Amazon Exam SCS-C02 Topic 7 Question 4 Discussion

Actual exam question for Amazon's SCS-C02 exam

Question #: 4
Topic #: 7

A company uses Amazon GuardDuty. The company's security team wants all High severity findings to automatically generate a ticket in a third-party ticketing system through email integration.

Which solution will meet this requirement?

ACreate a verified identity for the third-party ticketing email system in Amazon Simple Email Service (Amazon SES). Create an Amazon EventBridge rule that includes an event pattern that matches High severity GuardDuty findings. Specify the SES identity as the target for the EventBridge rule.

BCreate an Amazon Simple Notification Service (Amazon SNS) topic. Subscribe the third-party ticketing email system to the SNS topic. Create an Amazon EventBridge rule that includes an event pattern that matches High severity GuardDuty findings. Specify the SNS topic as the target for the EventBridge rule.

CUse the GuardDuty CreateFilter API operation to build a filter in GuardDuty to monitor for High severity findings. Export the results of the filter to an Amazon Simple Notification Service (Amazon SNS) topic. Subscribe the third-party ticketing email system to the SNS topic.

DUse the GuardDuty CreateFilter API operation to build a filter in GuardDuty to monitor for High severity findings. Create an Amazon Simple Notification Service (Amazon SNS) topic. Subscribe the third-party ticketing email system to the SNS topic. Create an Amazon EventBridge rule that includes an event pattern that matches GuardDuty findings that are selected by the filter. Specify the SNS topic as the target for the EventBridge rule.

Show Suggested Answer

Suggested Answer: B

The correct answer is B. Create an Amazon Simple Notification Service (Amazon SNS) topic. Subscribe the third-party ticketing email system to the SNS topic. Create an Amazon EventBridge rule that includes an event pattern that matches High severity GuardDuty findings. Specify the SNS topic as the target for the Event-Bridge rule.

According to the AWS documentation1, you can use Amazon EventBridge to create rules that match events from GuardDuty and route them to targets such as Amazon SNS topics. You can use event patterns to filter events based on criteria such as severity, type, or resource. For example, you can create a rule that matches only High severity findings and sends them to an SNS topic that is subscribed by a third-party ticketing email system. This way, you can automate the creation of tickets for High severity findings and notify the security team.

by Felix at Oct 08, 2023, 01:38 PM

Limited Time Offer

25%

Off

Get Premium SCS-C02 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Ardella

4 days ago

This seems straightforward enough. I'm leaning towards option B - using SNS as the intermediary between GuardDuty and the ticketing system. That way, I can easily scale and add additional subscribers in the future if needed.

upvoted 0 times

...

Julie

9 days ago

I'm a little confused by the wording of the options. They all seem to be talking about the procurement process in some way. I'll have to re-read the question closely and think about which one specifically addresses contract changes.

upvoted 0 times

...

Richelle

10 days ago

I'm pretty sure the answer is DTLS, since it's a secure protocol commonly used for control connections in SD-WAN.

upvoted 0 times

...

Chantay

12 days ago

Hmm, this seems like a tricky question. I'll need to think through the order carefully to get this right.

upvoted 0 times

...