Question 460
A professional architect is reviewing two independent workstreams. Requirement A: Operations retains detached EBS volumes after instance termination and pays for unused storage for months. Requirement B: An S3 bucket is repeatedly made public and security wants prompt correction beyond simply generating findings. Choose TWO actions that directly address these separate problems.
Explanation
Correct Answers
This action meets the independently stated requirement B: An S3 bucket is repeatedly made public and security wants prompt correction beyond simply generating findings. Config rules can invoke automations for selected remediable configuration noncompliance. A direct acceptance check is: A deliberately noncompliant bucket triggers the configured corrective control and audit records.
This action meets the independently stated requirement A: Operations retains detached EBS volumes after instance termination and pays for unused storage for months. EBS storage billing continues for allocated volumes until they are deleted or otherwise changed. A direct acceptance check is: Approved orphaned volumes stop generating storage costs while protected volumes remain recoverable.
Incorrect Answers
This action targets a different technical need: Finance collects optimizer suggestions from Compute Optimizer, Trusted Advisor and cost dashboards but counts the same recommendation more than once. It does not replace either required solution in A or B. Consolidated savings recommendations should not be summed blindly across sources; verify the two stated requirements independently rather than accepting an unrelated change.
This action targets a different technical need: A high-throughput EC2 network service shows packet processing CPU saturation and must exploit modern instance network acceleration. It does not replace either required solution in A or B. Enhanced networking capabilities require compatible instance types and operating-system drivers; verify the two stated requirements independently rather than accepting an unrelated change.
This action targets a different technical need: Hundreds of EC2 hosts need scheduled patch windows with evidence of patch compliance and approved maintenance boundaries. It does not replace either required solution in A or B. Systems Manager supports fleet patching with centralized baselines and maintenance windows; verify the two stated requirements independently rather than accepting an unrelated change.