ISC2 Systems Security Certified Practitioner (SSCP) Practice Question

Publishing Amazon Inspector findings to Amazon EventBridge enables near-real-time processing. An EventBridge rule that filters for findings whose Severity.Label is CRITICAL can directly invoke an AWS Lambda function. The function reads the finding JSON-which already contains the remediation.recommendation text-enriches the message as needed, and then calls Amazon SNS to fan out the notification to email (or chat) subscribers such as DevOps engineers and the compliance manager. The same function can store the full finding payload in an Amazon S3 bucket that has versioning enabled, ensuring every version of every finding is retained and tamper-evident for audit purposes. This design is automated, meets the sub-hour notification objective (typically seconds), delivers built-in remediation guidance, and uses fully managed services that require minimal ongoing maintenance. The other options either delay reporting, omit remediation details, or fail to provide immutable historical storage.