Cert Master

DOP-C02 Domain 5: Incident and Event Response

A company needs to auto-remediate non-compliant resources. Which option meets the requirement with the LEAST implementation effort?

Multiple choice — select one answer

Answer choices

  1. a. Create an EventBridge rule on aws.ecs for STOPPED tasks with that stoppedReason; target the SNS topic.
  2. b. Organization-wide AWS Config conformance pack with public access rules and remediation
  3. c. AWS Security Hub
  4. d. SSM Automation documents triggered by Config

Architectural breakdown & explanation

Automation executes approved remediation.

Correct answer(s): d. SSM Automation documents triggered by Config

Exam domain: Domain 5: Incident and Event Response (14% weight on the official guide).

Official documentation & study links

Practice this certification

This page is one question from the AWS Certified DevOps Engineer – Professional bank. Run a full timed practice exam with domain-weighted random questions in your browser.

Start practice exam View exam overview All certifications