DOP-C02 · Question #64
A company has multiple accounts in an organization in AWS Organizations. The company's SecOps team needs to receive an Amazon Simple Notification Service (Amazon SNS) notification if any account in th
The correct answer is C. Turn on AWS Config across the organization. In the delegated administrator account, create an. Amazon GuardDuty is primarily on threat detection and response, not configuration monitoring A conformance pack is a collection of AWS Config rules and remediation actions that can be easily deployed as a single entity in an account and a Region or across an organization in AWS h
Question
A company has multiple accounts in an organization in AWS Organizations. The company's SecOps team needs to receive an Amazon Simple Notification Service (Amazon SNS) notification if any account in the organization turns off the Block Public Access feature on an Amazon S3 bucket. A DevOps engineer must implement this change without affecting the operation of any AWS accounts. The implementation must ensure that individual member accounts in the organization cannot turn off the notification. Which solution will meet these requirements?
Options
- ADesignate an account to be the delegated Amazon GuardDuty administrator account. Turn on
- BCreate an AWS CloudFormation template that creates an SNS topic and subscribes the SecOps
- CTurn on AWS Config across the organization. In the delegated administrator account, create an
- DTurn on Amazon Inspector across the organization. In the Amazon Inspector delegated
How the community answered
(19 responses)- A21% (4)
- B5% (1)
- C63% (12)
- D11% (2)
Explanation
Amazon GuardDuty is primarily on threat detection and response, not configuration monitoring A conformance pack is a collection of AWS Config rules and remediation actions that can be easily deployed as a single entity in an account and a Region or across an organization in AWS https://docs.aws.amazon.com/config/latest/developerguide/conformance-packs.html
Topics
Community Discussion
No community discussion yet for this question.