SCS-C02 Question 94
Select 2Your organization has deployed an application in AWS, and you are tasked with ensuring that critical security events, such as unauthorized access attempts to an EC2 instance or changes to IAM policies, trigger automated responses and notifications. Which combination of AWS services would you use to monitor, detect, and send alarms for these events?
- A
Amazon CloudWatch for monitoring and creating alarms, and Amazon SNS for notifications
- B
Amazon EventBridge for detecting specific event patterns and triggering automated workflows
- C
AWS Config for recording configuration changes and triggering notifications for unauthorized activity
- D
AWS Trusted Advisor for monitoring security events and generating automated alarms
- E
Amazon RDS for automatically detecting security events and sending alarms
Show answer and explanation
Correct answers: A, B
Explanation
To monitor and respond to security events effectively, you can use Amazon CloudWatch to track metrics and logs, create alarms, and send notifications. Amazon EventBridge complements this by detecting patterns in AWS service events and triggering automated workflows. Together, these services provide a robust solution for identifying and responding to critical security incidents in real-time.
- A. Correct.
Correct: Amazon CloudWatch can monitor metrics and logs, set up alarms, and send notifications using Amazon SNS, making it suitable for monitoring and alerting on security events.
- B. Correct.
Correct: Amazon EventBridge can detect specific patterns in AWS service events, such as unauthorized access attempts or changes to IAM policies, and trigger automated workflows or notifications.
- C. Incorrect.
Incorrect: AWS Config is primarily used for tracking configuration changes and compliance, but it does not directly monitor or alarm on security events like unauthorized access attempts.
- D. Incorrect.
Incorrect: AWS Trusted Advisor provides security recommendations but does not monitor real-time events or generate automated alarms.
- E. Incorrect.
Incorrect: Amazon RDS focuses on database management and does not provide event monitoring or alarm generation for general security events.