SOA-C02 · Question #630
A company has AWS accounts that use various AWS Regions. The accounts are in an organization in AWS Organizations. The company's security team has enabled AWS Security Hub and several security…
The correct answer is A. Turn on consolidated control findings in the Security Hub delegated administrator account. By enabling consolidated control findings in the Security Hub delegated administrator account, Security Hub automatically aggregates duplicate findings into a single entry. This solution minimizes operational overhead by using native functionality, eliminating the need for…
Question
A company has AWS accounts that use various AWS Regions. The accounts are in an organization in AWS Organizations. The company's security team has enabled AWS Security Hub and several security standards by using a delegated administrator account. Cross-Region aggregation is enabled. Consolidated control findings are turned off. The security team is receiving multiple copies of Security Hub findings that refer to the same misconfiguration. The extra copies of findings are causing difficulty for the security team to prioritize remediation. Which solution will consolidate the findings with the LEAST operational overhead?
Options
- ATurn on consolidated control findings in the Security Hub delegated administrator account.
- BExport the Security Hub findings. Consolidate the findings based on control ID. Visualize the
- CSet up an AWS Config aggregator instead of Security Hub. Deploy a custom conformance pack
- DLaunch an Amazon EC2 instance in the organization's management account. Configure a custom
How the community answered
(34 responses)- A79% (27)
- B6% (2)
- C12% (4)
- D3% (1)
Explanation
By enabling consolidated control findings in the Security Hub delegated administrator account, Security Hub automatically aggregates duplicate findings into a single entry. This solution minimizes operational overhead by using native functionality, eliminating the need for custom scripts or additional data processing, and thereby consolidating the duplicate findings for easier prioritization of remediation.
Topics
Community Discussion
No community discussion yet for this question.