AWS Certified SysOps Administrator - Associate SOA-C02 — Topic 1 Question 268

Question

A company manages a set of accounts on AWS by using AWS Organizations. The company's security team wants to use a native AWS service to regularly scan all AWS accounts against the Center for Internet Security (CIS) AWS Foundations Benchmark. What is the MOST operationally efficient way to meet these requirements?

Accepted Answer

Correct answer: D. The correct answer is D. Option D: Designate an AWS Security Hub administrator account. Configure new accounts in the organization to automatically become member accounts. Enable CIS AWS Foundations Benchmark scans. AWS Security Hub centralizes security findings and compliance checks. AWS Config tracks resource configuration changes and evaluates compliance.

AWS Certified SysOps Administrator - Associate SOA-C02 — Question 268