ExamGecko
Question list
Search
Search

List of questions

Search

Related questions











Question 184 - DOP-C01 discussion

Report
Export

A company uses Amazon S3 to store proprietary information. The Development team creates buckets for new projects on a daily basis. The Security team wants to ensure that all existing and future buckets have encryption, logging, and versioning enabled. Additionally, no buckets should ever be publicly read or write accessible.

What should a DevOps Engineer do to meet these requirements?

A.
Enable AWS CloudTrail and configure automatic remediation using AWS Lambda.
Answers
A.
Enable AWS CloudTrail and configure automatic remediation using AWS Lambda.
B.
Enable AWS Config rules and configure automatic remediation using AWS Systems Manager documents.
Answers
B.
Enable AWS Config rules and configure automatic remediation using AWS Systems Manager documents.
C.
Enable AWS Trusted Advisor and configure automatic remediation using Amazon CloudWatch Events.
Answers
C.
Enable AWS Trusted Advisor and configure automatic remediation using Amazon CloudWatch Events.
D.
Enable AWS Systems Manager and configure automatic remediation using Systems Manager documents.
Answers
D.
Enable AWS Systems Manager and configure automatic remediation using Systems Manager documents.
Suggested answer: B

Explanation:

Reference: https://aws.amazon.com/blogs/aws/aws-config-update-new-managed-rules-to-secure-s3-buckets/

asked 16/09/2024
Anu V
42 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first