AWS Certified Security - Specialty SCS-C02 — Topic 1 Question 183

Question

A company has AWS accounts that are in an organization in AWS Organizations. A security engineer needs to set up AWS Security Hub in a dedicated account for security monitoring. The security engineer must ensure that Security Hub automatically manages all existing accounts and all new accounts that are added to the organization. Security Hub also must receive findings from all AWS Regions. Which combination of actions will meet these requirements with the LEAST operational overhead? (Choose two.)

Accepted Answer

Correct answer: A, C. The correct answer is A, C. Option A: Configure a finding aggregation Region for Security Hub. Link the other Regions to the aggregation Region. Option C: Turn on the option to automatically enable accounts for Security Hub. AWS Security Hub centralizes security findings and compliance checks. AWS Config tracks resource configuration changes and evaluates compliance.

AWS Certified Security - Specialty SCS-C02 — Question 183