
Ultimate access to all questions.
A company is running an application on Amazon EC2 instances behind an Application Load Balancer, with the instances part of an Amazon EC2 Auto Scaling group. Due to a recent modification to a security group, external users are unable to access the application.
To avoid such downtime in the future, a network engineer must implement a solution that automatically corrects noncompliant changes to security groups.
What solution will fulfill these requirements?
A
Configure Amazon GuardDuty to detect inconsistencies between the desired security group configuration and the current security group configuration. Create an AWS Systems Manager Automation runbook to remediate noncompliant security groups.
B
Configure an AWS Config rule to detect inconsistencies between the desired security group configuration and the current security group configuration. Configure AWS OpsWorks for Chef to remediate noncompliant security groups.
C
Configure Amazon GuardDuty to detect inconsistencies between the desired security group configuration and the current security group configuration. Configure AWS OpsWorks for Chef to remediate noncompliant security groups.
D
Configure an AWS Config rule to detect inconsistencies between the desired security group configuration and the current security group configuration. Create an AWS Systems Manager Automation runbook to remediate noncompliant security groups.