A Large Company Wants Its Compliance Team to Audit Its

question 235

Multiple Choice

A large company wants its Compliance team to audit its Amazon S3 buckets to identify if personally identifiable information (PII) is stored in them. The company has hundreds of S3 buckets and has asked the Security Engineers to scan every bucket. How can this task be accomplished?

• A) Configure Amazon CloudWatch Events to trigger Amazon Inspector to scan the S3 buckets daily for PII. Configure Amazon Inspector to publish Amazon SNS notifications to the Compliance team if PII is detected.
• B) Configure Amazon Macie to classify data in the S3 buckets and check the dashboard for PII findings. Configure Amazon CloudWatch Events to capture Macie alerts and target an Amazon SNS topic to be notified if PII is detected.
• C) Check the AWS Trusted Advisor data loss prevention page in the AWS Management Console. Download the Amazon S3 data confidentiality report and send it to the Compliance team. Configure Amazon CloudWatch Events to capture Trusted Advisor alerts and target an Amazon SNS topic to be notified if PII is detected.
• D) Enable Amazon GuardDuty in multiple Regions to scan the S3 buckets. Configure Amazon CloudWatch Events to capture GuardDuty alerts and target an Amazon SNS topic to be notified if PII is detected.

---

Definitions:

Illegal Contract

An agreement that is either unlawful in nature or made with the purpose of undertaking an illegal act, and thus, is not enforceable by law.

Executory

Pertaining to contracts or agreements that are not yet fully performed or completed by all involved parties.

Enforce

To compel observance of or obedience to a law, rule, or obligation.

Minor

An individual under the age of majority, legally considered not yet fully capable of taking on certain responsibilities and rights.