A company wants a centralized view of security alerts and compliance status across multiple AWS accounts. They want to automatically check their environment against AWS Foundational Security Best Practices. Which service should they use?

Answer options:

Amazon GuardDuty

AWS Security Hub

AWS Trusted Advisor

AWS CloudTrail

How to approach this question

Look for 'centralized view of security alerts' and 'compliance status'. This is the exact definition of Security Hub.

Full Answer

B.AWS Security Hub✓ Correct

AWS Security Hub provides a comprehensive view of your security state in AWS and helps you check your environment against security industry standards and best practices.

Common mistakes

Confusing Security Hub with GuardDuty. GuardDuty is a data source for Security Hub.

Question 15 All questions Question 17

Practice the full AWS SAA-C03 Practice Exam 3

65 questions · hints · full answers · grading

More questions from this exam

Q01A company stores sensitive documents in an Amazon S3 bucket. The security team requires that only...Easy Q02A large enterprise uses AWS Organizations to manage multiple accounts. The security team wants to...Medium Q03A company hosts a web application on Amazon EC2 instances behind an Application Load Balancer (AL...Easy Q04A company wants to continuously monitor its AWS accounts for malicious activity and unauthorized ...Medium Q05A company needs to encrypt data at rest in Amazon RDS and manage database credentials securely. T...Medium

View all 65 questions →