ExamGecko
Question list
Search
Search

List of questions

Search

Related questions











Question 309 - SOA-C02 discussion

Report
Export

A company wants to track its expenditures for Amazon EC2 and Amazon RDS within AWS. The company decides to implement more rigorous tagging requirements for resources in its AWS accounts. A SysOps administrator needs to identify all noncompliant resources.

What is the MOST operationally efficient solution that meets these requirements?

A.
Create a rule in Amazon EventBridge (Amazon CloudWatch Events) that invokes a custom AWS Lambda function that will evaluate all created or updated resources for the specified tags.
Answers
A.
Create a rule in Amazon EventBridge (Amazon CloudWatch Events) that invokes a custom AWS Lambda function that will evaluate all created or updated resources for the specified tags.
B.
Create a rule in AWS Config that invokes a custom AWS Lambda function that will evaluate all resources for the specified tags.
Answers
B.
Create a rule in AWS Config that invokes a custom AWS Lambda function that will evaluate all resources for the specified tags.
C.
Create a rule in AWS Config with the required-tags managed rule to evaluate all resources for the specified tags.
Answers
C.
Create a rule in AWS Config with the required-tags managed rule to evaluate all resources for the specified tags.
D.
Create a rule in Amazon EventBridge (Amazon CloudWatch Events) with a managed rule to evaluate all created or updated resources for the specified tags.
Answers
D.
Create a rule in Amazon EventBridge (Amazon CloudWatch Events) with a managed rule to evaluate all created or updated resources for the specified tags.
Suggested answer: C

Explanation:

To efficiently monitor and identify noncompliant resources in terms of tagging within AWS, using AWS Config with a managed rule for required tagging is most appropriate:

AWS Config Setup: Configure AWS Config to monitor and record configurations of AWS resources within your environment.

Managed Rule for Required Tags: Utilize the 'required-tags' managed rule in AWS Config, which checks whether your resources have the specific tags you define as mandatory. This rule can be customized to specify which tags are required and can automatically evaluate all existing and new resources in your environment.

Compliance Reporting: AWS Config provides detailed compliance reporting that helps you identify resources that do not meet the tagging requirements, facilitating easy remediation.

This approach leverages AWS Config's capabilities for continuous monitoring and evaluation without needing to write custom code or manage additional services, providing an operationally efficient solution for compliance management.

asked 16/09/2024
Steven Owens
36 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first