AWS DevOps Engineer Professional DOP-C01 – Question504

You are hosting multiple environments in multiple regions and would like to use Amazon Inspector for regular security assessments on your AWS resources across all regions. Which statement about Amazon Inspector's operation across regions is true?

A.
Amazon Inspector is a global service that is not region-bound. You can include AWS resources from multiple regions in the same assessment target.
B. Amazon Inspector is hosted within AWS regions behind a public endpoint. All regions are isolated from each other, and the telemetry and findings for all assessments performed within a region remain in that region and are not distributed by the service to other Amazon Inspector locations.
C. Amazon Inspector is hosted in each supported region. Telemetry data and findings are shared across regions to provide complete assessment reports.
D. Amazon Inspector is hosted in each supported region separately. You have to create assessment targets using the same name and tags in each region and Amazon Inspector will run against each assessment target in each region.

Correct Answer: B

Explanation:

Explanation:
At this time, Amazon Inspector supports assessment services for EC2 instances in only the following AWS regions:
US West (Oregon)
US East (N. Virginia)
EU (Ireland)
Asia Pacific (Seoul)
Asia Pacific (Mumbai)
Asia Pacific (Tokyo)
Asia Pacific (Sydney)
Amazon Inspector is hosted within AWS regions behind a public endpoint. All regions are isolated from each other, and the telemetry and findings for all assessments performed within a region remain in that region and are not distributed by the service to other Amazon Inspector locations.
Reference:
https://docs.aws.amazon.com/inspector/latest/userguide/inspector_su…