AWS Certified Solutions Architect - Professional SAP-C02 — Topic 1 Question 419

Question

A company creates an AWS Control Tower landing zone to manage and govern a multi-account AWS environment. The company's security team will deploy preventive controls and detective controls to monitor AWS services across all the accounts. The security team needs a centralized view of the security state of all the accounts. Which solution will meet these requirements?

Accepted Answer

Correct answer: D. The correct answer is D. Option D: Enable AWS Security Hub for the organization in AWS Organizations. Designate one AWS account as the delegated administrator for Security Hub. AWS Security Hub centralizes security findings and compliance checks. AWS Organizations centrally governs and secures multiple AWS accounts.

AWS Certified Solutions Architect - Professional SAP-C02 — Question 419