SAP-C02 Question #826: Real Exam Question with Answer & Explanation

Question

A company has AWS accounts in an organization in AWS Organizations. The company needs to gain visibility of issues related to security compliance in the accounts. AWS Config is enabled for all accounts and AWS Regions. Results are aggregated into an AWS Config delegated administrator account. The company must report compliance with security frameworks for all current and new accounts within 48 hours. Which solution will meet these requirements?

Options

• AUse AWS Config in the delegated administrator account to deploy conformance packs across all
• BUse the delegated administrator account to create and deploy an AWS CloudFormation stack set
• CCreate an Amazon EventBridge rule that detects the creation of new accounts. Configure the rule
• DTurn on AWS Config recording for all accounts. Use AWS Systems Manager to deploy

Explanation

Using AWS CloudFormation StackSets is an efficient way to deploy resources (such as conformance packs) across multiple AWS accounts and Regions. By creating and deploying a StackSet from the delegated administrator account, you can ensure that conformance packs are applied consistently across all accounts and Regions, ensuring compliance with security frameworks within the required 48-hour window.

No community discussion yet for this question.