SCS-C02 · Question #212
SCS-C02 Question #212: Real Exam Question with Answer & Explanation
Sign in or unlock SCS-C02 to reveal the answer and full explanation for question #212. The question stem and answer options stay visible for context.
Question
A company has AWS accounts that are in an organization in AWS Organizations. A security engineer needs to set up AWS Security Hub in a dedicated account for security monitoring. The security engineer must ensure that Security Hub automatically manages all existing accounts and all new accounts that are added to the organization. Security Hub also must receive findings from all AWS Regions. Which combination of actions will meet these requirements with the LEAST operational overhead? (Choose two.)
Options
- AConfigure a finding aggregation Region for Security Hub. Link the other Regions to the
- BCreate an AWS Lambda function that routes events from other Regions to the dedicated Security
- CTurn on the option to automatically enable accounts for Security Hub.
- DCreate an SCP that denies the securityhub DisableSecurityHub permission. Attach the SCP to
- EConfigure services in other Regions to write events to an AWS CloudTrail organization trail.
Unlock SCS-C02 to see the answer
You've previewed enough free SCS-C02 questions. Unlock SCS-C02 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.