Exam Bundle

AWS CloudTrail records API requests and account management events. This does not address the need for A company wants to deploy consistent firewall rules across multiple AWS accounts and resources. The appropriate AWS Firewall Manager applies because Firewall Manager centrally manages compatible protection policies across an AWS organization.

AWS KMS manages encryption keys and related permissions. This does not address the need for A company wants to deploy consistent firewall rules across multiple AWS accounts and resources. The appropriate AWS Firewall Manager applies because Firewall Manager centrally manages compatible protection policies across an AWS organization.

AWS Artifact supplies compliance reports and agreements. This does not address the need for A company wants to deploy consistent firewall rules across multiple AWS accounts and resources. The appropriate AWS Firewall Manager applies because Firewall Manager centrally manages compatible protection policies across an AWS organization.

AWS Artifact supplies compliance reports and agreements. That does not meet the requirement: A central security team needs organization-wide policy management for WAF and related protections.

AWS KMS manages encryption keys and related permissions. That does not meet the requirement: A central security team needs organization-wide policy management for WAF and related protections.

AWS CloudTrail records API requests and account management events. That does not meet the requirement: A central security team needs organization-wide policy management for WAF and related protections.

AWS CloudTrail records API requests and account management events. This does not address the need for A central security team needs organization-wide policy management for WAF and related protections. The appropriate AWS Firewall Manager applies because Firewall Manager centrally manages compatible protection policies across an AWS organization.

AWS KMS manages encryption keys and related permissions. This does not address the need for A central security team needs organization-wide policy management for WAF and related protections. The appropriate AWS Firewall Manager applies because Firewall Manager centrally manages compatible protection policies across an AWS organization.

AWS Artifact supplies compliance reports and agreements. This does not address the need for A central security team needs organization-wide policy management for WAF and related protections. The appropriate AWS Firewall Manager applies because Firewall Manager centrally manages compatible protection policies across an AWS organization.

AWS KMS manages encryption keys and related permissions. That does not meet the requirement: Consider this AWS requirement: A risk team needs security control findings consolidated across multiple AWS services.

AWS CloudTrail records API requests and account management events. That does not meet the requirement: Consider this AWS requirement: A risk team needs security control findings consolidated across multiple AWS services.

AWS Artifact supplies compliance reports and agreements. That does not meet the requirement: Consider this AWS requirement: A risk team needs security control findings consolidated across multiple AWS services.

AWS Artifact supplies compliance reports and agreements. This does not address the need for A risk team needs security control findings consolidated across multiple AWS services. The appropriate AWS Security Hub applies because Security Hub helps aggregate security findings and evaluate specified security controls.

AWS CloudTrail records API requests and account management events. This does not address the need for A risk team needs security control findings consolidated across multiple AWS services. The appropriate AWS Security Hub applies because Security Hub helps aggregate security findings and evaluate specified security controls.

AWS KMS manages encryption keys and related permissions. This does not address the need for A risk team needs security control findings consolidated across multiple AWS services. The appropriate AWS Security Hub applies because Security Hub helps aggregate security findings and evaluate specified security controls.

AWS KMS manages encryption keys and related permissions. That does not meet the requirement: An auditor wants a high-level view of security posture and best-practice checks.

AWS CloudTrail records API requests and account management events. That does not meet the requirement: An auditor wants a high-level view of security posture and best-practice checks.

AWS Artifact supplies compliance reports and agreements. That does not meet the requirement: An auditor wants a high-level view of security posture and best-practice checks.

AWS Artifact supplies compliance reports and agreements. This does not address the need for An auditor wants a high-level view of security posture and best-practice checks. The appropriate AWS Security Hub applies because Security Hub helps aggregate security findings and evaluate specified security controls.

AWS KMS manages encryption keys and related permissions. This does not address the need for An auditor wants a high-level view of security posture and best-practice checks. The appropriate AWS Security Hub applies because Security Hub helps aggregate security findings and evaluate specified security controls.

AWS CloudTrail records API requests and account management events. This does not address the need for An auditor wants a high-level view of security posture and best-practice checks. The appropriate AWS Security Hub applies because Security Hub helps aggregate security findings and evaluate specified security controls.

AWS Artifact supplies compliance reports and agreements. That does not meet the requirement: A technical reviewer evaluates this need: A company wants service recommendations across cost, security, fault tolerance and service limits.

AWS CloudTrail records API requests and account management events. That does not meet the requirement: A technical reviewer evaluates this need: A company wants service recommendations across cost, security, fault tolerance and service limits.

Amazon CloudWatch: CloudWatch collects operational metrics and logs and supports alarms and dashboards. That does not meet the requirement: A technical reviewer evaluates this need: A company wants service recommendations across cost, security, fault tolerance and service limits.

AWS Artifact supplies compliance reports and agreements. This does not address the need for A company wants service recommendations across cost, security, fault tolerance and service limits. The appropriate AWS Trusted Advisor applies because Trusted Advisor evaluates AWS account resources against supported best-practice checks, subject to plan entitlements.

Amazon CloudWatch: CloudWatch collects operational metrics and logs and supports alarms and dashboards. This does not address the need for A company wants service recommendations across cost, security, fault tolerance and service limits. The appropriate AWS Trusted Advisor applies because Trusted Advisor evaluates AWS account resources against supported best-practice checks, subject to plan entitlements.

AWS CloudTrail records API requests and account management events. This does not address the need for A company wants service recommendations across cost, security, fault tolerance and service limits. The appropriate AWS Trusted Advisor applies because Trusted Advisor evaluates AWS account resources against supported best-practice checks, subject to plan entitlements.

Amazon CloudWatch: CloudWatch collects operational metrics and logs and supports alarms and dashboards. That does not meet the requirement: An account owner needs curated best-practice checks rather than raw CPU metrics alone.

AWS CloudTrail records API requests and account management events. That does not meet the requirement: An account owner needs curated best-practice checks rather than raw CPU metrics alone.

AWS Artifact supplies compliance reports and agreements. That does not meet the requirement: An account owner needs curated best-practice checks rather than raw CPU metrics alone.

AWS CloudTrail records API requests and account management events. This does not address the need for An account owner needs curated best-practice checks rather than raw CPU metrics alone. The appropriate AWS Trusted Advisor applies because Trusted Advisor evaluates AWS account resources against supported best-practice checks, subject to plan entitlements.

Amazon CloudWatch: CloudWatch collects operational metrics and logs and supports alarms and dashboards. This does not address the need for An account owner needs curated best-practice checks rather than raw CPU metrics alone. The appropriate AWS Trusted Advisor applies because Trusted Advisor evaluates AWS account resources against supported best-practice checks, subject to plan entitlements.

AWS Artifact supplies compliance reports and agreements. This does not address the need for An account owner needs curated best-practice checks rather than raw CPU metrics alone. The appropriate AWS Trusted Advisor applies because Trusted Advisor evaluates AWS account resources against supported best-practice checks, subject to plan entitlements.