🔥 40% Off Crucial Exams Memberships — This Week Only

2 days, 10 hours remaining!
Crucial Exams

ISC2 Systems Security Certified Practitioner (SSCP) Practice Question

A development team runs a fleet of Amazon EC2 instances in an Auto Scaling group. A new compliance mandate requires a weekly, authenticated operating-system vulnerability assessment that produces a report with CVSS scores and recommended remediations. The solution must minimize manual effort and integrate natively with other AWS security services for alerting. Which approach most effectively satisfies these requirements?

  • Schedule AWS Systems Manager Patch Manager to install all missing patches weekly and use its compliance dashboard as the required assessment.

  • Activate Amazon Inspector, ensure the AWS Systems Manager agent is installed on the instances, and review the automatically generated vulnerability findings each week.

  • Create an AWS Config managed rule to check patch compliance daily and export the rule evaluations as the vulnerability report.

  • Enable Amazon GuardDuty to analyze VPC Flow Logs and AWS CloudTrail events for potential threats on a weekly schedule.

ISC2 Systems Security Certified Practitioner (SSCP)
Risk Identification, Monitoring and Analysis
Your Score:
Settings & Objectives
Random Mixed
Questions are selected randomly from all chosen topics, with a preference for those you haven’t seen before. You may see several questions from the same objective or domain in a row.
Rotate by Objective
Questions cycle through each objective or domain in turn, helping you avoid long streaks of questions from the same area. You may see some repeat questions, but the distribution will be more balanced across topics.

Check or uncheck an objective to set which questions you will receive.

Wipe Score
Bash, the Crucial Exams Chat Bot
AI Bot