer: D 🗳️
by devnv at May 14, 2023, 10:55 a.m.
Disclaimers:
  • - ExamTopics website is not related to, affiliated with, endorsed or authorized by Amazon.
  • - Trademarks, certification & product names are used for reference only and belong to Amazon.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Submit Cancel
ProfXsamson
Highly Voted 1 year, 10 months ago
Selected Answer: D
Aamzon Inspector detect software vulnerabilities and unintended network exposure in near real time in AWS workloads such as Amazon EC2, AWS Lambda functions, and Amazon ECR.
upvoted 9 times
...
thanhnv142
Highly Voted 1 year, 3 months ago
Selected Answer: D
D is correct: <new vulnerabilities are discovered> means AWS inspector A and B: AWS SSM does not support vulnerabilities scanning C: Amazon CloudWatch does not support vulnerabilities scanning
upvoted 5 times
...
YucelFuat
Most Recent 8 months, 1 week ago
Selected Answer: D
Exam tip : if you see "vulnerabilities" in the question -> choose the answer covers "Amazon Inspector"
upvoted 3 times
...
EVAAWS
9 months, 1 week ago
Selected Answer: D
D is the right answer
upvoted 1 times
...
OrganizedChaos25
1 year, 12 months ago
D is correct
upvoted 2 times
...
devnv
2 years ago
D is the right answer
upvoted 2 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago