AWS Certified SysOps Administrator - Associate SOA-C02 — Topic 1 Question 73

Question

A company wants to create an automated solution for all accounts managed by AWS Organizations to detect any security groups that use 0.0.0.0/0 as the source address for inbound traffic. The company also wants to automatically remediate any noncompliant security groups by restricting access to a specific CIDR block that corresponds with the company's intranet. Which set of actions should the SysOps administrator take to create a solution?

Accepted Answer

Correct answer: A. The correct answer is A. Option A: Create an AWS Config rule to detect noncompliant security groups. Set up automatic remediation to change the 0.0.0.0/0 source address to the approved CIDR block. AWS Config tracks resource configuration changes and evaluates compliance.

AWS Certified SysOps Administrator - Associate SOA-C02 — Question 73