AWS Certified Security - Specialty SCS-C02 — Topic 1 Question 249

Question

A company uses AWS Lambda functions to implement application logic. The company uses an organization in AWS Organizations to manage hundreds of AWS accounts. The company needs to implement a solution to continuously monitor the Lambda functions for vulnerabilities in all accounts. The solution must publish detected issues to a dashboard. Lambda functions that are being tested or are in development must not appear on the dashboard. Which combination of steps will meet these requirements? (Choose two.)

Accepted Answer

Correct answer: B, C. The correct answer is B, C. Option B: Designate a delegated Amazon Inspector administrator account in the organization’s management account. Use the Amazon Inspector dashboard to obtain an overview of Lambda functions that have vulnerabilities. Option C: Apply tags of “test” or “development” to all Lambda functions that are in testing or development. Use a suppression filter that suppresses findings that contain these tags. AWS Lambda runs code without provisioning servers and scales automatically, which minimizes operational overhead. Amazon Inspector automatically scans workloads for software vulnerabilities.

AWS Certified Security - Specialty SCS-C02 — Question 249