Amazon Exam SCS-C01 Topic 5 Question 48 Discussion

Actual exam question for Amazon's SCS-C01 exam

Question #: 48
Topic #: 5

A security team is using Amazon EC2 Image Builder to build a hardened AMI with forensic capabilities. An AWS Key Management Service (AWS KMS) key will encrypt the forensic AMI EC2 Image Builder successfully installs the required patches and packages in the security team's AWS account. The security team uses a federated IAM role m the same AWS account to sign in to the AWS Management Console and attempts to launch the forensic AMI. The EC2 instance launches and immediately terminates.

What should the security learn do lo launch the EC2 instance successfully

AUpdate the policy that is associated with the federated IAM role to allow the ec2. Describelmages action for the forensic AMI.

BUpdate the policy that is associated with the federated IAM role to allow the ec2 Start Instances action m the security team's AWS account.

CUpdate the policy that is associated with the KMS key that is used to encrypt the forensic AMI. Configure the policy to allow the kms. Encrypt and kms Decrypt actions for the federated IAM role.

DUpdate the policy that is associated with the federated IAM role to allow the kms. DescribeKey action for the KMS key that is used to encrypt the forensic AMI.

Show Suggested Answer

Suggested Answer: C

https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/troubleshooting-launch.html#troubleshooting-launch-internal

by Fletcher at Oct 02, 2023, 06:56 PM

Limited Time Offer

25%

Off

Get Premium SCS-C01 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Currently there are no comments in this discussion, be the first to comment!