An organization is using AWS CloudFormation to manage its infrastructure. They want to ensure that any manual changes made to resources outside of CloudFormation are detected and reported. Which CloudFormation feature should they use?

Answer options:

Change Sets

StackSets

Drift Detection

Stack Policies

How to approach this question

Identify the feature that compares actual state to template state.

Full Answer

C.Drift Detection✓ Correct

AWS CloudFormation Drift Detection lets you detect whether a stack's actual configuration differs from its expected configuration defined in the template. This helps identify manual out-of-band changes.

Common mistakes

Confusing Change Sets with Drift Detection.

Question 67 All questions Question 69

Practice the full AWS Solutions Architect Professional SAP-C02 Practice Exam 7

75 questions · hints · full answers · grading

More questions from this exam

Q01A global enterprise is designing a multi-region network architecture connecting 50 AWS accounts a...Hard Q02A company is migrating its hybrid network to AWS. They have two 10 Gbps AWS Direct Connect connec...Hard Q03An enterprise has 100 AWS accounts in AWS Organizations. The security team mandates that all Amaz...Medium Q04A financial company requires that all EBS volumes, S3 buckets, and RDS databases be encrypted usi...Easy Q05An enterprise is designing a disaster recovery strategy for a critical application running on Ama...Hard

View all 75 questions →