ExpertEasy1 markMultiple Choice
AWS SAA-C03 · Question 16 · Domain 1.2: Secure Workloads
A company wants a centralized view of security alerts and compliance status across multiple AWS accounts. They want to automatically check their environment against AWS Foundational Security Best Practices. Which service should they use?
A company wants a centralized view of security alerts and compliance status across multiple AWS accounts. They want to automatically check their environment against AWS Foundational Security Best Practices. Which service should they use?
Answer options:
A.
Amazon GuardDuty
B.
AWS Security Hub
C.
AWS Trusted Advisor
D.
AWS CloudTrail
How to approach this question
Look for 'centralized view of security alerts' and 'compliance status'. This is the exact definition of Security Hub.
Full Answer
B.AWS Security Hub✓ Correct
AWS Security Hub
AWS Security Hub provides a comprehensive view of your security state in AWS and helps you check your environment against security industry standards and best practices.
Common mistakes
Confusing Security Hub with GuardDuty. GuardDuty is a data source for Security Hub.
Practice the full AWS SAA-C03 Practice Exam 3
65 questions · hints · full answers · grading
More questions from this exam
Q01A company stores sensitive documents in an Amazon S3 bucket. The security team requires that only...EasyQ02A large enterprise uses AWS Organizations to manage multiple accounts. The security team wants to...MediumQ03A company hosts a web application on Amazon EC2 instances behind an Application Load Balancer (AL...EasyQ04A company wants to continuously monitor its AWS accounts for malicious activity and unauthorized ...MediumQ05A company needs to encrypt data at rest in Amazon RDS and manage database credentials securely. T...Medium