Exam Bundle

Amazon GuardDuty: Detects suspicious activity through supported telemetry. This does not address the need for An IT group wants automated vulnerability findings for supported EC2 workloads and container images. The appropriate Amazon Inspector applies because Inspector assesses supported workloads for software vulnerabilities and unintended network exposure findings.

AWS Shield provides DDoS protection against supported traffic attacks. This does not address the need for An IT group wants automated vulnerability findings for supported EC2 workloads and container images. The appropriate Amazon Inspector applies because Inspector assesses supported workloads for software vulnerabilities and unintended network exposure findings.

AWS Artifact supplies compliance reports and agreements. This does not address the need for An IT group wants automated vulnerability findings for supported EC2 workloads and container images. The appropriate Amazon Inspector applies because Inspector assesses supported workloads for software vulnerabilities and unintended network exposure findings.

AWS Artifact supplies compliance reports and agreements. That does not meet the requirement: A security manager needs managed software vulnerability assessment for supported AWS compute resources.

AWS Shield provides DDoS protection against supported traffic attacks. That does not meet the requirement: A security manager needs managed software vulnerability assessment for supported AWS compute resources.

Amazon GuardDuty: Detects suspicious activity through supported telemetry. That does not meet the requirement: A security manager needs managed software vulnerability assessment for supported AWS compute resources.

AWS Shield provides DDoS protection against supported traffic attacks. This does not address the need for A security manager needs managed software vulnerability assessment for supported AWS compute resources. The appropriate Amazon Inspector applies because Inspector assesses supported workloads for software vulnerabilities and unintended network exposure findings.

AWS Artifact supplies compliance reports and agreements. This does not address the need for A security manager needs managed software vulnerability assessment for supported AWS compute resources. The appropriate Amazon Inspector applies because Inspector assesses supported workloads for software vulnerabilities and unintended network exposure findings.

Amazon GuardDuty: Detects suspicious activity through supported telemetry. This does not address the need for A security manager needs managed software vulnerability assessment for supported AWS compute resources. The appropriate Amazon Inspector applies because Inspector assesses supported workloads for software vulnerabilities and unintended network exposure findings.

AWS Artifact supplies compliance reports and agreements. That does not meet the requirement: Consider this AWS requirement: A large company needs centralized security findings collected from several AWS security services.

AWS CloudTrail records API requests and account management events. That does not meet the requirement: Consider this AWS requirement: A large company needs centralized security findings collected from several AWS security services.

AWS KMS manages encryption keys and related permissions. That does not meet the requirement: Consider this AWS requirement: A large company needs centralized security findings collected from several AWS security services.

AWS CloudTrail records API requests and account management events. This does not address the need for A large company needs centralized security findings collected from several AWS security services. The appropriate AWS Security Hub applies because Security Hub centralizes and prioritizes security findings and can run security best-practice checks.

AWS KMS manages encryption keys and related permissions. This does not address the need for A large company needs centralized security findings collected from several AWS security services. The appropriate AWS Security Hub applies because Security Hub centralizes and prioritizes security findings and can run security best-practice checks.

AWS Artifact supplies compliance reports and agreements. This does not address the need for A large company needs centralized security findings collected from several AWS security services. The appropriate AWS Security Hub applies because Security Hub centralizes and prioritizes security findings and can run security best-practice checks.

AWS CloudTrail records API requests and account management events. That does not meet the requirement: A compliance lead wants to aggregate and prioritize security findings against checks in one view.

AWS Artifact supplies compliance reports and agreements. That does not meet the requirement: A compliance lead wants to aggregate and prioritize security findings against checks in one view.

AWS KMS manages encryption keys and related permissions. That does not meet the requirement: A compliance lead wants to aggregate and prioritize security findings against checks in one view.

AWS CloudTrail records API requests and account management events. This does not address the need for A compliance lead wants to aggregate and prioritize security findings against checks in one view. The appropriate AWS Security Hub applies because Security Hub centralizes and prioritizes security findings and can run security best-practice checks.

AWS Artifact supplies compliance reports and agreements. This does not address the need for A compliance lead wants to aggregate and prioritize security findings against checks in one view. The appropriate AWS Security Hub applies because Security Hub centralizes and prioritizes security findings and can run security best-practice checks.

AWS KMS manages encryption keys and related permissions. This does not address the need for A compliance lead wants to aggregate and prioritize security findings against checks in one view. The appropriate AWS Security Hub applies because Security Hub centralizes and prioritizes security findings and can run security best-practice checks.

AWS Certificate Manager manages public or private TLS certificates for supported applications and integrations. That does not meet the requirement: A technical reviewer evaluates this need: A data platform requires centralized creation, access control and lifecycle management of cryptographic keys.

AWS CloudHSM provides dedicated hardware security modules for customer cryptographic key operations. That does not meet the requirement: A technical reviewer evaluates this need: A data platform requires centralized creation, access control and lifecycle management of cryptographic keys.

AWS Secrets Manager stores and rotates supported application secrets. That does not meet the requirement: A technical reviewer evaluates this need: A data platform requires centralized creation, access control and lifecycle management of cryptographic keys.

AWS CloudHSM provides dedicated hardware security modules for customer cryptographic key operations. This does not address the need for A data platform requires centralized creation, access control and lifecycle management of cryptographic keys. The appropriate AWS Key Management Service applies because AWS KMS manages cryptographic keys and their permitted use for supported encryption workflows.

AWS Certificate Manager manages public or private TLS certificates for supported applications and integrations. This does not address the need for A data platform requires centralized creation, access control and lifecycle management of cryptographic keys. The appropriate AWS Key Management Service applies because AWS KMS manages cryptographic keys and their permitted use for supported encryption workflows.

AWS Secrets Manager stores and rotates supported application secrets. This does not address the need for A data platform requires centralized creation, access control and lifecycle management of cryptographic keys. The appropriate AWS Key Management Service applies because AWS KMS manages cryptographic keys and their permitted use for supported encryption workflows.

AWS CloudHSM provides dedicated hardware security modules for customer cryptographic key operations. That does not meet the requirement: A company wants encryption keys integrated with supported AWS services and fine-grained key policies.

AWS Secrets Manager stores and rotates supported application secrets. That does not meet the requirement: A company wants encryption keys integrated with supported AWS services and fine-grained key policies.

AWS Certificate Manager manages public or private TLS certificates for supported applications and integrations. That does not meet the requirement: A company wants encryption keys integrated with supported AWS services and fine-grained key policies.

AWS Secrets Manager stores and rotates supported application secrets. This does not address the need for A company wants encryption keys integrated with supported AWS services and fine-grained key policies. The appropriate AWS Key Management Service applies because AWS KMS manages cryptographic keys and their permitted use for supported encryption workflows.

AWS CloudHSM provides dedicated hardware security modules for customer cryptographic key operations. This does not address the need for A company wants encryption keys integrated with supported AWS services and fine-grained key policies. The appropriate AWS Key Management Service applies because AWS KMS manages cryptographic keys and their permitted use for supported encryption workflows.

AWS Certificate Manager manages public or private TLS certificates for supported applications and integrations. This does not address the need for A company wants encryption keys integrated with supported AWS services and fine-grained key policies. The appropriate AWS Key Management Service applies because AWS KMS manages cryptographic keys and their permitted use for supported encryption workflows.