Amazon
SAP-C02 · Question #684
A company creates an AWS Control Tower landing zone to manage and govern a multi-account AWS environment. The company's security team will deploy preventive controls and detective controls to…
The correct answer is D. Enable AWS Security Hub for the organization in AWS Organizations. Designate one AWS. https://docs.aws.amazon.com/organizations/latest/userguide/orgs_integrate_delegated_admin.ht
Submitted by jakub_pl· Mar 6, 2026Design Solutions for Organizational Complexity
Question
A company creates an AWS Control Tower landing zone to manage and govern a multi-account AWS environment. The company's security team will deploy preventive controls and detective controls to monitor AWS services across all the accounts. The security team needs a centralized view of the security state of all the accounts. Which solution will meet these requirements?
Options
- AFrom the AWS Control Tower management account, use AWS CloudFormation StackSets to
- BEnable Amazon Detective for the organization in AWS Organizations. Designate one AWS
- CFrom the AWS Control Tower management account, deploy an AWS CloudFormation stack set
- DEnable AWS Security Hub for the organization in AWS Organizations. Designate one AWS
How the community answered
(49 responses)- A6% (3)
- B10% (5)
- C4% (2)
- D80% (39)
Explanation
https://docs.aws.amazon.com/organizations/latest/userguide/orgs_integrate_delegated_admin.ht
Community Discussion
No community discussion yet for this question.