CLF-C02 · Question #136
Which AWS service can generate information that can be used by external auditors?
The correct answer is C. AWS Config. AWS Config is the service that tracks configuration changes of AWS resources, recording a history of compliance and resource changes, which is highly valuable for external auditors. This data provides an audit trail for compliance purposes.
Question
Which AWS service can generate information that can be used by external auditors?
Options
- AAmazon Cognito
- BAmazon FSx
- CAWS Config
- DAmazon Inspector
How the community answered
(32 responses)- B6% (2)
- C91% (29)
- D3% (1)
Why each option
AWS Config is the service that tracks configuration changes of AWS resources, recording a history of compliance and resource changes, which is highly valuable for external auditors. This data provides an audit trail for compliance purposes.
Amazon Cognito provides user sign-up, sign-in, and access control for web and mobile applications and does not generate audit-specific configuration information.
Amazon FSx provides fully managed third-party file systems for compute workloads and is not designed for generating audit-specific configuration information.
AWS Config continuously monitors and records AWS resource configurations and provides a detailed history of configuration changes. This allows for auditing and assessing the compliance of configurations against desired states, generating reports that are crucial for external auditors to verify compliance.
Amazon Inspector is a security assessment service that helps improve the security and compliance of applications deployed on AWS by identifying vulnerabilities, but it does not provide an audit trail of resource configurations for external auditors.
Concept tested: Resource configuration auditing and compliance tracking
Source: https://docs.aws.amazon.com/config/latest/developerguide/WhatIsConfig.html
Community Discussion
No community discussion yet for this question.