Exam SOA-C03 Topic 1 Question 98 Discussion

Actual exam question for Amazon's SOA-C03 exam
Question #: 98
Topic #: 1
A company's security policy requires incoming SSH traffic to be restricted to a defined set of addresses. The company is using an AWS Config rule to check whether security groups allow unrestricted incoming SSH traffic.
A CloudOps engineer discovers a noncompliant resource and fixes the security group manually.
The CloudOps engineer wants to automate the remediation of other noncompliant resources.
What is the MOST operationally efficient solution that meets these requirements?

Suggested Answer: B Vote an answer

AWS Config supports automatic remediation by invoking a Systems Manager Automation runbook when a rule is noncompliant. For unrestricted SSH, you can attach the managed remediation action AWS-DisableIncomingSSHOnPort22 to the existing AWS Config rule so that any noncompliant security group is automatically corrected without custom Lambda code or polling logic.

by Valerie at Jan 19, 2026, 09:33 PM

Limited Time Offer

15%

Off

Get Premium SOA-C03 Questions as Interactive Self Test Engine or PDF

Comments

Chosen Answer:
This is a voting comment (?) , you can switch to a simple comment.
Switch to a voting comment New
Nick name: Submit Cancel
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
0
0
0
10