Cert Master

DOP-C02 Domain 5: Incident and Event Response

Security needs daily detection of public S3 buckets across many accounts without writing custom drift Lambdas per account. Which managed capability applies?

Multiple choice — select one answer

Answer choices

  1. a. SSM Automation documents triggered by Config
  2. b. Organization-wide AWS Config conformance pack with public access rules and remediation
  3. c. Create an EventBridge rule on aws.ecs for STOPPED tasks with that stoppedReason; target the SNS topic.
  4. d. Security group isolation runbook or NACL deny

Architectural breakdown & explanation

Conformance packs roll Config rules and remediation to all accounts in the organization.

Correct answer(s): b. Organization-wide AWS Config conformance pack with public access rules and remediation

Exam domain: Domain 5: Incident and Event Response (14% weight on the official guide).

Official documentation & study links

Practice this certification

This page is one question from the AWS Certified DevOps Engineer – Professional bank. Run a full timed practice exam with domain-weighted random questions in your browser.

Start practice exam View exam overview All certifications