Review questions

1. You have been brought into a company where they are trying to rectify their security and compliance posture. The security and compliance teams are now requiring that all EC2 instances use approved AMIs. As a DevOps engineer, you must find a way to implement a process to find any EC2 instances that have been launched from unapproved AMIs. Which solution will satisfy the requirements?

   a. Use Trusted Advisor checks to identify EC2 instances that have been launched from unapproved AMIs.

   b. Create an AWS Config rule that identifies any non-approved AMIs and then sends a notification to the security and compliance distribution lists.

   c. Have Systems Manager Inventory create a custom report of all the EC2 instances using unapproved AMIs.

   d. Have Amazon Inspector run across all the instances in the account. Share the findings of unapproved AMIs with the security and compliance team members.

2. You and your team are running an application in a production environment. The...